
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier: R2J78F+MF7jKe2phDSlKHIifaClZxju+C6j35kksV/4=
Subject key identifier: 78:12:74:DC:EF:FF:25:DC:5C:FD:03:0F:A0:B9:B0:26:44:64:FC:E6
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number: 0540
Signing time: Thu 16 Apr 2026 23:23:49 +0000
Manifest this update: Thu 16 Apr 2026 23:23:48 +0000
Manifest next update: Thu 23 Apr 2026 23:23:48 +0000
Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: 5eycxlZH/BQ/RXLcJmYUzU9bIE+vKtAp93Ms53LcrO4=)
2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Validity
Not Before: Apr 16 23:23:48 2026 GMT
Not After : Apr 23 23:23:48 2026 GMT
Subject: CN=69e16f85-7dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:39:0e:66:41:71:23:15:24:e3:37:1d:66:
9c:c8:71:56:8c:89:55:d5:d9:ff:35:3d:6d:38:ec:
10:8d:94:a5:dd:19:6b:89:a6:eb:df:f8:88:9a:37:
0b:fc:4b:74:f2:64:38:89:2c:62:53:19:a1:03:88:
9e:36:ff:86:f0:83:3d:6d:72:78:b1:4a:e1:c8:85:
08:84:8b:bf:4b:ab:8e:15:06:9c:09:03:30:73:80:
c0:64:7b:08:5a:1f:a4:2e:eb:86:ff:20:9e:d0:f3:
6a:29:ea:b6:f2:67:e6:bf:0f:01:f5:49:dd:38:4b:
c3:f5:62:e8:4d:25:92:3c:b5:e7:ea:b8:e5:bd:22:
2d:7b:2c:33:64:75:62:ca:95:b1:d4:78:47:d3:e3:
bd:c4:2a:a3:a1:d1:4f:66:75:3b:62:ee:bc:d3:d7:
eb:ff:a8:c9:85:c6:a1:b6:07:e3:e1:27:6e:35:77:
60:36:ac:0f:dd:d3:c5:3c:a8:7e:ca:cb:f9:f9:00:
4f:9a:60:7d:c4:69:a6:88:ea:7b:e3:8a:6d:df:24:
a2:3b:de:36:22:d8:ca:e8:85:f4:a8:0b:35:68:d0:
20:16:22:70:5f:e3:b3:77:cc:65:00:d2:c5:b9:68:
cf:04:ef:c0:17:b0:79:82:89:3e:e2:3f:05:0d:f9:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:74:DC:EF:FF:25:DC:5C:FD:03:0F:A0:B9:B0:26:44:64:FC:E6
X509v3 Authority Key Identifier:
keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:02:1f:32:56:55:b2:96:50:cd:a9:a7:39:cd:15:3b:54:06:
ce:f5:37:76:9e:0f:32:ad:5a:6a:c3:b0:cb:72:67:f6:d8:35:
80:04:73:b1:16:86:a9:ac:ee:c8:cf:02:6b:5b:07:2d:e5:e5:
0c:10:55:66:d2:96:47:f1:bc:11:64:07:bd:db:d8:8a:b8:65:
77:c2:a2:9c:0d:a6:26:1f:56:5e:7c:96:9d:4b:46:e5:fe:da:
a5:f4:e9:16:73:91:c4:81:b7:84:e1:c6:85:97:79:a9:ab:1d:
08:8c:05:56:92:e9:1a:27:f5:c1:c9:10:dc:16:af:d4:ae:1d:
63:31:c9:91:eb:84:43:7b:fb:25:f3:d8:df:54:b4:72:79:de:
5f:37:48:69:cf:75:f8:bb:03:bb:0f:78:f1:aa:ce:be:47:be:
32:d6:53:60:f6:74:c3:6d:c1:44:59:2b:e7:61:b4:ec:5f:ac:
e0:02:a7:66:fe:d5:67:05:e9:54:4e:18:33:99:27:9a:1d:44:
fd:b3:c0:6e:29:39:1f:f2:a0:ee:bd:99:2e:ea:4b:de:57:20:
bc:d5:56:45:5c:05:d9:e0:fa:5b:5b:1d:77:61:ca:4e:6b:94:
10:a8:61:fa:33:4f:e0:ae:dc:16:f7:ef:cd:1e:f3:da:3f:b2:
13:a6:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:35 2026 by rpki-client