
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json)
Hash identifier: xLCcsjhZzX9/UQLqifQGf8Qf8lQlECoYP0TSPiUw0JM=
Subject key identifier: 09:E3:87:81:43:59:CE:C8:6B:D3:AA:8C:5A:C3:99:DA:96:1D:13:54
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial: 14BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
Manifest number: 1493
Signing time: Wed 20 May 2026 16:51:23 +0000
Manifest this update: Wed 20 May 2026 16:51:22 +0000
Manifest next update: Wed 27 May 2026 16:51:22 +0000
Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: N7bh5c5QMn7L74eMPAN4ZuEAnws3WkT3m6dKyLsz8rQ=)
2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: 5RNyMR+3G/bk8qvZSiyds5uiwVr/sSQ5ExXQPxGSzo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5309 (0x14bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Validity
Not Before: May 20 16:51:22 2026 GMT
Not After : May 27 16:51:22 2026 GMT
Subject: CN=6a0de68a-0271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:1a:d5:ff:d2:59:7b:f7:54:94:d6:a0:25:
7b:d7:73:e2:06:53:3a:73:52:2e:a3:4b:17:4f:ad:
ce:12:b0:04:e6:c8:1a:c1:59:aa:78:17:14:4a:ae:
b4:df:2a:68:b6:4d:03:ac:8d:10:12:5c:cc:f9:8e:
b4:56:c4:8b:8e:71:21:0e:4b:f9:ad:c1:ab:e9:c9:
1e:22:22:e1:da:b6:84:bd:ce:1b:cb:64:07:cf:d4:
16:ad:ac:87:2a:27:cf:88:8e:12:5b:f5:ed:13:24:
4a:72:c3:51:37:09:46:ef:2e:03:fd:c9:7a:80:72:
6f:14:50:53:36:c7:85:5e:eb:2b:6b:5f:7e:44:c0:
64:ee:a7:5e:cd:71:c9:e4:f9:45:ce:84:41:74:72:
71:0a:4d:da:75:fb:65:e1:24:e3:43:b8:d9:e0:7a:
54:19:19:51:bf:fb:cb:09:d1:df:ec:86:68:bf:15:
e4:0c:38:4c:45:4a:96:f3:b0:55:b7:68:11:84:ac:
10:38:e5:35:fa:ef:fb:8e:ef:7e:69:9c:64:bc:ab:
8a:b3:19:28:c5:80:fd:28:80:41:27:dd:8f:6e:00:
97:ec:55:57:48:5e:08:f9:cd:2f:dd:4b:df:e3:16:
e4:a5:88:20:44:c2:06:7b:39:7a:66:9e:7d:f7:39:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:87:81:43:59:CE:C8:6B:D3:AA:8C:5A:C3:99:DA:96:1D:13:54
X509v3 Authority Key Identifier:
keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:9c:d8:46:75:b2:44:b4:0a:1a:fa:48:67:78:52:6e:fd:33:
41:3d:36:66:f4:90:d9:b7:90:c0:4a:18:a7:17:f3:ae:bc:58:
99:4b:40:04:b6:c4:bb:d0:6b:50:e6:00:d1:c9:85:e3:d6:ff:
99:98:b5:8c:90:e0:13:81:e8:14:ae:5c:1a:6e:43:ff:53:b2:
67:ef:60:bf:de:a4:02:db:f3:40:cb:88:ae:79:da:16:07:84:
a4:38:6d:10:63:02:21:b2:10:7c:59:f8:53:35:65:01:20:91:
4a:97:95:29:4d:61:f2:e2:d0:f0:58:54:aa:4e:c2:56:3b:a2:
19:f4:39:fd:f5:c7:11:6d:42:a6:1a:dd:39:72:4a:24:04:4d:
7d:ee:3f:e3:1b:0e:ac:ff:ba:98:69:fc:68:20:08:ee:88:0c:
65:cd:bb:c0:4c:36:2b:a2:6c:2c:43:6e:c0:9a:77:e8:48:ec:
de:cc:31:fc:f1:8f:ed:da:7f:18:0a:2d:ac:05:cf:85:63:16:
c9:f6:98:4a:03:eb:de:0c:6c:e0:ab:40:b1:30:70:b1:41:92:
cf:61:7b:37:bb:de:7f:46:0f:c7:56:19:fe:4c:80:2d:6b:3c:
e9:99:de:ab:2e:ba:39:23:de:2c:4b:13:61:d5:69:83:b7:ed:
4d:4b:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:49 2026 by rpki-client