
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier: 705Cv+fi1HN2rEgq+nCDk6kA1VZlWYaziNDQLGJW1VU=
Subject key identifier: A2:F7:7D:3B:2F:15:E2:6B:1F:51:FB:50:AE:1F:CA:5A:52:45:B6:96
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial: 05C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number: 05C2
Signing time: Wed 20 May 2026 23:09:27 +0000
Manifest this update: Wed 20 May 2026 23:09:27 +0000
Manifest next update: Wed 27 May 2026 23:09:27 +0000
Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: 6DnUkQCfKsObDip03dvi3xn8sj94RnXjyvotgpbJ+IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Validity
Not Before: May 20 23:09:27 2026 GMT
Not After : May 27 23:09:27 2026 GMT
Subject: CN=6a0e3f27-6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:21:2b:e9:e9:78:cd:46:df:59:7c:d1:45:
9f:a0:e2:29:e2:c1:00:75:3f:0f:a8:0f:fc:e4:55:
3c:c2:35:65:e7:3f:cf:08:ce:f8:15:26:6d:f6:6f:
63:1d:f0:50:33:a9:bd:e2:2d:b5:18:64:72:29:a4:
12:72:0e:3b:d3:7f:7e:04:73:41:76:f2:52:54:b1:
9b:af:c6:8e:56:f4:c7:45:ff:47:5c:c2:02:0b:73:
fa:77:cd:91:28:8a:19:e9:b4:3c:06:79:de:7d:58:
d8:d0:77:51:29:7e:d1:ec:cd:63:88:85:1e:73:30:
97:9f:47:4d:63:30:6f:30:9b:56:87:b3:7b:80:a9:
64:61:11:f2:08:84:15:4e:15:1d:41:ac:82:28:c6:
cb:df:a7:b8:fa:2c:c3:22:f0:21:97:81:eb:58:fa:
31:8f:9d:c8:3a:f7:3f:3e:0a:0f:1b:bb:a2:7b:07:
63:5d:ae:78:ed:85:3a:52:72:cf:ad:72:89:07:17:
fd:82:54:be:b5:b0:bb:b2:9b:65:cb:83:04:76:ea:
c3:3b:9b:c6:ee:01:57:cb:a8:f0:5c:6e:ba:70:67:
02:25:7d:79:d1:80:c4:5d:8a:9b:36:84:6d:50:ee:
3f:f5:1b:9c:5e:e1:bb:82:78:69:18:9c:8a:3a:e1:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:7D:3B:2F:15:E2:6B:1F:51:FB:50:AE:1F:CA:5A:52:45:B6:96
X509v3 Authority Key Identifier:
keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:0b:c0:e7:c2:3c:45:7a:42:31:74:c8:1b:7e:8f:7c:1c:61:
89:cd:45:04:4c:aa:04:c0:ee:c1:09:98:17:03:70:dd:f3:80:
b2:52:cd:b3:34:df:e8:4a:4e:80:37:ca:ef:9c:ae:b5:92:c2:
f0:bc:3d:6f:49:31:ff:16:f8:12:ea:d6:fa:02:98:08:96:52:
df:25:d7:c8:bc:4c:d6:95:a5:cb:c7:e9:c3:0b:5f:97:97:cb:
4c:5a:51:cf:37:68:a1:08:a6:69:b0:2e:c1:42:9b:98:0c:63:
0d:56:71:06:d9:e8:af:72:97:c9:ac:e1:e7:ef:a4:84:6c:1a:
09:44:28:b9:be:64:8c:82:c9:55:4a:21:4a:7e:59:e1:a6:2b:
e7:c7:f2:84:c8:b7:76:fb:06:61:7f:9f:b7:47:b1:98:59:21:
6d:ec:e2:1c:10:2f:8a:a9:79:06:ed:59:89:93:cc:ae:7a:32:
e6:fc:ba:80:8a:4c:1b:64:87:9b:0e:ed:a2:9a:c0:f5:ca:0c:
44:5f:a6:f6:43:a8:f3:a8:4e:be:fd:81:4c:13:2b:84:ba:09:
c4:11:50:9e:17:a4:0b:29:5e:de:57:75:61:c8:67:69:af:85:
44:df:9a:49:c8:3f:ac:5b:e0:2a:e2:86:5d:29:13:a1:8d:6c:
4a:3a:c5:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF
RDU3NUYxREMwHhcNMjYwNTIwMjMwOTI3WhcNMjYwNTI3MjMwOTI3WjAYMRYwFAYD
VQQDEw02YTBlM2YyNy02ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLchK+npeM1G31l80UWfoOIp4sEAdT8PqA/85FU8wjVl5z/PCM74FSZt9m9j
HfBQM6m94i21GGRyKaQScg47039+BHNBdvJSVLGbr8aOVvTHRf9HXMICC3P6d82R
KIoZ6bQ8BnnefVjY0HdRKX7R7M1jiIUeczCXn0dNYzBvMJtWh7N7gKlkYRHyCIQV
ThUdQayCKMbL36e4+izDIvAhl4HrWPoxj53IOvc/PgoPG7uiewdjXa547YU6UnLP
rXKJBxf9glS+tbC7sptly4MEdurDO5vG7gFXy6jwXG66cGcCJX150YDEXYqbNoRt
UO4/9RucXuG7gnhpGJyKOuE/fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKL3fTsv
FeJrH1H7UK4fylpSRbaWMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC
N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ
VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6gvA58I8RXpCMXTIG36PfBxhic1FBEyqBMDuwQmYFwNw3fOAslLNszTf6EpO
gDfK75yutZLC8Lw9b0kx/xb4EurW+gKYCJZS3yXXyLxM1pWly8fpwwtfl5fLTFpR
zzdooQimabAuwUKbmAxjDVZxBtnor3KXyazh5++khGwaCUQoub5kjILJVUohSn5Z
4aYr58fyhMi3dvsGYX+ft0exmFkhbeziHBAviql5Bu1ZiZPMrnoy5vy6gIpMG2SH
mw7toprA9coMRF+m9kOo86hOvv2BTBMrhLoJxBFQnhekCyle3ld1Ychnaa+FRN+a
Scg/rFvgKuKGXSkToY1sSjrFdA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:23:34 2026 by rpki-client