
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json)
Hash identifier: zT2Q693S747diiWJICq8vxoelGTM2q/FX4ynhkd2DLE=
Subject key identifier: A2:E8:FC:A1:68:B2:21:F9:9F:3E:F4:7C:A2:93:2C:06:69:1A:C2:A3
Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
Manifest number: 0613
Signing time: Wed 20 May 2026 22:54:20 +0000
Manifest this update: Wed 20 May 2026 22:54:20 +0000
Manifest next update: Wed 27 May 2026 22:54:20 +0000
Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: XujCI4giTYJCa0iSiTYsdgnzg2HM+QAPlxhFr5AfLns=)
2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: 3VA1KwUIIhxyT4ghxT229oTXXd7seGOOX/95PCsXUZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E
Validity
Not Before: May 20 22:54:20 2026 GMT
Not After : May 27 22:54:20 2026 GMT
Subject: CN=6a0e3b9c-b243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:ee:30:59:fd:e7:a5:f3:8b:1d:62:b3:17:
7f:41:34:0c:7d:09:45:3d:53:1f:50:fc:6d:ad:97:
bf:f8:76:3f:d3:67:35:1f:56:ad:f0:37:41:6a:dc:
87:2d:bd:a8:82:bc:8a:c3:9c:c1:7d:f7:8d:44:c7:
70:8b:e1:2a:9e:70:27:e6:b9:d0:09:6e:ac:ca:30:
46:3f:df:5a:ce:0e:aa:49:c6:f2:a3:3d:f6:ad:3d:
7b:93:46:35:31:55:68:78:ba:f6:2b:77:0e:57:1f:
8c:15:ec:b4:cb:4d:32:1e:71:b8:5d:5f:e2:7a:df:
a1:af:fb:59:59:2b:78:ba:cc:c3:d0:76:f8:b8:fa:
d5:3d:0c:de:0e:85:09:00:a3:b2:a2:c1:29:3d:3a:
2c:0b:3b:75:f6:49:c9:b1:45:ef:c3:0d:7f:65:62:
71:e2:ff:6f:fa:6e:9d:f7:ea:51:0a:3e:3c:d7:e2:
f1:a6:dc:9b:01:64:9e:23:40:62:dd:e1:76:c6:9e:
f9:73:3f:5b:8e:19:20:d8:06:0f:d8:7b:ff:65:d9:
56:82:82:13:99:8f:2f:16:74:b8:10:ec:cd:5b:48:
25:06:7d:db:2b:60:b4:81:6c:78:23:04:c0:32:a0:
8f:ae:c1:10:f7:1f:d7:99:15:ed:5d:5a:84:b6:30:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:FC:A1:68:B2:21:F9:9F:3E:F4:7C:A2:93:2C:06:69:1A:C2:A3
X509v3 Authority Key Identifier:
keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:4b:27:3f:7d:c1:a1:15:96:5d:61:98:a7:7f:3c:c3:07:07:
54:68:f4:88:57:9d:b5:25:2d:62:ca:78:e1:d2:d4:12:99:dc:
64:ca:12:f6:f8:bb:62:a6:bc:6f:e0:b0:f8:fd:63:63:1d:25:
d3:89:3e:57:3e:20:96:45:05:fd:69:a8:03:e1:97:2a:1c:9c:
78:cf:d4:ac:5a:0f:b7:48:97:56:f0:30:67:b0:ae:f6:2b:36:
ee:17:71:08:5e:1f:1a:57:6c:b9:c6:e5:8a:b6:41:c2:f6:ec:
3c:a9:ee:fa:fd:41:0d:89:ab:f9:e4:6e:cf:d7:95:8d:cd:5b:
f3:4c:58:27:5f:5c:8d:ac:6d:b5:a3:03:a1:8b:0f:41:39:ed:
4d:58:91:80:9b:bd:44:b7:d1:d7:e0:5e:a6:76:80:9d:4b:cc:
e3:b0:ea:66:15:b0:9e:fd:22:73:67:63:16:8e:a3:dc:a0:59:
97:90:95:78:7b:e7:97:a6:b5:e0:ee:83:66:fb:b8:87:14:35:
33:0d:b7:0b:b6:86:e4:bc:47:ad:2a:51:c0:2f:00:ae:5f:e4:
35:e0:40:cd:4e:2c:f8:e4:a6:92:08:2e:63:14:ad:ca:cc:8a:
d9:b2:46:b9:d8:d6:b7:03:72:42:f6:ec:54:3c:f8:0a:4b:69:
42:93:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:04 2026 by rpki-client