
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json)
Hash identifier: H8aASzF1ZJoNelbAMXEAXHyVxrs7LjMD3qW5fNJVayk=
Subject key identifier: 7D:A1:1E:08:45:92:8E:89:0D:08:FD:2B:EC:F2:03:E0:15:71:49:16
Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F
Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
Manifest number: 0155
Signing time: Thu 21 May 2026 05:14:54 +0000
Manifest this update: Thu 21 May 2026 05:14:53 +0000
Manifest next update: Thu 28 May 2026 05:14:53 +0000
Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: lnqs9HYQ9OI5e9nrCda2HuUZLLkg89wlQ/+uf5hXLHg=)
2: F0FCC9ECABF411F0B9E4F837C4F9AE02.roa (hash: yjLxdwzIuckVEpvjPtBFZMr56OhqZEN8C8fQw3Xhxos=)
3: D956F03AAB0211F083CD7E11C4F9AE02.roa (hash: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl
rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
Validity
Not Before: May 21 05:14:53 2026 GMT
Not After : May 28 05:14:53 2026 GMT
Subject: CN=6a0e94cd-51f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:df:20:85:84:c3:3c:62:59:75:ac:01:66:
27:fd:bc:d4:f5:a0:28:e1:0d:4a:f3:b7:52:6a:a4:
ec:9a:f4:49:5a:35:d5:c2:57:9b:8b:e9:8b:7e:d9:
8f:93:f0:01:c4:4c:97:21:a4:c0:2d:76:33:3e:c2:
cf:39:4f:e3:ed:94:62:9d:ef:b3:75:92:53:2f:de:
cc:bd:62:1e:26:29:ac:dc:d8:63:b2:43:6c:24:b9:
e3:b2:1a:37:f1:3e:d8:02:ae:c0:1b:17:e5:49:db:
e2:bc:47:81:ab:b1:5c:d6:7f:ef:d8:f8:7b:87:c9:
8b:ec:2d:0e:ef:ee:30:34:66:1f:ec:c7:96:c4:05:
a7:b1:b2:88:3e:18:46:4b:f1:23:d4:b1:49:7a:b4:
e5:a5:9b:4b:2e:04:fd:8a:cc:1f:c3:01:48:09:f4:
55:08:bb:81:31:89:2e:1d:89:99:2b:da:a2:fb:d3:
d7:a1:1c:f2:ea:f2:78:cb:01:d8:32:1f:b4:f1:b4:
71:72:ef:a7:bf:29:e2:b9:3b:d2:ce:28:76:51:08:
db:a8:8e:35:9f:32:e7:94:44:c3:ea:b5:c9:86:12:
99:60:91:6f:07:ba:a7:42:1c:5b:bd:e7:4b:56:8d:
1d:47:f7:65:67:b9:a7:f5:f9:4e:3b:dc:02:e0:90:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:1E:08:45:92:8E:89:0D:08:FD:2B:EC:F2:03:E0:15:71:49:16
X509v3 Authority Key Identifier:
keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:be:cc:fb:5d:e7:4f:fa:65:2e:6f:35:96:d1:2f:f0:07:fc:
6c:8d:03:f6:1e:02:af:dd:54:9e:af:b2:fc:89:ea:d6:4f:0c:
ec:cd:f4:81:98:87:79:c3:17:47:91:31:7d:3e:2c:58:77:c7:
35:c2:ff:64:2a:ca:cf:ca:04:b8:0c:80:03:4e:47:df:5c:92:
5e:90:84:70:fb:b1:e2:7f:3b:d8:25:17:2f:6e:ce:4a:ee:eb:
58:8c:36:16:92:f2:a2:6a:d2:63:a7:5f:8d:24:7b:71:eb:19:
dc:9b:e1:25:74:6d:24:b5:a5:4d:45:16:3c:5e:e7:c5:91:7b:
1b:62:be:bb:d5:90:a0:07:45:74:d4:78:5f:0e:ef:70:8d:97:
b0:cf:ad:c5:ba:bb:33:fc:f5:c6:61:ea:3c:80:3e:04:4b:46:
d3:31:c9:ac:0a:02:cf:a1:70:d6:bb:64:32:70:1a:5e:57:6c:
41:e2:6e:ec:34:3d:16:fa:9d:53:06:f0:5b:91:30:98:23:60:
78:8f:5f:d2:39:59:8d:ec:ec:25:02:24:00:9f:29:e8:0b:b6:
6b:e7:67:e8:31:b2:7c:e4:dc:89:36:03:c6:35:15:ce:74:fd:
42:d9:cb:9e:8a:55:3f:93:b4:90:94:61:cf:8f:1c:b2:8b:29:
c6:c1:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:44 2026 by rpki-client