
$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier: qkBOOlZ9lmWBk0DkgqXSPrXSu1osuiDzmKGDMiGnKpQ=
Subject key identifier: ED:6A:54:05:FE:CB:4D:D9:44:F5:3F:BB:48:49:7F:29:F8:02:2B:74
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial: 034B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number: 033D
Signing time: Thu 21 May 2026 01:09:41 +0000
Manifest this update: Thu 21 May 2026 01:09:41 +0000
Manifest next update: Thu 28 May 2026 01:09:41 +0000
Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: ev/aaOv3ujku17jCStd178ZaHiMPZKamaxi6rwCFGP4=)
2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: yNX1Hr9oIcR58b1nEt7c5c8aU3fBu8ibYkFmNG/a1UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Validity
Not Before: May 21 01:09:41 2026 GMT
Not After : May 28 01:09:41 2026 GMT
Subject: CN=6a0e5b55-209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:43:1b:36:3c:99:78:b7:c2:b2:15:ab:be:
1e:88:02:c1:e7:85:47:3d:01:4b:a6:65:8b:b1:d6:
05:47:ed:29:5d:89:52:25:87:38:e3:c9:7e:00:1f:
5d:94:ed:d4:31:09:b6:81:28:20:82:1d:79:13:0f:
ad:9e:ed:f3:ea:22:a1:b5:9d:09:5d:53:bb:07:63:
ee:83:69:ff:91:53:36:d2:6e:83:0a:1b:68:9a:eb:
79:b8:e3:1a:be:37:81:c7:f6:11:df:30:14:b5:82:
73:7c:33:fa:8c:60:02:01:84:3c:d8:61:a8:5e:d4:
6a:4d:24:7f:84:9c:f5:dc:c7:a0:d6:b7:2a:c0:71:
8c:a9:52:7b:79:d6:d8:6a:8b:00:d0:59:71:79:cc:
52:6d:ab:fb:28:f0:84:47:d4:ed:b3:af:67:04:5c:
bc:79:b5:88:5a:d9:7b:b1:3e:5f:13:41:23:4b:c5:
d4:37:75:fa:12:70:3b:4d:3d:0d:1f:de:22:57:ec:
fc:73:d8:4c:5b:4d:46:e0:f2:8f:63:40:eb:b1:31:
a8:0c:99:63:e2:f0:b8:9c:f3:11:f9:57:1b:e2:f2:
f1:91:ec:39:5e:ae:dc:7e:4d:c8:6c:64:e6:d5:61:
b9:f0:bc:53:b7:58:8d:3e:3c:b4:93:f0:b7:87:b6:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:54:05:FE:CB:4D:D9:44:F5:3F:BB:48:49:7F:29:F8:02:2B:74
X509v3 Authority Key Identifier:
keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0b:0d:13:dc:06:19:a7:42:84:f7:71:45:41:6b:b9:1e:69:
e3:49:ad:92:e6:7c:90:f7:c3:68:49:f7:e6:a3:02:30:61:e9:
e5:99:42:95:e7:f7:db:16:a2:ca:d4:e7:97:41:0c:12:83:03:
14:42:3a:52:d3:9e:08:61:c9:2e:c0:a5:9f:30:4f:11:c1:a5:
c0:57:d7:1e:ab:35:2f:c6:9e:76:fd:01:b7:01:af:b9:f5:1e:
40:af:2e:64:9f:f8:73:a9:0b:65:06:9c:ad:00:8f:05:b1:90:
7e:13:7c:b9:dd:e5:b9:0d:54:0d:f7:6f:c3:e3:17:e2:e4:b5:
fc:37:93:40:03:72:0e:81:0f:07:46:a7:08:5e:dd:45:60:0c:
4a:a8:25:6d:e0:1b:4f:b0:ef:f7:7b:bf:bd:a6:c8:6a:f8:cd:
8a:6f:fa:51:e2:5f:02:28:f9:e0:dc:8b:26:99:90:6f:1f:e6:
85:b2:72:8f:cc:81:7c:4f:55:3f:19:98:95:bc:ea:e3:32:ab:
45:10:70:15:87:11:ac:9e:c4:78:fc:cb:14:5b:d6:4b:ac:bd:
6d:12:e1:65:49:b5:f7:03:5a:56:d1:4b:1c:11:88:ef:02:7d:
c4:1d:09:b3:14:69:b5:d5:f0:8b:94:89:78:81:9e:29:5a:3d:
bf:bf:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:53 2026 by rpki-client