
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier: YgV5BPvJTJwraNN4yjNcjyU+tdzvNra+irqrJq/2AoE=
Subject key identifier: 06:F1:CD:67:E8:A8:F6:FE:BB:F6:8B:5A:96:1E:36:98:3A:3C:2D:72
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial: 07FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number: 07F7
Signing time: Tue 28 Apr 2026 21:34:37 +0000
Manifest this update: Tue 28 Apr 2026 21:34:37 +0000
Manifest next update: Tue 05 May 2026 21:34:37 +0000
Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: wC2zHkBZQX0CTnqEHUF8e+3FBxhwhfiFufXsBHK+AFM=)
2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 21:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047 (0x7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Validity
Not Before: Apr 28 21:34:37 2026 GMT
Not After : May 5 21:34:37 2026 GMT
Subject: CN=69f127ed-4a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:de:9a:5a:f9:94:08:f7:a7:0d:c8:20:38:
d6:07:f6:7a:9e:3b:9f:bd:cb:78:e4:47:6f:ee:6f:
78:2a:91:d6:34:15:2a:95:eb:c8:9b:8b:f9:af:23:
6d:4a:d0:b3:88:82:27:bb:18:f8:69:37:6e:fc:f5:
c5:64:34:29:78:40:24:a7:bc:ef:7f:9e:38:51:2e:
5e:fb:72:be:23:34:9b:30:6b:d6:8e:a2:67:9f:05:
44:df:54:30:e1:8a:2f:f0:83:ac:c7:5a:b1:c2:8c:
a1:ca:7f:01:6f:5c:51:84:6a:cc:9c:2f:e4:cc:c1:
dc:18:d7:f5:65:02:a3:c3:9f:a6:54:a3:c8:0f:a8:
2f:9f:76:7a:6f:93:e3:cc:9e:4a:f0:eb:65:63:31:
3f:26:6d:19:58:44:36:95:60:8f:55:95:25:a0:3a:
36:6b:ea:f0:b3:fd:d0:32:97:67:82:aa:b4:77:5f:
c8:2b:74:ba:03:d3:71:ce:f0:80:f1:9e:a1:70:2c:
46:f0:c6:b6:8d:c9:ad:4e:52:0f:6e:0b:67:01:89:
fd:87:3e:ee:a2:4e:b4:a0:f0:ac:96:20:12:f2:70:
dd:31:22:e7:61:55:a9:7b:29:0a:fc:99:81:9b:97:
92:22:87:69:0e:9e:86:93:44:0f:70:c3:92:fe:65:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:CD:67:E8:A8:F6:FE:BB:F6:8B:5A:96:1E:36:98:3A:3C:2D:72
X509v3 Authority Key Identifier:
keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:28:d9:33:43:ba:6f:60:f6:dd:90:0f:ca:a5:8c:29:ba:
77:3f:51:d6:b6:83:68:01:db:ed:d5:28:21:eb:8d:ee:41:11:
c1:77:93:fd:ed:c4:9b:3d:67:59:4e:1f:24:29:42:72:8f:ab:
17:76:07:a1:3d:4b:86:21:6a:2a:0f:42:4b:95:8a:b8:58:52:
5b:e9:11:fd:b9:54:e5:c0:93:a2:76:d6:53:2b:67:b7:17:a4:
92:33:19:d4:c3:bf:49:ea:cf:37:63:5e:c5:60:69:96:b1:79:
83:a7:c2:88:54:67:e8:1b:04:ae:b2:71:2d:75:88:e7:be:27:
b4:da:0f:5e:db:11:2c:7c:3e:88:5d:d9:e7:31:06:5f:66:be:
8f:16:50:f7:8e:e2:33:35:b5:e7:24:7b:bf:9c:cf:47:8b:3d:
0f:16:f0:99:86:4f:23:38:90:17:ae:07:99:89:20:12:2d:81:
98:8f:53:5d:0a:d3:a5:ca:2f:a7:61:ab:42:81:ff:b6:40:42:
15:eb:7e:bd:95:6b:13:e5:f1:48:82:3b:34:d3:62:8b:ba:bb:
2c:f2:f4:58:40:e7:33:c4:82:1b:f2:18:a3:32:12:cf:a6:36:
fe:2c:c9:f2:46:04:78:d9:a6:39:c6:0f:dc:b6:5b:cd:f6:25:
97:a4:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 16:57:02 2026 by rpki-client