
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json)
Hash identifier: y7/13EDdeCfrZxKTB+YlR6zryO+nx43sY03lLPlTU4Q=
Subject key identifier: 01:52:91:F9:14:C4:23:9C:F7:08:04:12:90:D1:30:BE:5E:70:70:61
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
Manifest number: 05BF
Signing time: Wed 20 May 2026 23:10:09 +0000
Manifest this update: Wed 20 May 2026 23:10:08 +0000
Manifest next update: Wed 27 May 2026 23:10:08 +0000
Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: 3E8HLmsLUD2iytB1MuqosxSeMXL+fErGm48exVJfvDc=)
2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: m10yKLNw04aqPffnChbvPtF9dJrR9itHpjb6uXcAlGk=)
3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: zmxYoZ1BVg+AnE0Kz3mMj0iTFbYRBM74Su+zm0YTTME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Validity
Not Before: May 20 23:10:08 2026 GMT
Not After : May 27 23:10:08 2026 GMT
Subject: CN=6a0e3f50-41a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ff:6c:e5:d9:18:3c:23:55:89:80:83:58:20:
44:ab:c8:2f:bd:11:bb:04:de:24:f3:77:36:1f:d7:
12:6f:b6:b2:9b:8b:e7:ac:f0:39:65:6a:16:27:f7:
70:7d:a3:03:f7:0e:d1:34:72:d5:67:ac:9c:b0:aa:
29:1b:40:a3:6b:10:22:55:90:09:43:e6:f8:93:b3:
94:23:f7:b4:92:56:c0:10:c0:72:b0:3d:02:a7:a2:
b0:80:e8:3f:b4:83:63:d3:8e:e8:41:4a:0b:1c:b0:
ff:5f:52:2d:1a:55:b6:b1:12:23:89:f3:75:e1:9c:
d8:6a:6c:c6:73:f2:28:a2:51:f2:c6:59:5a:72:d9:
9b:b7:43:1c:0c:6f:4e:33:b6:25:ec:14:96:02:a6:
14:2b:73:ef:ff:b4:bc:16:4f:d6:ac:09:de:94:92:
a5:4f:ee:6f:64:96:b1:6f:28:95:8d:88:d3:b1:58:
70:61:c8:f4:42:89:fd:dc:ba:30:af:df:dd:4a:32:
1b:ec:62:e7:a6:89:23:7e:87:59:50:4f:6a:92:c3:
cc:d7:81:c3:73:0b:dd:fa:6f:87:a1:6e:11:b5:a5:
ff:91:0f:0d:f1:f4:7e:df:b9:64:78:7e:0e:07:47:
3b:67:45:55:ee:28:41:e8:41:69:8f:7b:11:74:91:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:52:91:F9:14:C4:23:9C:F7:08:04:12:90:D1:30:BE:5E:70:70:61
X509v3 Authority Key Identifier:
keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:a7:c7:2c:7c:71:2c:7d:39:77:c5:99:4a:12:84:99:3a:
8a:48:06:d4:d5:42:75:9d:d9:a0:33:3b:0c:3a:c1:64:60:67:
3e:dd:ac:6c:1f:2e:fa:31:6f:fe:4c:9c:60:17:96:da:fe:3f:
c9:55:2b:2f:92:64:a5:c7:1b:c8:7f:d0:c7:29:d0:d6:77:3d:
3f:85:41:1b:b8:36:39:3b:c4:fa:55:48:fc:97:a0:f5:39:b4:
51:6a:47:18:90:90:7a:da:60:39:a6:e1:8d:a5:f6:28:58:1d:
29:04:de:f1:92:82:d3:c2:ef:e9:38:55:0c:d5:3b:38:74:cd:
19:c8:8c:ff:bd:cf:1f:01:67:60:80:a5:ef:9d:2b:73:48:0e:
00:53:95:b4:c6:dc:d3:60:aa:48:22:94:5e:8d:6e:a9:90:20:
0e:8c:60:99:f6:28:d4:29:df:56:cf:cc:c6:a0:6d:06:b9:3b:
91:4b:86:eb:55:17:91:96:fe:d5:04:90:6b:0f:00:99:e9:c7:
00:95:c3:98:c1:c8:0f:68:99:06:de:f1:81:89:7d:d4:5a:7a:
ed:e8:9a:17:38:42:d8:d8:82:11:ee:e9:69:79:d8:71:32:77:
0d:d5:f5:85:0b:c5:2d:f4:1b:2d:c4:40:8c:f0:c8:7a:6d:56:
a2:eb:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:07:30 2026 by rpki-client