
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: cIdsauHOwZR8wVSyQ+u4V2RS8DlBLok2vgglClpe6XE=
Subject key identifier: 6E:5A:72:EC:3B:29:82:4E:4E:2F:AB:33:7A:40:5C:24:ED:39:88:26
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: 0105
Signing time: Mon 01 Jun 2026 06:52:52 +0000
Manifest this update: Mon 01 Jun 2026 06:52:51 +0000
Manifest next update: Mon 08 Jun 2026 06:52:51 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: nJlDJKZIYFpEEb1+roI3B1G8qydHML7cuImWtV173YY=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Jun 1 06:52:51 2026 GMT
Not After : Jun 8 06:52:51 2026 GMT
Subject: CN=6a1d2c44-a642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:27:81:60:4f:cc:69:6e:3d:6f:db:1e:8f:
c5:ee:e5:e7:80:a9:0e:0d:fa:8b:e1:bd:90:3c:82:
4f:fb:1e:7f:ca:99:3e:b5:e5:42:0b:49:32:be:2b:
37:01:34:45:0d:c3:fb:a2:bc:47:d6:ca:9a:96:77:
08:61:39:dc:71:ce:83:dd:b4:7a:f8:72:cc:2d:d7:
17:9a:a2:ea:63:96:50:15:f2:6b:8d:ae:83:75:c5:
ed:78:8c:d0:25:70:d7:f6:b9:22:19:2b:8f:6a:cc:
a8:6f:80:e7:82:ef:7e:67:46:ed:93:b8:b6:3c:59:
c1:21:86:f9:2e:df:e1:49:6b:85:d7:85:23:3c:29:
95:e3:70:9e:28:bd:da:8d:65:0c:bc:a7:e8:ad:2c:
ca:7c:b8:56:56:cd:f9:01:53:88:b5:ae:85:10:c6:
5b:fc:9e:c7:20:ec:0e:93:af:fb:e2:73:89:d5:cb:
23:98:f2:56:5d:b9:72:8f:58:7d:81:ac:c4:5d:a5:
de:79:f6:38:94:31:80:5a:f3:aa:72:de:17:a4:37:
9a:f7:41:a5:66:6b:e5:77:9c:7b:4e:5f:20:8e:9a:
f9:09:4c:60:8d:ce:84:e5:4d:68:c8:5a:5a:ad:9f:
19:81:90:f1:4c:75:85:e3:91:99:40:5d:49:85:78:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:72:EC:3B:29:82:4E:4E:2F:AB:33:7A:40:5C:24:ED:39:88:26
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:2c:d6:f7:15:96:c6:43:ba:bc:e4:26:f9:e3:37:0e:5c:ca:
ff:71:bd:89:d5:8d:b1:94:78:23:af:96:8e:76:58:ac:ab:93:
14:1e:a1:45:2c:18:37:73:5e:77:30:e9:10:5f:af:0b:56:45:
3a:f0:e8:0d:80:9c:ac:39:1b:fc:68:b1:31:be:1e:c6:9f:2d:
d1:51:9c:bd:28:d0:24:7a:ad:43:97:86:5a:71:07:c2:68:14:
d0:1f:07:11:cb:96:41:8f:64:35:89:f1:b2:06:c7:67:ae:5c:
25:ee:5c:f9:99:ae:18:b2:49:4a:01:3d:43:7a:44:4f:4b:b7:
56:6c:5e:f2:f3:af:00:bb:04:e2:d7:52:89:da:6f:8f:9a:92:
04:0c:6e:d4:a8:54:8a:12:70:a7:98:61:f5:59:41:7b:72:8b:
c4:da:e8:5f:0d:b5:34:f1:57:b9:0f:81:f2:15:f0:4a:72:c6:
a1:fe:a7:1d:19:c9:76:3e:5e:25:f3:a4:79:1b:af:01:5a:46:
dc:d6:45:0d:e3:84:f3:1a:32:3e:b2:50:1b:a4:04:96:e6:9d:
1f:6c:c5:46:d4:7e:26:9f:61:98:96:9d:15:e3:8c:6f:1a:21:
32:de:f3:93:7a:59:2d:01:5c:c9:0d:fe:1f:e7:a1:c4:70:92:
58:40:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client