
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier: r7A3li9xs317h84elcQvyrtfln3WLhCZqcIdCBrO3Gw=
Subject key identifier: C5:A1:86:23:C0:F8:A5:16:64:AA:75:58:AE:57:1A:02:F8:5F:27:83
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number: 061F
Signing time: Tue 28 Apr 2026 23:18:57 +0000
Manifest this update: Tue 28 Apr 2026 23:18:56 +0000
Manifest next update: Tue 05 May 2026 23:18:56 +0000
Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: v35IX5fSrYo+nZrlaHiJ5vxAopfAUwXrJq5fxVzm8i4=)
2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: esfW9wCIFip8anOs41Rq+ZFPyJj6Borr2LXsT9A2eN4=)
3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: KPX0rK0OaNteIMx84M4NZOMyO+pLPu817uzNmJdQ98A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 23:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Validity
Not Before: Apr 28 23:18:56 2026 GMT
Not After : May 5 23:18:56 2026 GMT
Subject: CN=69f14060-184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:6f:a5:e9:91:59:91:d0:f8:a2:6f:d9:d6:
bc:59:70:1e:b0:bb:ab:0d:91:8e:fe:98:14:6f:af:
39:74:a6:e9:5b:19:11:ee:11:12:cc:43:aa:81:8c:
a1:36:90:9c:c1:9e:b4:0d:01:1b:96:3d:d8:ea:58:
6e:26:8c:60:fb:d3:a8:39:ba:04:8e:e5:68:3b:0c:
2e:ea:5b:1d:93:50:14:57:c2:e1:ae:5a:78:48:60:
91:07:44:00:f8:70:e5:c7:bc:2d:3b:af:1e:19:4e:
9d:b4:ac:c1:a6:97:32:b3:7c:cc:9f:1d:1e:81:f9:
b4:44:90:b9:4f:45:88:1d:43:7b:09:88:c2:e7:50:
ff:c1:ba:2e:75:3c:f8:d5:a2:db:f4:3b:5a:79:59:
70:e6:ba:2b:b4:5c:dd:32:ab:22:49:93:fe:53:02:
ca:1e:2b:40:8a:08:65:df:47:88:05:53:30:4e:55:
8e:5f:37:fc:27:a1:0c:29:52:6f:c8:61:f6:ca:fb:
78:2c:91:ce:36:92:68:f4:21:c3:8b:8b:d6:92:b7:
85:b4:92:31:bb:61:f0:10:32:dd:16:08:20:cc:81:
a9:cc:23:bb:24:84:ae:48:82:be:b4:0a:28:f9:f7:
91:09:87:46:d8:b6:60:30:6f:27:e0:90:a9:c2:6d:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:86:23:C0:F8:A5:16:64:AA:75:58:AE:57:1A:02:F8:5F:27:83
X509v3 Authority Key Identifier:
keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:ae:dd:da:1b:0b:27:b9:6e:a6:b2:a4:a6:01:16:34:56:
8a:cd:79:49:4b:6a:9e:1c:a6:58:4a:2c:ae:fe:b9:5d:5d:96:
0c:82:3e:bf:dd:89:b5:20:49:da:52:7d:20:d3:c2:a5:5e:32:
73:be:a3:a7:c0:2f:9a:3e:86:4e:b1:5f:7c:d6:75:52:85:21:
60:9f:61:7b:0c:56:d2:e8:f3:c4:69:0e:f7:60:a8:f5:b2:33:
d9:ef:7f:7a:a3:95:40:e6:9b:38:5a:ef:df:cb:5e:49:f0:8d:
82:91:79:02:b2:c9:92:63:6c:35:0f:71:72:59:44:a1:6f:a5:
bd:4f:d6:b9:d4:21:50:26:cd:91:73:f1:80:93:0e:3c:12:20:
97:e2:11:9b:13:2a:56:87:24:b7:b0:e7:a5:f7:cc:44:ee:13:
19:70:9c:15:f0:bb:cf:6e:4f:72:eb:be:70:68:be:8b:aa:27:
98:f3:c7:b1:8e:3e:55:18:29:3d:5a:e6:e9:c7:cd:be:18:7e:
26:9e:f9:a7:19:aa:d7:5e:ef:ea:37:94:69:39:8b:50:14:58:
b2:34:b2:91:fb:0f:25:5e:66:96:ac:f4:09:d3:16:18:f1:e4:
93:7b:b7:a0:07:48:11:e8:a9:a1:5d:3f:46:a1:eb:88:49:c8:
d4:6d:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 04:28:15 2026 by rpki-client