
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json)
Hash identifier: fhvRdh2xJXgCGC0uK2WYP/8x0fBI4tGTAsahlvfziXo=
Subject key identifier: F2:CF:4A:CB:1F:19:C6:90:F4:17:57:6E:FB:6C:F3:E7:E0:32:4A:EE
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial: 14AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
Manifest number: 1482
Signing time: Thu 16 Apr 2026 16:48:16 +0000
Manifest this update: Thu 16 Apr 2026 16:48:16 +0000
Manifest next update: Thu 23 Apr 2026 16:48:16 +0000
Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: 4h8qxfSAHYyBX1CWrvKsAuHDHRffSi7SJ1rLvzqwVJ4=)
2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: 5RNyMR+3G/bk8qvZSiyds5uiwVr/sSQ5ExXQPxGSzo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5292 (0x14ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Validity
Not Before: Apr 16 16:48:16 2026 GMT
Not After : Apr 23 16:48:16 2026 GMT
Subject: CN=69e112d0-c585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:ff:80:65:82:c3:ff:e7:92:d3:66:c1:c8:
2e:62:26:67:18:38:f2:c9:9f:62:ee:63:8d:d4:80:
ae:0b:10:10:8b:6b:6e:d1:32:10:9b:fd:d5:11:18:
d5:ef:03:19:e2:a7:a9:2d:a3:71:59:1c:ab:3f:10:
7e:08:70:11:09:a4:08:6f:e6:88:2f:27:1a:c0:57:
38:c7:91:4a:97:45:71:8f:17:68:fc:62:96:f2:bf:
ef:55:4c:c5:fb:ba:ab:df:d8:aa:50:48:96:08:9e:
70:9c:47:d8:14:27:40:e4:5c:70:6b:38:c5:17:3b:
05:7f:9e:b0:6d:fa:5f:28:d1:6b:25:70:05:61:8a:
10:f4:03:f5:27:92:ce:bb:c2:9f:b9:cf:8c:18:d5:
69:67:e2:c8:72:e7:23:e4:35:e5:4a:b0:c1:d5:45:
94:eb:ba:70:5d:e1:01:95:80:18:4a:47:55:f4:a5:
4d:b0:82:92:e1:3e:77:b1:2f:52:78:51:42:ea:86:
0d:e1:54:e9:40:3e:69:c5:4b:69:50:0e:d6:2e:a2:
21:0c:70:49:cb:98:2b:a1:26:5c:81:4e:f3:b1:f8:
c8:4e:88:b4:5c:1d:cd:6a:5d:c3:ff:fc:62:77:c3:
8b:3c:14:2d:df:84:88:5a:99:07:b5:d4:a3:b3:95:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:4A:CB:1F:19:C6:90:F4:17:57:6E:FB:6C:F3:E7:E0:32:4A:EE
X509v3 Authority Key Identifier:
keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:54:65:8f:1a:09:74:ba:60:ef:2a:10:2d:a0:58:54:ae:
c1:12:75:0a:cd:c8:a0:97:9d:99:a8:f5:81:7b:18:49:5a:c9:
cf:ec:88:5d:c4:79:d1:d3:bf:63:36:d3:0d:9c:a8:be:56:ed:
70:5e:e7:21:6c:1a:9a:f2:1c:21:66:d0:21:80:2f:3b:56:5d:
df:31:07:16:1a:74:3e:ee:0a:f1:5a:a9:82:24:9e:69:bb:17:
4b:5a:a9:6b:51:1c:c3:f0:a1:f8:61:ee:50:f8:e5:f2:02:8c:
e5:b2:15:05:16:19:a6:16:47:96:28:2e:03:74:d3:c7:ad:57:
4b:3c:a7:d7:4e:51:6c:98:23:63:ec:c2:aa:f6:2c:06:f1:9b:
e2:a5:b0:7f:26:d4:6e:99:67:bc:e5:50:ee:d4:4a:98:0b:32:
0f:7b:7f:96:0b:34:f0:d4:ae:c9:4f:83:d0:62:5f:76:43:1e:
75:8b:93:50:b7:01:37:ec:0f:68:6f:48:79:ea:77:3a:1b:46:
76:11:54:69:6e:95:9f:77:e0:6a:48:2c:bb:1e:af:f5:af:71:
bf:75:a5:52:1c:70:d4:eb:0b:17:e2:39:08:f5:cf:3f:d6:72:
d7:8f:c5:63:d7:7e:49:b3:ab:ea:aa:05:a5:bf:0f:c1:55:52:
ee:50:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:22 2026 by rpki-client