
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json)
Hash identifier: tQWQYMw8AvzDCCyfniMVTKjLx/FUnktCNn1GjIihi0M=
Subject key identifier: 9F:ED:5B:4C:56:1D:C7:A3:EB:EA:0F:09:D4:B4:1F:6E:1D:88:65:DD
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 0812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
Manifest number: 07D1
Signing time: Sun 26 Apr 2026 21:22:25 +0000
Manifest this update: Sun 26 Apr 2026 21:22:25 +0000
Manifest next update: Sun 03 May 2026 21:22:25 +0000
Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: 884fio2boIpOm/XeOmVU0MTEEjp137GqzwFzPxDs6rM=)
2: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=)
3: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=)
4: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=)
5: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=)
6: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=)
7: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 21:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Apr 26 21:22:25 2026 GMT
Not After : May 3 21:22:25 2026 GMT
Subject: CN=69ee8211-a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:7e:55:58:aa:0d:d8:f5:4b:24:73:11:f4:
10:76:2f:89:a8:f1:d9:25:90:2a:04:c9:87:5c:da:
04:50:12:bd:e7:a2:f9:47:c3:37:7e:f7:f3:4e:d7:
1c:dc:54:06:a8:5f:ed:fb:6b:bf:d1:ba:13:8c:01:
43:38:de:66:35:80:b3:ea:b6:9c:56:fc:44:3f:c1:
53:ba:d2:56:80:43:db:11:56:bb:b2:24:bb:1e:e6:
c3:3a:61:d6:af:2c:84:c7:46:e1:ae:32:04:cf:c7:
67:a1:63:ce:28:0e:e8:a0:b8:47:c5:22:0d:df:5e:
d8:12:c5:f4:d8:2c:2b:48:9f:ef:1f:b9:0f:13:b4:
34:73:a9:b3:56:f8:67:31:17:13:04:32:73:6c:ea:
b6:57:e7:b1:91:f4:b2:a8:d0:d9:58:29:62:48:71:
85:ff:15:18:14:1b:02:d7:cd:a7:46:1d:35:50:df:
c9:be:d2:99:26:eb:95:4c:31:24:d4:91:0f:13:86:
0b:21:10:17:92:bd:88:d7:0c:34:bc:12:4a:75:91:
86:6e:b2:3f:96:25:3e:da:b3:de:a4:92:2e:d4:fc:
b0:fc:89:9a:36:bb:65:88:34:72:90:84:d7:6f:20:
94:05:e6:f2:f9:cf:00:59:e6:41:75:70:1d:1d:f1:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:5B:4C:56:1D:C7:A3:EB:EA:0F:09:D4:B4:1F:6E:1D:88:65:DD
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:19:4e:0e:c7:4c:73:84:c3:f0:46:43:8d:5a:d3:15:cc:ba:
46:d4:63:d6:cb:4d:90:a7:79:7c:f6:83:1d:1b:64:b3:16:6e:
3c:34:37:f0:4d:36:55:91:e1:12:2b:a5:65:c1:84:ab:51:8c:
ce:ef:3d:ed:c3:57:d4:d8:57:ea:be:cf:18:b4:fd:e7:81:c1:
61:26:09:4e:b8:85:62:1f:1f:91:7a:8b:a1:f1:15:93:9a:c8:
af:ca:47:d2:91:7e:69:4e:53:4d:17:f7:e5:f3:67:62:97:c5:
28:d6:48:e5:d6:63:1b:d4:d5:25:ad:a7:0f:39:cb:5c:36:cb:
fd:19:e2:f5:85:5f:80:32:cc:3c:05:84:1f:2c:7b:9d:95:88:
27:26:a1:0e:e7:14:57:2b:37:d4:b9:ad:04:2b:dd:4e:68:64:
d3:95:aa:cf:ff:19:02:97:44:dd:f0:e9:67:e4:a9:89:62:e4:
f2:7d:a0:64:6f:96:7c:e2:be:3a:74:3c:b3:a7:ed:36:8d:8f:
3a:b7:28:8e:55:b8:05:27:9b:d3:8a:a6:c4:25:e0:43:9f:db:
d3:9b:93:c1:e2:d8:6b:08:4e:c4:c6:c8:f4:c0:96:04:d4:29:
de:d3:bd:75:f9:b5:e7:45:49:1c:57:ce:83:3b:38:fb:a7:46:
1a:29:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:42:07 2026 by rpki-client