
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File: XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier: rFEWUUPngjVXFFzk07dQj9gRlXYGSrHNqdwSgp1v2eM=
Subject key identifier: 06:B4:9E:8A:00:72:C6:C2:23:B1:95:D0:C4:07:9C:A7:B8:27:71:0E
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number: 0328
Signing time: Thu 21 May 2026 01:13:19 +0000
Manifest this update: Thu 21 May 2026 01:13:18 +0000
Manifest next update: Thu 28 May 2026 01:13:18 +0000
Files and hashes: 1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: BtjulrSM5R4juPFIWkiT/yFX987ibST2rL9F7sfIab0=)
2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Validity
Not Before: May 21 01:13:18 2026 GMT
Not After : May 28 01:13:18 2026 GMT
Subject: CN=6a0e5c2f-9acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:c7:67:d7:f4:1e:e2:ff:9e:61:ac:77:0b:
f7:3d:65:97:51:2f:09:27:d3:94:ea:a0:0d:19:05:
c4:61:58:10:aa:f1:a5:0c:11:a4:e4:aa:52:ac:7e:
0f:fd:c8:e4:d6:d1:42:cf:9f:3a:85:e5:60:f9:ed:
b0:89:47:ff:51:5e:9c:c6:a5:aa:1d:ed:ca:16:c2:
f1:32:2b:0e:ae:e8:bf:b1:bd:8e:b4:3e:45:4c:89:
0e:67:b5:02:3a:d5:3c:b0:cb:20:73:07:2c:3c:2e:
8c:ab:0e:70:57:65:47:02:7e:d0:57:41:3a:fc:5e:
8b:60:4b:a1:52:18:1e:6d:2c:f6:32:4f:e8:ba:6b:
75:73:83:b0:41:8e:3d:fc:ea:71:7d:6b:2f:ab:2e:
c5:be:22:af:e4:45:74:4c:a5:d5:9f:8b:0a:02:b1:
49:e3:47:68:c9:20:46:70:06:e8:6c:4a:51:a1:30:
14:fc:b5:ce:c0:15:86:18:1e:c4:25:61:b5:d5:0b:
12:1f:1e:c0:10:b9:7e:fa:05:7a:5d:0a:0f:f3:f9:
38:e3:3d:c9:e7:eb:10:af:0d:02:59:41:38:2b:4a:
de:39:bb:42:83:2a:4f:82:7b:12:0f:6e:75:df:56:
92:3c:b3:00:54:38:ca:75:c6:34:5d:7f:cb:06:ee:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:9E:8A:00:72:C6:C2:23:B1:95:D0:C4:07:9C:A7:B8:27:71:0E
X509v3 Authority Key Identifier:
keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:52:19:ee:7a:22:86:18:ff:45:f8:c3:6d:24:43:42:62:4b:
7b:4a:77:4d:70:3c:73:70:a8:e9:b5:80:1c:73:22:5a:f6:cb:
67:e2:40:93:61:8a:a0:2f:f3:a2:ab:b4:e1:63:b9:d1:59:58:
56:a8:8f:cd:59:70:bd:ea:fa:35:94:11:b8:c9:80:cf:af:5d:
b9:c8:59:7b:39:d5:93:3a:d0:ee:9b:e0:e7:b9:2f:d1:2c:11:
d7:6a:3f:38:b8:5a:12:3d:6e:ee:01:cb:e6:44:f9:b4:bc:2f:
4a:12:3c:97:34:67:9c:32:7d:04:d4:7e:12:c5:cb:94:3c:a6:
4d:51:8d:b6:c8:d5:d2:9c:0b:fd:9b:c2:e1:1d:c4:b8:88:78:
9b:c4:e4:ea:68:25:de:06:db:71:74:31:ca:3a:b6:17:26:0c:
08:03:9f:14:6f:04:01:a3:59:25:71:24:14:09:e7:11:e8:0c:
71:da:3b:31:9b:cc:ab:9c:2c:ee:a9:5c:32:00:2c:83:0f:79:
1d:23:cc:8a:5a:88:ae:ea:b6:5a:ff:8a:0e:6b:a1:d2:a4:f8:
a2:07:0d:8a:02:f7:27:ac:48:b5:ce:b8:dc:a0:15:3a:e0:79:
01:d4:df:73:7f:39:d0:c2:f8:68:08:3e:66:46:50:bf:7b:de:
90:81:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:37 2026 by rpki-client