
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json)
Hash identifier: jnlUnpUlMyAUY4oZQRNDXceW+tGVIzpMOs1TTBaPaZY=
Subject key identifier: 12:65:CD:4B:DD:F9:F8:C5:CF:87:08:C5:6F:93:3F:BB:3D:83:79:F6
Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63
Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
Certificate serial: 0608
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
Manifest number: 0602
Signing time: Sun 26 Apr 2026 22:49:20 +0000
Manifest this update: Sun 26 Apr 2026 22:49:20 +0000
Manifest next update: Sun 03 May 2026 22:49:20 +0000
Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: By8nuJD/JUc9Itkae18k6b84cj1bhk+HbjIqrzchp2k=)
2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: IP/QJfV6mDMkAmZvNNAznS9XZlWRM/mkzo7SsyQDQEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl
rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1544 (0x608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
Validity
Not Before: Apr 26 22:49:20 2026 GMT
Not After : May 3 22:49:20 2026 GMT
Subject: CN=69ee9670-0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:59:cf:90:91:03:f0:f8:b7:15:1c:e8:33:
36:95:6a:77:a2:8f:ba:ce:8a:7e:df:f5:ad:f9:58:
9f:7a:bb:ea:5d:e2:59:d2:62:27:e7:33:45:82:3d:
01:5f:46:43:a4:44:25:be:42:00:33:74:34:19:db:
56:18:aa:2c:80:17:2d:e3:83:fd:91:83:3a:7d:f8:
8e:5f:90:84:61:e5:c5:66:8e:15:81:be:4f:25:73:
a2:44:a4:df:4b:df:02:77:47:b6:9a:7a:d0:35:6e:
2e:81:81:76:89:55:02:35:f4:99:6a:31:bd:79:1a:
79:52:f4:5b:be:a2:72:f2:22:49:b9:ef:0d:9b:96:
0e:be:68:70:e5:84:a8:af:67:d1:cf:06:f6:09:96:
41:6c:8d:1d:13:47:d5:4d:1c:c8:3c:fc:82:57:ae:
2d:13:c7:02:fc:af:99:cf:5f:04:c9:64:0b:72:09:
ab:0e:c0:fd:3a:e4:a3:01:75:84:08:69:45:a0:f5:
f2:6f:ac:b3:3a:ff:bd:1b:19:9e:ea:7a:c5:05:65:
60:60:20:1a:b0:26:a5:d5:fa:9b:09:48:16:b7:b8:
a2:36:15:45:69:38:98:89:2a:71:e4:ce:d2:1c:2e:
c7:0d:4f:34:30:cd:8e:7b:91:12:a8:0a:65:90:6b:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:CD:4B:DD:F9:F8:C5:CF:87:08:C5:6F:93:3F:BB:3D:83:79:F6
X509v3 Authority Key Identifier:
keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:65:d2:76:96:79:ba:31:61:01:c3:bf:1e:5f:6f:48:98:49:
6a:26:7f:be:84:f6:90:5d:08:df:2a:aa:cd:d1:8f:d3:58:75:
64:d0:88:0c:70:2a:ae:db:aa:be:5d:ca:62:75:52:3b:d4:4f:
9b:af:0c:cf:79:41:7e:d8:d7:a0:94:5b:39:25:c5:7d:1b:fd:
2b:7d:0b:46:b9:ef:76:28:22:52:7b:cd:d9:5e:43:61:de:65:
94:8b:22:b1:09:2b:ec:4f:ff:35:08:74:1d:76:13:e4:4f:bf:
0e:21:63:d7:38:6a:d9:80:18:10:b7:ae:cc:5c:d1:d3:7e:f8:
8b:f9:95:77:7c:fd:86:8e:66:ab:61:b3:34:4c:0e:60:c2:0c:
c7:07:85:6b:da:55:a9:5c:e5:22:40:4f:09:08:6f:9f:60:fd:
be:6d:99:c9:33:ce:3b:2b:57:33:7b:b7:eb:6e:14:30:66:4e:
84:46:2a:af:7a:0e:4f:1f:a3:a6:ca:70:ce:f0:f3:eb:5e:84:
66:9d:62:1b:dc:70:16:dc:b8:a5:86:31:67:58:26:87:08:93:
67:a5:ea:6b:c3:dc:c4:5f:c8:a1:36:48:33:13:9d:78:1b:9e:
90:af:cd:9a:3f:e8:f9:5c:62:49:49:98:f5:2e:f4:54:73:09:
0a:c4:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:59:16 2026 by rpki-client