
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier: yOG4Wvgs+6LG1gFXMdYO2NY89XhWkEyuwV4jtqxISYA=
Subject key identifier: 14:3B:93:5D:EB:B8:17:37:8E:B7:AA:18:4B:1D:6A:C4:79:F5:73:5C
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0ABE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number: 0A7E
Signing time: Thu 16 Apr 2026 19:33:40 +0000
Manifest this update: Thu 16 Apr 2026 19:33:39 +0000
Manifest next update: Thu 23 Apr 2026 19:33:39 +0000
Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: o9csAvB2Ka+1CTfSDcfCt0wAHLi8DLi58CwtuaGSKQI=)
2: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=)
3: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=)
4: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=)
5: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=)
6: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Apr 16 19:33:39 2026 GMT
Not After : Apr 23 19:33:39 2026 GMT
Subject: CN=69e13993-d372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e0:0f:33:aa:7a:f4:8c:da:8c:71:19:a9:3a:
f9:0e:11:26:72:a0:ed:8f:1d:0f:be:45:ce:e6:ee:
b2:09:83:a8:c0:93:09:fb:3f:9e:cb:fb:a4:e2:21:
8c:bd:02:b0:b0:29:48:52:83:90:b7:c1:ec:32:b5:
ae:0d:6d:1b:25:5f:4c:29:2f:54:3c:70:21:a6:a6:
49:ba:03:0a:f2:e0:0e:1f:76:63:7a:04:d8:02:c5:
84:8c:2d:60:4f:c4:72:74:7b:1a:b1:7e:49:78:19:
82:80:1e:ca:33:65:2e:d4:80:91:dc:24:9e:18:66:
90:67:cc:00:d5:a4:98:00:01:53:dd:a8:37:b7:eb:
db:75:93:39:67:07:24:8c:5f:0d:89:d3:4d:ed:cc:
e7:3a:66:52:d0:ba:0f:a5:e4:bd:a3:f3:c7:c0:e7:
97:95:0d:cd:4a:89:3c:91:95:bf:d3:96:c0:97:3e:
74:44:d9:0d:61:90:01:e5:7e:36:69:18:e5:64:cb:
a8:cb:1e:fe:f2:6e:a4:13:b1:91:df:f5:06:e9:78:
e8:c3:ec:01:b0:d6:e9:04:2c:08:fd:b6:9e:dd:8d:
ea:a4:61:c8:86:c3:cd:cb:ed:ca:bc:a6:6d:db:51:
13:21:55:03:fe:fc:a2:4a:cd:c5:ab:ea:b2:6b:6d:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:93:5D:EB:B8:17:37:8E:B7:AA:18:4B:1D:6A:C4:79:F5:73:5C
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:91:18:f9:f7:ad:96:e3:a9:ec:d3:6d:d9:91:6f:d7:28:f0:
8d:cb:e1:ab:eb:27:52:29:d3:c0:da:c1:d0:6a:10:1a:15:ef:
65:ac:f5:2a:ff:c1:21:52:9a:5e:e1:35:d5:36:4b:cd:08:b5:
a1:e2:1d:28:ba:19:94:05:e3:21:a5:49:23:6a:3c:34:13:95:
c1:58:0d:8b:15:61:ff:0b:74:4e:ee:f0:eb:0a:70:b1:af:7e:
66:38:5a:7a:03:42:31:c5:8b:92:5f:24:0a:81:b9:78:e7:ad:
1b:8f:b3:67:37:9e:38:60:44:0f:b8:32:82:cd:a2:5f:ae:39:
17:2b:64:2a:4c:bc:9d:35:7d:6d:f0:11:49:92:e1:5f:fa:f6:
56:c9:cc:6d:c5:13:ab:0d:bb:7a:9d:7c:61:10:63:64:ce:4d:
a7:7e:01:d1:62:f0:3c:db:bd:35:e1:f7:7d:56:70:81:99:2b:
0a:10:d0:06:c5:73:f5:ac:ac:96:04:07:49:2f:bc:b7:f1:d5:
8d:39:9b:7b:f0:38:27:a5:11:a0:f4:02:b7:1c:30:29:da:f8:
46:a6:10:45:32:b3:37:1b:c6:de:82:14:35:96:2c:41:54:c2:
08:9b:a5:3c:8d:fd:a8:70:6c:12:df:a1:56:48:d3:30:fe:42:
8a:5f:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:53 2026 by rpki-client