
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File: XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier: ZUnMgoS4ICC65RVSoJrduBXs7TPD9WHLkwRtxXjKG7Y=
Subject key identifier: 73:3F:2B:01:7A:A1:35:2F:E5:F0:77:6E:2A:DD:97:9E:BC:FE:7C:5F
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number: F7
Signing time: Thu 21 May 2026 06:30:32 +0000
Manifest this update: Thu 21 May 2026 06:30:31 +0000
Manifest next update: Thu 28 May 2026 06:30:31 +0000
Files and hashes: 1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: zBxGD6OviXT7lPO72RyVyjpOLkvUZUrP2LqHi1edoSM=)
2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: t1JjvZDB24X6k3Mu8SErmmJoER7kOsUM0Jx228MJLJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Validity
Not Before: May 21 06:30:31 2026 GMT
Not After : May 28 06:30:31 2026 GMT
Subject: CN=6a0ea688-18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:4b:2c:63:44:7a:60:97:99:d7:d1:36:1c:
7d:84:d3:fc:e9:4f:aa:51:f2:5b:a1:59:24:50:9a:
db:e0:d8:e5:8c:6a:3b:a2:84:a8:15:df:23:57:ba:
8a:2a:31:8f:46:6b:b9:68:38:3d:40:79:60:84:06:
67:c3:77:7e:61:55:7c:97:23:97:95:a5:28:f1:e8:
43:d0:cd:92:57:00:57:53:2d:a0:b4:ed:cc:1a:90:
ac:6d:0a:0d:38:dc:8b:1e:fa:74:ef:88:e9:0c:a2:
5e:06:1a:60:f7:18:05:2c:d8:37:1d:5d:fd:31:99:
4c:b8:e1:62:ab:c6:8c:ee:5e:64:9c:05:70:e4:13:
0f:71:a5:48:2f:f9:48:d3:4e:08:2d:3a:a3:c2:dd:
ae:fd:57:48:58:f0:33:37:78:ce:b6:d8:05:2c:c3:
65:d1:62:08:4b:28:22:9e:61:13:47:ed:ae:d4:21:
85:ca:8f:35:91:88:a7:23:3f:dc:13:28:16:f8:e3:
84:fb:27:18:d2:38:6c:1b:6f:75:60:dc:e6:d3:fd:
f0:90:e1:1b:95:e3:9c:e8:b3:cf:4b:3f:17:6a:86:
16:ec:99:e9:67:3c:cf:c6:67:b6:99:bd:e3:66:cc:
94:24:4b:54:74:b2:bf:7a:e0:af:5b:05:4f:15:7a:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:2B:01:7A:A1:35:2F:E5:F0:77:6E:2A:DD:97:9E:BC:FE:7C:5F
X509v3 Authority Key Identifier:
keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:be:99:3d:b5:86:ce:57:81:18:cd:a0:63:c5:a3:cc:25:
31:fa:45:40:76:cb:c4:b3:d5:2c:93:e9:21:49:45:fd:d3:87:
66:76:e2:22:57:5d:25:49:21:6c:a3:6c:b9:e2:15:b3:e8:39:
3c:22:a9:c2:6d:9e:41:50:1b:3e:f9:7c:42:b6:81:76:49:6c:
5f:b4:51:33:fd:92:51:8c:d8:c7:d0:d3:52:0f:1f:ed:94:bd:
b4:c1:4d:21:f6:10:27:18:e8:ad:99:a8:4f:8b:bb:0b:83:4e:
06:d0:d3:26:80:f9:bf:1a:d8:21:8c:23:c0:5b:45:42:85:03:
7a:3a:ab:d7:e5:b4:09:68:88:37:39:a2:af:15:40:57:a4:b6:
d4:ab:66:41:47:e1:4f:35:21:34:3e:cd:97:37:fb:c4:ca:ff:
7f:16:81:10:be:42:65:22:cb:c8:93:85:05:86:af:a3:e3:32:
b3:82:47:f2:ca:ab:ad:c7:58:a5:e2:34:ae:f5:10:ec:05:18:
ce:7b:6a:bb:0b:37:0f:fa:95:cf:1f:1c:42:72:8a:52:19:a1:
ba:42:96:b1:0e:c0:1b:f2:e3:9b:c5:2a:8e:ab:61:0d:23:0b:
aa:d7:1e:a7:df:37:a7:93:cd:98:1b:e5:7b:e8:0a:c7:f0:67:
1d:54:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:01 2026 by rpki-client