
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
File: XDlbosoKv2WIhyaHTHgktpt4mZU.mft (raw, json)
Hash identifier: Mm7oq/+1LyubomGe2wYfc4xrudrqIO2Z678D585oBXQ=
Subject key identifier: 80:BF:D9:F5:6B:80:FC:7C:C4:63:A3:8F:04:2E:49:75:59:E9:93:47
Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Certificate serial: 0F22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
Manifest number: 0F13
Signing time: Mon 20 Jul 2026 17:48:05 +0000
Manifest this update: Mon 20 Jul 2026 17:48:05 +0000
Manifest next update: Mon 27 Jul 2026 17:48:05 +0000
Files and hashes: 1: XDlbosoKv2WIhyaHTHgktpt4mZU.crl (hash: VB4XBW71WAYXXoYax1Koubp9ZS7G4EzCiRT6bm8Wq3I=)
2: AECDA1B0448F11EDACC30815C4F9AE02.roa (hash: Vv+ic3tuHHAEO62okYNeBPpK0SKMbTv6XBExdyT6xHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3874 (0xf22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E66E5, serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995
Validity
Not Before: Jul 20 17:48:05 2026 GMT
Not After : Jul 27 17:48:05 2026 GMT
Subject: CN=6a5e5f55-720e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:91:38:30:01:a7:d2:5e:9f:e9:87:aa:79:
a6:a3:71:5b:a1:0d:43:a8:b0:a6:46:ca:98:78:ee:
f3:cb:05:aa:c9:d3:25:51:2d:93:28:bb:79:17:10:
41:ae:29:49:7a:b6:b0:b3:9a:9e:b9:7d:58:fe:ea:
41:8c:86:21:ac:2f:ee:42:1a:9e:6d:fd:b5:c5:ae:
c1:41:10:7f:d9:fd:54:83:e0:ae:e5:2d:69:00:4c:
e2:e0:d6:f5:2c:b4:e6:df:bf:6f:b3:06:0e:df:3a:
00:76:49:c6:40:f7:4d:fa:ac:95:dd:fb:3c:18:62:
23:32:e7:56:b7:81:9b:81:b7:95:2d:49:d8:79:28:
de:a6:6d:8d:f3:8b:f8:fd:2e:16:7c:4c:c2:39:89:
92:82:7e:76:de:0c:da:17:ee:8e:fc:6e:cb:ab:45:
11:09:c7:71:c7:2e:74:bb:d4:b3:c1:61:95:a8:a1:
bc:17:27:cd:5a:b4:9d:21:c1:d8:16:d8:cd:cd:68:
00:5a:3a:2c:ec:89:76:d8:0b:da:df:08:9b:53:e3:
3f:a9:45:1a:3e:c4:aa:7e:0d:7e:8e:fe:f9:cc:94:
9e:41:ba:9f:aa:0a:2d:87:df:7b:59:d8:73:9d:0b:
d7:cc:89:5e:3d:6f:fe:54:54:b5:76:4b:82:d8:f0:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BF:D9:F5:6B:80:FC:7C:C4:63:A3:8F:04:2E:49:75:59:E9:93:47
X509v3 Authority Key Identifier:
keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:00:61:85:2e:37:87:47:c0:e4:58:4f:77:46:29:59:70:
91:a6:5e:71:68:d9:4e:69:04:93:53:12:db:c4:ab:f3:17:fa:
41:91:dc:bd:29:cb:32:45:54:b8:cd:37:36:92:d0:f3:91:b0:
9a:5e:49:bf:6a:2e:7f:6e:5a:06:d1:ef:d8:c6:2c:4c:ae:ef:
7d:2d:5a:38:23:32:67:d8:1b:3c:bb:34:ba:d9:f5:f0:01:54:
0a:37:b9:fb:4f:a0:5b:f3:3d:33:f2:56:0f:2e:42:dc:ef:3b:
49:41:e5:c5:a3:85:3f:d9:1f:f3:7c:6a:43:6c:fa:79:82:06:
db:e2:1f:5f:8a:e7:73:e9:33:c7:a5:1a:94:02:b1:67:70:f1:
6d:e7:71:7f:d5:a4:a6:82:95:61:4f:95:8d:d5:63:69:f3:b8:
fe:4d:55:7a:61:c2:ca:f5:33:96:8c:d5:18:b1:fc:b9:1e:01:
25:c2:2f:41:f6:89:92:f7:8c:b1:7c:82:74:27:5d:c9:90:6c:
3a:1f:eb:5a:07:02:76:3d:7b:bf:44:bb:ad:69:82:31:9c:5d:
03:dc:46:e5:f2:77:69:91:c6:4a:11:df:80:55:d8:6d:d7:37:
5b:e6:ec:0e:60:b1:c6:41:2f:e8:bb:25:ae:41:18:e5:27:df:
31:3f:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:59 2026 by rpki-client