
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json)
Hash identifier: LGLeuB0AxlCA+yR4faSg+79idyxgW7W2GYOe3d7oDCc=
Subject key identifier: 2E:58:49:7C:68:AF:B8:60:9E:B9:ED:6B:A3:13:14:A5:A1:A7:C1:EB
Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
Certificate serial: 0A72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
Manifest number: 0A67
Signing time: Wed 20 May 2026 19:40:23 +0000
Manifest this update: Wed 20 May 2026 19:40:22 +0000
Manifest next update: Wed 27 May 2026 19:40:22 +0000
Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: YDaq5spWAT6JcLZ0ihhbfn8Haw8+0RTzcg0Id1KbUuQ=)
2: 37F2D8C60C7311F191425AD41A3D8C67.roa (hash: DN1f8oiXGG2RsKe7hRKO2LGi8xUEct/7PbZ6Nuofkw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl
rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2674 (0xa72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F
Validity
Not Before: May 20 19:40:22 2026 GMT
Not After : May 27 19:40:22 2026 GMT
Subject: CN=6a0e0e27-c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:94:6e:af:c6:c6:17:24:05:22:ea:62:b3:
47:2c:4f:90:c8:0f:50:91:be:91:b2:1b:98:31:ac:
32:d0:78:fd:47:eb:23:fd:ff:d0:2f:d9:44:f8:e8:
c9:fc:5c:81:8d:7d:06:fb:14:c5:e7:d9:12:71:c1:
8d:e8:02:29:0f:cf:7a:0c:f5:bf:aa:34:ad:bf:df:
e1:ac:ac:35:24:66:1d:00:f0:0a:9c:26:82:76:2c:
bc:70:c1:fb:44:ae:10:22:5f:4f:e6:19:d4:83:08:
45:4f:51:ba:d8:72:39:55:d2:89:35:d5:d6:d4:05:
99:62:b3:03:98:c3:9c:58:05:ce:7b:87:e7:dd:51:
0f:03:4c:30:dc:c7:c4:40:45:31:4d:21:c3:27:ea:
bc:28:6e:27:94:79:d7:ac:eb:6c:86:69:1d:c6:2c:
ec:16:1b:24:f7:8f:ac:1e:54:d2:5b:ae:b7:e6:c2:
28:d4:c7:ff:1a:e2:5e:5b:ae:41:9d:99:d1:ca:20:
62:2c:8e:f6:b6:67:a0:54:fa:9a:97:a7:83:c8:3f:
e0:5b:46:83:ff:e5:f0:5f:8e:1a:31:73:53:c0:e5:
a5:ff:49:c5:4f:b3:dd:fe:5a:e3:d9:40:06:39:a1:
e9:c9:2b:f8:09:6e:ab:51:67:54:0c:35:f8:97:14:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:49:7C:68:AF:B8:60:9E:B9:ED:6B:A3:13:14:A5:A1:A7:C1:EB
X509v3 Authority Key Identifier:
keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:75:11:eb:93:81:0c:a2:40:c5:f8:09:c2:d6:13:f9:04:e9:
3c:8d:3e:c5:01:71:2a:76:fd:98:66:0d:60:e4:b8:9c:ad:63:
5c:02:56:ca:b1:c6:b9:d8:bb:2f:d4:08:a4:71:93:6d:63:7c:
6d:95:84:8c:6b:38:a1:2f:42:47:82:5f:3b:91:6c:a5:de:11:
02:d5:49:d7:8b:be:d8:6f:11:3a:d6:5d:f7:de:5f:05:65:d0:
35:8f:17:15:69:4c:8e:ab:e1:9c:a0:de:21:48:79:16:fd:a3:
56:b5:46:04:35:91:b1:6f:e9:43:92:ff:e6:54:e7:45:02:72:
61:a1:95:4e:01:6e:7b:a9:57:b1:51:59:ff:03:99:9d:c0:4a:
87:c5:da:99:e1:68:7f:91:a5:d1:91:2f:d5:35:b0:af:3a:fa:
90:8a:ae:d8:5a:1e:cd:59:f5:7b:d9:56:8d:09:a5:95:2e:a6:
23:65:bf:6f:3b:a9:88:cd:07:88:ae:44:75:b2:1c:ff:09:fa:
5c:30:23:7e:be:91:2a:a3:34:1e:89:c3:ea:f8:36:a7:c0:84:
b9:73:05:78:05:e1:16:7a:4b:4e:f8:76:ba:ab:4d:a3:21:ff:
75:bb:da:1f:2b:a5:42:7d:52:ff:d2:3d:3c:95:82:27:06:17:
f8:95:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:17 2026 by rpki-client