
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier: BDoZTPuKnaM/3XXGGtVP/4A7IdUZEhtmVgSc0NH0J4Y=
Subject key identifier: 9B:D5:E6:96:84:48:26:77:47:D0:25:53:F6:2C:49:C7:AC:72:7A:19
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 13EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number: 49AF
Signing time: Sat 10 Oct 2026 14:21:01 +0000
Manifest this update: Sat 10 Oct 2026 14:21:00 +0000
Manifest next update: Sat 17 Oct 2026 14:21:00 +0000
Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: 9Fz/4n98gcD5J1sUYk4VMBQbDL3JFDlTUzqo5mZZ6aA=)
2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: o4HBq1xgFGnSG/Ii6CzGWaOkXzqOYR+uaeJex6SII34=)
3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 4gjKi2/J4gdMF9qCPU0QoCnTz/IPP0XSqH8g8egd1HI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5100 (0x13ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Oct 10 14:21:00 2026 GMT
Not After : Oct 17 14:21:00 2026 GMT
Subject: CN=6aca49cc-f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:60:f1:6b:1a:e0:83:48:c4:e7:fc:64:50:
d7:57:10:0a:37:5b:fb:60:c1:31:67:2b:45:ff:03:
dd:8b:fb:63:03:08:df:64:c4:b4:eb:01:c6:d5:17:
f0:b3:d2:92:32:88:09:ad:02:77:87:38:af:9a:36:
6b:c5:a3:0f:fd:67:4e:13:d0:72:50:86:c1:0b:25:
04:c6:9a:a0:d4:8b:bf:7c:6d:09:5d:67:4c:c7:16:
f0:e8:8e:f2:ea:78:b8:c2:39:63:7b:f1:a0:87:ab:
8a:44:4e:da:fc:78:f6:a1:87:e6:3d:a9:73:3f:5b:
1e:4b:2a:08:7c:c0:13:8b:27:cc:ed:09:09:f5:7e:
b9:24:c5:a5:94:2f:52:38:b4:63:5f:b3:f8:dc:14:
34:19:81:b4:2d:8f:00:eb:1b:21:27:e2:67:00:b9:
84:04:ad:18:75:5c:0a:f5:a9:d5:2f:b8:a9:c0:f2:
c9:07:be:41:d4:c3:a8:6e:2f:fd:a7:53:28:b9:e8:
52:cf:00:86:32:df:fb:5b:74:8b:e1:39:22:56:1e:
35:52:7e:30:d2:53:01:45:da:67:5b:30:e6:17:81:
04:d4:60:db:19:25:10:ff:6e:fc:c9:0f:2a:4e:d6:
41:8b:0c:9a:13:04:3f:b1:1c:3c:3f:10:0c:46:b9:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:E6:96:84:48:26:77:47:D0:25:53:F6:2C:49:C7:AC:72:7A:19
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:41:6c:56:ee:07:b5:a8:8b:59:94:05:de:16:dd:5e:aa:98:
d3:89:9d:14:49:c7:3b:1b:bf:c4:c9:1b:e3:34:01:1e:24:12:
e4:06:ad:9a:98:54:46:89:54:9e:cb:22:ba:15:6c:78:f2:f7:
a9:9e:09:12:e8:96:8b:98:a5:7c:22:84:18:56:da:b3:ee:0d:
c0:7d:16:ea:9b:7c:fc:77:d9:ba:5d:c5:bb:2b:7b:09:0c:bb:
dc:1c:1d:42:4f:fb:a5:3d:63:9a:8e:f6:53:a8:69:0c:7b:ed:
c6:54:ce:9e:30:f1:e3:22:14:f2:df:c5:5f:c4:1f:c2:90:99:
b8:a0:57:6d:82:58:1a:92:37:59:4a:e9:e3:e8:b4:5d:dd:73:
7e:fb:50:a5:f1:1a:72:91:71:ec:ce:2c:f3:08:03:05:92:52:
23:ec:0b:42:89:ec:fb:6a:89:1d:fb:be:d1:11:6b:2d:3f:0f:
24:cf:9a:50:50:32:2b:18:ac:b3:41:4c:fd:94:30:11:f6:b1:
fc:e0:1b:19:2d:3e:b1:05:71:e6:ec:ef:c9:e8:e5:3b:03:24:
2a:62:d2:24:ff:58:ef:33:db:09:70:b0:58:43:50:b1:87:16:
f9:bb:1d:fe:ba:a4:86:61:19:2b:ea:a4:f1:bb:89:07:de:da:
8c:5b:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:53:25 2026 by rpki-client