
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier: 3v+l1hDIwNvdtj/9LIi3aYD3OxfwZrLOs2lae4tribw=
Subject key identifier: 2E:1B:65:56:51:E9:24:76:8D:99:06:91:B5:65:C6:79:BC:6A:75:24
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial: 035D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number: 0355
Signing time: Tue 23 Jun 2026 01:01:33 +0000
Manifest this update: Tue 23 Jun 2026 01:01:32 +0000
Manifest next update: Tue 30 Jun 2026 01:01:32 +0000
Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: j0AO+M35tNgjgnvxUO6DEBQ4i1FrsF0Ykjxp8YG5yEI=)
2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: ZLrpjaK1+7gnd1piN93H0vUz3/K0I8ARXc+tRTMhSrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861 (0x35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Validity
Not Before: Jun 23 01:01:32 2026 GMT
Not After : Jun 30 01:01:32 2026 GMT
Subject: CN=6a39daed-0d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:2a:be:72:26:bb:d6:c9:23:bf:8e:09:28:
c6:95:71:72:4e:fb:29:f3:ae:e9:c3:3f:c9:09:60:
6e:02:e7:bd:2b:d6:85:ad:62:6d:0b:b8:ac:58:9f:
1b:17:6c:3e:94:4d:da:5a:e6:53:2f:ac:89:45:0a:
c4:10:b3:1d:8e:a9:ee:f8:e6:dc:dd:ed:80:21:69:
07:4f:41:81:4a:ba:90:31:e4:3e:e5:e8:5f:e2:f1:
53:a4:98:7b:9a:30:1b:ff:80:25:b3:92:f4:99:c8:
8c:88:b3:49:e0:a6:8d:dc:62:4c:99:0f:ed:0c:ca:
a5:0e:ca:bd:35:ad:20:85:0e:48:be:3c:e8:f5:45:
a6:12:7c:91:f2:00:c3:06:16:33:ab:fc:66:26:e5:
b9:cf:5c:7a:2e:79:77:ae:cb:94:6f:ca:7d:3a:bf:
ea:16:02:52:82:c6:7f:91:7c:0b:52:25:b1:e3:b5:
19:01:40:99:fc:00:22:7d:ed:9a:b7:05:55:d1:76:
16:d5:e8:f0:26:8e:71:f6:3b:27:f9:1c:06:a4:57:
a6:4c:bb:a8:9b:19:15:68:03:7a:d5:f5:7b:4f:8b:
bd:db:1f:04:b2:ef:14:be:e6:24:60:d6:76:86:fc:
41:e7:39:08:a4:02:79:72:6b:5a:3c:c8:1e:ad:f8:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:65:56:51:E9:24:76:8D:99:06:91:B5:65:C6:79:BC:6A:75:24
X509v3 Authority Key Identifier:
keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:18:50:d8:fd:23:2b:95:1a:13:d6:e6:78:36:f3:6b:3b:e4:
d8:a3:aa:d4:91:37:95:9d:89:69:24:f3:4c:a6:0f:99:48:42:
e1:36:43:b5:ac:de:91:d8:f1:1f:79:34:df:02:50:ca:b9:bf:
f2:b6:fa:6b:26:8e:63:2d:ab:68:37:55:0b:4f:fa:0c:4a:26:
0b:84:6e:4c:f5:be:8a:5b:8d:9d:5a:0c:30:48:8c:ea:f1:8a:
94:32:7d:b6:84:59:98:32:6b:2e:b3:00:fb:2e:95:be:5b:75:
ca:f6:18:f1:2e:6a:6a:7a:2d:67:e9:8d:7e:82:92:4d:9f:ae:
68:bd:7f:08:28:26:51:15:7c:45:55:79:0d:93:95:9a:fc:57:
c1:f1:67:18:af:ef:5b:8e:af:71:73:48:dd:07:81:89:a3:0d:
c6:1e:ce:a7:8b:ef:b9:22:d9:83:22:ce:60:02:a1:02:bf:d7:
b8:26:ad:f1:a3:6e:01:14:e0:e6:7f:b8:58:3e:43:f7:28:57:
8e:e1:0e:ba:fb:07:26:6d:e8:8c:0e:e7:ee:01:50:d4:3a:1f:
e1:8a:82:b0:7b:ea:a9:c6:04:70:f1:06:9e:1b:c3:5a:26:c2:
0c:73:cd:af:ae:1e:ed:8c:38:4e:61:ca:b7:6c:04:bc:db:60:
8c:44:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:07 2026 by rpki-client