
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft
File: XucUYNY3KKxeq5GKVB0NcFFXfU0.mft (raw, json)
Hash identifier: UnyRtPWFQhZvRK2uEXqLK2jtYy54oYT8vRDDJ3bNSOY=
Subject key identifier: 89:5C:62:8A:D5:CC:E5:2D:B0:80:9E:31:72:62:FC:76:9E:2D:B2:8F
Authority key identifier: 5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D
Certificate issuer: /CN=A91B758E/serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft
Manifest number: 0189
Signing time: Sun 05 Apr 2026 03:54:47 +0000
Manifest this update: Sun 05 Apr 2026 03:54:47 +0000
Manifest next update: Sun 12 Apr 2026 03:54:47 +0000
Files and hashes: 1: XucUYNY3KKxeq5GKVB0NcFFXfU0.crl (hash: nbJJUqrpNcsMeSivZXgfQFvENCj4uHMjd6ySypxSR0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl
rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B758E, serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D
Validity
Not Before: Apr 5 03:54:47 2026 GMT
Not After : Apr 12 03:54:47 2026 GMT
Subject: CN=69d1dd07-5a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:f1:c0:78:91:c3:64:50:65:06:f0:9c:3a:
88:7e:0c:76:44:92:95:ad:12:b0:d1:9b:48:bd:fe:
cc:02:68:57:35:6f:8b:52:90:50:64:89:00:8d:ad:
08:a5:29:6c:09:a5:fd:06:cc:cd:b0:fd:c9:7f:31:
7a:95:96:b1:94:a6:3c:69:6a:9b:64:e6:db:a1:ca:
df:a0:35:ea:f7:ff:c0:83:8e:5b:2b:8c:21:51:40:
32:fd:34:5a:b3:f6:70:d5:16:be:30:41:57:23:44:
20:ec:b8:39:0d:de:7b:df:48:1e:93:10:f2:f2:59:
29:c7:09:13:97:fd:64:1b:61:1b:df:84:9b:1d:a4:
8c:1c:0a:d5:14:80:bb:db:2e:d7:2c:af:2a:2b:12:
7c:af:b6:c6:ac:c5:7d:ea:34:3a:5a:41:22:a0:ce:
b1:6a:f6:a4:f8:c8:43:14:bc:ef:28:d2:34:9a:3d:
2f:55:f2:e6:94:f9:30:af:85:07:69:e3:dd:b8:1b:
51:39:f9:e4:df:ab:a7:69:85:50:10:b2:32:6e:0a:
3b:bc:10:08:9e:44:48:e7:aa:12:df:e5:b1:2d:93:
c8:63:64:58:24:78:67:74:25:bc:2f:46:9a:bf:ce:
2e:8c:c6:67:d3:db:7c:39:5e:ff:65:33:50:28:2c:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:62:8A:D5:CC:E5:2D:B0:80:9E:31:72:62:FC:76:9E:2D:B2:8F
X509v3 Authority Key Identifier:
keyid:5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:01:39:36:a3:04:02:5a:05:97:a9:7f:23:f7:26:1d:e7:47:
b7:0b:a7:97:58:d0:1a:00:c7:b9:cc:a4:85:98:99:a6:f9:69:
2a:80:2a:6d:1d:1a:a4:1c:a0:53:23:d4:18:54:e5:37:80:23:
85:32:f3:f9:3d:7a:97:14:1d:4a:12:c2:49:e7:df:1a:19:06:
12:ba:d9:29:42:ff:b9:b3:89:3b:aa:92:58:9c:ee:cd:0c:52:
ab:19:99:bb:2b:5d:39:87:db:4a:18:3b:de:df:60:c4:35:46:
7c:88:51:42:00:ee:87:74:a8:4f:ca:78:59:b5:02:de:ff:ae:
c3:6a:5c:7f:37:9d:75:68:d4:f6:48:81:31:52:cc:b9:7d:55:
cf:40:4c:b0:dc:bd:49:86:c7:7d:4f:64:04:f3:48:ba:62:1a:
4f:28:40:b9:fd:21:63:df:7c:dd:70:7e:5c:e5:3a:4a:b3:62:
fb:7c:4a:d2:b8:82:dd:26:6c:18:29:6d:45:6d:e9:52:b2:70:
30:1f:ca:9e:f5:23:96:d5:5d:de:dd:c2:67:34:a1:21:b2:72:
bd:3b:1b:ae:53:89:b6:81:ac:c1:e5:3b:54:c0:20:00:1e:34:
d9:2e:91:91:53:43:0a:14:a0:42:35:c9:8b:63:e4:4b:a0:de:
0a:36:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:08 2026 by rpki-client