
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
File: XUXapVj_ZfZmNblniAm4rPBAc9I.mft (raw, json)
Hash identifier: iX6lL7B/v8NZbmGhlS//e/4v0mlTAwe9P+dQ2W5ng2E=
Subject key identifier: 65:2A:EB:EE:C5:33:99:B3:21:04:3B:B0:9B:4B:E7:5D:39:B6:43:F8
Authority key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
Certificate issuer: /CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
Manifest number: 0684
Signing time: Thu 16 Apr 2026 22:27:26 +0000
Manifest this update: Thu 16 Apr 2026 22:27:26 +0000
Manifest next update: Thu 23 Apr 2026 22:27:26 +0000
Files and hashes: 1: XUXapVj_ZfZmNblniAm4rPBAc9I.crl (hash: BXT1NV5UdAm6CG7PeS9lUmm8uW7TO40B61M2+P3Lckc=)
2: 68A88182237011F191BDBAA2B9833773.roa (hash: jJN2AkLqxp991N6LCfgyPrQsqtyTKtHrIpXKhu8DnZs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl
rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52FD, serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2
Validity
Not Before: Apr 16 22:27:26 2026 GMT
Not After : Apr 23 22:27:26 2026 GMT
Subject: CN=69e1624e-efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:4c:d7:b7:86:de:ea:d6:cd:a5:81:4a:bf:
7e:e6:3d:6b:0d:d5:2a:a2:a4:54:bf:8c:c0:a5:0a:
65:ce:53:bb:20:e8:2b:83:0e:68:b0:0e:25:83:ce:
cb:dc:90:0a:30:df:f9:46:f0:08:d5:29:af:40:67:
80:ca:32:e8:f3:c9:0f:3f:16:01:c2:56:ba:a4:06:
f1:b0:2e:61:98:89:08:95:86:2d:c4:2a:d5:6c:28:
c6:61:59:55:ad:6c:69:b7:2f:a4:b3:00:b6:88:bc:
e5:11:82:19:6e:62:70:04:78:b7:ce:d8:a1:7e:36:
8a:78:e3:c9:73:db:83:53:53:de:97:cb:aa:e8:bd:
0f:19:cd:89:ad:59:97:be:69:44:f0:0e:10:70:ff:
1d:f6:82:11:21:52:7c:b8:37:0c:c4:cd:dd:4f:ae:
d0:67:68:66:8c:69:c5:4f:ab:43:f3:a1:66:f6:fa:
91:81:89:e2:ed:ab:ae:8e:9f:b4:a6:6c:4e:f1:08:
cd:6e:d2:f8:78:68:6b:c3:f1:94:87:5b:5b:ab:42:
60:6a:d6:ef:f6:32:72:fe:a2:a3:da:22:58:32:56:
fd:95:b7:97:e1:06:1c:9d:02:76:3a:c1:13:dc:98:
8a:2a:64:eb:d8:5d:3b:f0:59:c4:ba:a6:6d:a7:c4:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:EB:EE:C5:33:99:B3:21:04:3B:B0:9B:4B:E7:5D:39:B6:43:F8
X509v3 Authority Key Identifier:
keyid:5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:37:c0:d1:49:f6:ca:bb:61:b9:f1:e0:f0:a1:cf:cb:fd:5f:
60:4a:ef:04:82:8d:52:6c:59:d4:7d:49:a5:d7:bf:94:17:35:
e6:57:90:2e:23:58:d2:11:79:4e:de:9b:38:52:83:30:c2:21:
cc:da:c9:95:93:3c:c5:dd:17:d0:59:f7:5b:ea:91:32:8a:5f:
14:21:f3:cb:a2:9e:f9:2d:6f:e1:1e:3b:84:dd:41:80:68:b6:
40:e1:83:4f:5c:50:8f:23:b0:21:79:dc:c9:f1:3a:d8:17:f1:
d6:06:df:ae:ca:01:6d:a7:f6:96:c3:df:5f:cd:2d:e6:3a:d3:
6e:e9:e2:70:83:a5:54:6d:db:b1:c3:7e:37:ce:84:60:f6:0e:
5f:1b:f6:3d:cd:2b:c9:eb:d1:d0:14:f0:43:f0:16:d7:d8:d8:
28:cd:ef:7c:bd:a6:a5:e1:4f:a6:f2:82:6c:41:d0:2d:3d:21:
f8:52:79:04:ac:3a:d3:a6:d6:72:98:ca:43:a2:8b:d3:8a:bf:
c6:58:2f:f0:16:10:15:03:65:53:9b:eb:0a:15:d6:86:be:be:
b2:23:3c:2c:44:38:19:3d:ea:d7:f3:07:d0:3e:f9:78:75:9a:
cf:23:32:74:ea:57:b8:57:05:b2:9a:80:bd:41:1d:13:4d:c7:
aa:f0:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:16 2026 by rpki-client