
$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
File: RXfmNryC40djCTad9uzHkOsrkUU.mft (raw, json)
Hash identifier: yPbi35mNp1X8dizzzCprzgPOAohk0sjJyuLtKEw8au4=
Subject key identifier: B7:B1:6F:9B:FA:C0:AB:BC:48:B7:54:95:26:2B:74:48:D1:CF:CB:59
Authority key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
Certificate issuer: /CN=A91614E3/serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
Manifest number: 0F
Signing time: Tue 19 May 2026 08:58:00 +0000
Manifest this update: Tue 19 May 2026 08:57:59 +0000
Manifest next update: Tue 26 May 2026 08:57:59 +0000
Files and hashes: 1: RXfmNryC40djCTad9uzHkOsrkUU.crl (hash: XoPVHV22hXiixeqIMJ8JHGG/d/2dWhqAtvFZCFVXzRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl
rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Validity
Not Before: May 19 08:57:59 2026 GMT
Not After : May 26 08:57:59 2026 GMT
Subject: CN=6a0c2618-cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:de:67:5b:cd:99:9c:18:c4:cf:93:27:7d:
fa:08:20:5f:00:65:47:84:f7:21:60:c2:a9:5f:b8:
56:94:6e:bd:1d:cd:d9:a7:92:6c:27:d6:e8:0b:89:
0f:f1:b7:96:0f:69:b4:00:0e:44:f2:82:87:bc:51:
59:dc:42:83:af:f0:66:59:48:68:b0:93:85:2d:9c:
3e:55:45:31:b6:75:da:a6:d9:b4:57:86:a4:76:f6:
08:47:cd:38:36:fa:d1:0d:74:a6:24:fb:49:ea:7f:
ee:50:ef:54:43:da:ca:08:9e:d5:60:54:c4:f0:fd:
dd:3b:0d:13:1f:35:e3:13:8c:61:21:46:d0:dc:a4:
87:9d:af:2d:40:44:ae:a2:dd:55:9f:a3:82:27:f5:
3f:a8:d3:66:5e:93:e3:03:df:ad:7c:4c:63:28:21:
1a:a9:05:34:a1:bf:df:b3:19:6f:b3:0b:87:8a:55:
64:88:00:56:ea:e1:1d:e1:7b:c2:66:73:db:db:c1:
62:90:6d:08:ba:6d:12:32:a6:63:1f:51:e5:f0:29:
a8:55:30:fd:b4:7a:1b:ca:27:e8:ad:97:3c:45:ce:
8d:6b:7f:3c:e9:17:6f:c8:a4:ff:ff:8d:bf:76:11:
44:a5:2f:83:25:56:d6:71:65:a2:52:2a:87:ef:42:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:6F:9B:FA:C0:AB:BC:48:B7:54:95:26:2B:74:48:D1:CF:CB:59
X509v3 Authority Key Identifier:
keyid:45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:aa:97:0f:8b:03:cb:ef:83:99:11:82:72:24:e5:37:cf:2d:
28:97:61:cd:05:6e:c6:e9:26:80:cf:6c:f5:85:95:c5:bd:41:
6d:63:2f:48:b1:e1:49:a6:cb:59:01:35:a1:22:89:7e:19:b5:
1a:1d:07:a9:e0:90:82:4e:93:7a:cc:91:d3:73:f5:c4:b5:f2:
b9:e4:eb:35:56:54:f7:38:d5:62:5c:8d:8e:2f:f5:6a:20:98:
62:95:71:eb:b1:70:b7:17:64:7a:c2:68:0c:ac:cb:4d:9e:84:
20:de:f4:df:2f:5a:41:dc:7b:65:50:d0:c8:e5:11:0c:4d:67:
8d:eb:26:12:66:6a:35:12:5b:da:4d:4e:b1:49:50:12:ea:86:
42:46:54:76:f6:94:c1:65:e4:34:70:e8:db:b9:3d:8c:ca:1c:
66:7a:06:68:81:0f:2a:45:b6:70:71:99:88:0f:3f:9d:5b:76:
44:5d:ad:09:36:53:e5:ca:e7:aa:8e:07:03:4e:4d:2b:80:c8:
5f:e4:8a:60:bc:36:f9:4c:a7:92:c9:c9:ea:76:e0:a9:51:a4:
78:55:5a:bd:13:c8:77:5e:26:ee:fc:04:8e:5b:e3:31:a2:3c:
5e:dc:9b:97:7d:32:55:76:1c:47:9d:0b:f2:03:18:2f:2c:10:
3e:1b:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:21 2026 by rpki-client