
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier: PSY0fK6K0LHxjfKAjH5FIqchaiZB3bSDLzVm0ho1LwM=
Subject key identifier: 57:55:0E:6C:8C:EE:4D:EE:91:EF:38:1D:1A:42:6A:24:4A:15:5C:DB
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial: 0534
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number: 051F
Signing time: Wed 20 May 2026 23:38:37 +0000
Manifest this update: Wed 20 May 2026 23:38:37 +0000
Manifest next update: Wed 27 May 2026 23:38:37 +0000
Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: ynmBYCA9QNfPXt4+fvnHbDOP9nj0sJR/XNn3Gzuetxs=)
2: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=)
3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=)
4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Validity
Not Before: May 20 23:38:37 2026 GMT
Not After : May 27 23:38:37 2026 GMT
Subject: CN=6a0e45fd-b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:f3:c7:9b:d4:46:f9:4f:ad:8f:ba:a3:a0:
cf:83:24:2f:0e:e0:d7:7d:0d:88:b6:55:19:0d:d5:
da:40:d8:3d:cc:eb:94:3e:e7:8f:d4:d9:5d:b3:41:
b4:a3:a9:8a:aa:de:26:63:27:29:ab:69:d9:37:65:
f8:cb:4f:07:c8:38:b1:1d:52:7a:c2:3f:08:87:67:
d4:74:8b:5a:1d:9d:7c:ff:f9:21:93:26:00:13:79:
47:18:1b:79:9a:f9:05:d0:7d:2a:20:57:99:e7:dd:
41:ff:22:ac:9c:33:f7:b5:4f:c1:27:10:a4:c2:f7:
f5:7b:48:20:1a:73:9c:82:ff:83:0b:f8:bf:bf:8f:
3d:a8:dc:39:ab:03:6c:3c:a9:6a:a3:fd:57:4f:1a:
df:fc:75:1c:fe:85:a4:f5:f9:0c:35:76:c3:2e:93:
f4:54:3f:e1:94:9a:1f:5b:a1:d7:9d:aa:98:fa:2d:
42:25:91:d6:48:d7:fb:4d:1d:6b:3f:4a:91:85:50:
1a:e8:6e:84:0e:62:69:b6:02:83:44:65:98:1a:4e:
80:91:a9:3b:14:16:43:85:5f:bc:4f:43:5b:85:b1:
54:4a:90:89:b1:98:d4:9f:46:dc:fc:87:ec:9b:c5:
a1:ee:69:7e:8f:03:f6:9c:80:4d:7e:0a:7c:f0:34:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:0E:6C:8C:EE:4D:EE:91:EF:38:1D:1A:42:6A:24:4A:15:5C:DB
X509v3 Authority Key Identifier:
keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:7c:b0:ce:82:19:86:bf:90:71:af:c5:2f:5e:64:ec:08:
dc:ef:eb:d2:6f:a5:d2:d6:2c:67:bc:dc:e6:cc:ed:c7:9f:42:
7c:41:4c:68:29:ab:94:92:58:f5:d7:8b:4a:87:04:c5:83:de:
60:4e:ba:a6:15:20:88:0c:2f:0d:2b:ee:b9:0d:e2:fd:b8:60:
4b:31:cb:c5:16:24:f4:22:a8:ca:18:d7:1c:b1:94:33:5f:40:
44:aa:1b:90:bb:41:b7:48:b9:41:ec:26:9c:b6:4e:ed:70:6e:
a2:33:f7:1b:49:44:ac:d5:61:a8:66:d6:74:84:ae:c5:ec:c3:
2f:be:13:1b:6b:19:e6:b3:7a:8e:23:58:eb:b0:07:3b:f7:d4:
96:f8:ad:43:9a:10:1a:2b:19:a6:c5:7b:a8:df:30:61:de:df:
71:4b:f9:69:25:31:62:c6:c9:4c:e2:6c:81:57:00:0a:75:51:
c9:fa:66:a9:24:62:1d:03:54:13:7f:a2:a0:85:3d:63:b0:1a:
74:21:92:fe:18:f3:6f:5f:11:5c:55:ed:bc:80:ec:db:31:3f:
2e:22:6d:36:7a:45:81:31:91:37:ac:5e:7d:bd:ed:38:58:76:
04:ea:2b:3c:b2:49:16:26:94:ee:2a:fa:82:77:0e:f0:4c:5b:
f1:dd:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:13:31 2026 by rpki-client