
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier: CctpzABijMDpqopXPwxQGuT/Jf7fHKPCy40OnJs0YBU=
Subject key identifier: E3:9C:96:06:32:A1:4E:4D:CA:D9:17:6A:96:69:E2:A0:44:D6:8B:68
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 13AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number: 4932
Signing time: Fri 12 Jun 2026 14:21:04 +0000
Manifest this update: Fri 12 Jun 2026 14:21:03 +0000
Manifest next update: Fri 19 Jun 2026 14:21:03 +0000
Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: jsnQGM3ai16nOkZcnQCA9cPQ56za1yjHo9afFqj/Wuk=)
2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=)
3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5035 (0x13ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Jun 12 14:21:03 2026 GMT
Not After : Jun 19 14:21:03 2026 GMT
Subject: CN=6a2c15cf-024f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:ba:cc:03:30:a4:ab:84:fc:3b:bd:b7:86:
82:ba:53:7b:da:e8:9e:61:4e:4d:f6:30:40:3a:88:
94:7e:ab:42:89:a5:34:9e:67:7b:44:ac:21:49:12:
b4:6e:04:a7:ef:46:a5:c4:44:e4:c6:40:a4:ca:ad:
a6:84:05:5c:83:14:b9:43:63:f0:a2:1b:4b:c9:46:
be:07:9b:cf:72:09:8e:bd:e5:11:14:74:3c:42:c7:
a1:97:e7:c9:4a:67:a1:25:40:18:3e:06:4d:77:6a:
c6:47:55:01:89:92:8c:da:af:00:f4:ae:16:7e:0a:
c9:5a:65:9d:c8:cb:ea:5a:8d:27:4d:92:e4:cd:5f:
d4:65:86:30:c3:76:76:34:a2:0e:c6:80:f1:da:bc:
26:1a:5b:3c:4e:d7:5a:09:2e:95:f2:27:3f:76:b6:
36:b4:34:0f:d5:41:eb:93:dd:5e:a9:9e:d9:1c:2f:
89:8d:8a:51:2c:3a:8a:d6:bb:a9:59:ed:26:ba:b2:
71:e6:74:6a:a9:d8:05:4e:84:47:f4:b6:69:05:d9:
e4:82:c6:36:61:6a:91:e0:cd:2d:a5:ba:ff:51:21:
34:18:a8:4c:ea:6b:f6:77:68:a4:dd:00:f5:94:95:
eb:e3:50:73:3c:d5:9c:73:35:3a:64:64:a2:5f:49:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9C:96:06:32:A1:4E:4D:CA:D9:17:6A:96:69:E2:A0:44:D6:8B:68
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:fd:81:c9:6d:66:6f:d4:02:30:8f:ca:b7:74:e4:67:93:
9f:b7:7f:8c:97:53:8d:cd:8b:20:8c:11:f2:a0:17:8a:23:a7:
d1:5f:ab:87:81:44:93:bd:7a:f7:a8:36:47:f2:f7:91:8b:3a:
49:86:d8:a6:be:e6:55:99:33:19:34:5e:11:83:36:a6:91:5b:
d9:4c:7a:86:3e:5d:4e:31:38:8f:5c:31:df:89:5c:6a:0a:7c:
2f:8c:95:7f:df:1e:13:66:f9:3b:4c:57:f4:30:83:09:c5:ca:
8d:84:18:1d:c9:67:0a:b3:5b:57:75:e8:66:c7:35:d2:95:cb:
82:f4:b7:3c:37:d0:21:a2:8b:09:a4:f6:0e:9e:4f:fe:1f:66:
9b:92:7a:ad:fd:72:b8:38:89:01:17:d2:b8:ec:b7:65:12:89:
c6:00:65:b1:04:05:d6:6a:11:76:94:b5:a0:a0:1f:79:83:91:
6f:6c:d4:ea:c9:de:8c:f5:ea:6e:54:25:30:f1:45:d7:c3:a6:
31:e6:5a:55:df:e8:e0:49:bb:17:25:95:a5:02:d0:89:45:45:
cd:82:bb:4e:74:59:15:54:41:62:d8:e3:8b:95:22:0a:0a:1a:
95:f7:6c:7c:4e:3f:85:7d:26:af:3e:00:57:f6:d4:2d:de:1b:
25:f0:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:27 2026 by rpki-client