
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json)
Hash identifier: LmqKOm5dJ9bpuaVyQTcjMVgzewusQO16JOMGCn2m3WA=
Subject key identifier: 2E:CD:5F:B3:25:4E:D8:64:64:E5:90:6B:01:C2:52:FF:E2:D2:30:6D
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
Manifest number: 055B
Signing time: Thu 21 May 2026 01:14:40 +0000
Manifest this update: Thu 21 May 2026 01:14:40 +0000
Manifest next update: Thu 28 May 2026 01:14:40 +0000
Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: h1TWrtL5KLYQ/TByt7Dig85lOHVJGtNV3yXv5yJWYsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Validity
Not Before: May 21 01:14:40 2026 GMT
Not After : May 28 01:14:40 2026 GMT
Subject: CN=6a0e5c80-86ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:70:30:85:e5:78:5d:4b:6f:72:fa:79:fd:
70:a1:e0:aa:e2:42:e4:68:a0:88:8c:5c:8c:d8:18:
5f:bd:5c:87:cb:30:c3:3a:4d:32:8c:41:a6:04:75:
f7:46:fb:cc:75:ab:46:57:f2:99:33:ba:07:8a:14:
48:3c:33:2f:6e:3f:73:d1:2c:8f:ab:ab:8a:27:71:
1d:4a:9b:db:69:3e:d9:ad:03:c4:24:b4:da:8a:c4:
de:94:03:ee:62:77:96:4a:a3:da:39:32:02:8b:b3:
b4:b2:94:5f:c8:f5:2c:12:6e:d5:8a:38:c2:40:5b:
bc:c4:5d:4d:ef:f7:da:5e:5a:07:74:61:a2:6d:a7:
d4:19:be:ca:3b:00:76:6e:f4:77:53:82:8b:ee:36:
e9:e9:be:e7:51:20:66:08:e5:1e:b3:a8:40:47:4a:
1f:b5:cd:21:39:0e:68:46:70:d5:ed:1b:eb:64:35:
b9:84:d8:a9:4f:cc:3d:33:2a:81:9a:27:55:9b:df:
52:9a:95:f5:88:19:12:59:68:00:5d:cd:83:29:98:
ee:e5:3e:c5:93:62:32:93:8d:e1:34:b1:93:6d:71:
f5:d9:d3:9e:34:c8:ea:f6:80:b7:b3:f7:c3:43:62:
b4:5a:68:4f:7c:92:2a:4b:cf:4e:06:13:64:52:dd:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:5F:B3:25:4E:D8:64:64:E5:90:6B:01:C2:52:FF:E2:D2:30:6D
X509v3 Authority Key Identifier:
keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:3d:93:38:88:25:6c:1f:f5:04:28:01:7b:84:f3:fc:50:1c:
24:cc:4b:40:58:3f:3e:8e:47:99:52:1b:75:d5:f2:30:9f:45:
7a:02:f5:c7:0e:f7:dc:9d:68:eb:00:21:f0:28:25:26:ea:f2:
f1:c3:5c:94:f0:45:1c:c1:ef:b8:81:93:22:9c:a7:8b:9a:18:
d5:a9:1b:09:38:37:56:ba:99:47:ba:e5:9c:c2:76:9a:45:ea:
a7:d7:6f:eb:00:fe:42:36:f1:d9:ef:78:c5:0f:c3:69:9a:6d:
a6:5f:da:ae:87:03:29:2d:9b:c2:f4:cb:11:f6:28:05:d0:b9:
97:d1:b5:7a:db:55:18:88:65:64:40:ce:43:7e:92:f8:1e:62:
16:9a:30:ba:3d:95:b7:f8:59:ef:a8:78:43:62:fc:a9:5b:8e:
a5:80:17:1d:2c:06:29:af:5c:2d:5a:6b:28:64:32:25:d0:8d:
1a:60:30:ff:63:9c:be:d9:17:8a:0f:5c:36:35:1c:25:ee:03:
b2:da:27:77:dd:b9:4d:27:b2:b0:96:62:81:d6:6e:7e:49:9b:
f4:af:9c:bb:9c:9c:a6:66:f9:26:83:2f:b7:8e:3c:f8:5d:ca:
16:13:b6:bd:ff:5b:98:03:9c:b1:cf:62:89:7f:66:b2:25:5e:
0c:a2:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:15 2026 by rpki-client