
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier: ldEAcXTZ6dBnhNAcTHvB4pNEGJMb1rYm6uSGzwjfwvY=
Subject key identifier: 51:ED:53:59:39:01:4F:F5:98:BF:30:B5:53:D2:D4:31:37:1E:77:11
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial: 0740
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number: 0735
Signing time: Sun 31 May 2026 22:23:14 +0000
Manifest this update: Sun 31 May 2026 22:23:13 +0000
Manifest next update: Sun 07 Jun 2026 22:23:13 +0000
Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: wuTrqUoerZHmYvrG9My0vGR2zy0L6FXZzifv6U+s/G0=)
2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: LQ6rMhZDzAY8FPwtfGTf2Oca3RZNu+bmDyNVPU27Ec0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Validity
Not Before: May 31 22:23:13 2026 GMT
Not After : Jun 7 22:23:13 2026 GMT
Subject: CN=6a1cb4d2-d17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:ba:a3:cf:3f:b2:73:bc:2b:1c:a1:b9:c1:
c3:30:0d:d4:dc:a4:a2:ff:dd:79:32:30:79:72:de:
ff:dc:60:7f:87:82:0d:6c:1a:f9:2e:12:2c:f2:9b:
a9:f8:27:c9:7b:c9:0e:3b:32:03:40:72:30:95:9e:
1c:59:88:f6:a4:c0:37:c2:65:46:fc:9a:4b:7f:1c:
0a:a2:b7:42:b6:37:44:ed:5d:d1:0c:fb:d9:3a:61:
a2:34:53:0a:9c:5d:8c:93:f5:82:9d:8a:63:95:fa:
de:eb:d4:50:f1:69:54:18:f0:7f:5b:9a:9b:59:90:
7d:d0:13:63:f3:48:b0:9a:db:05:6f:21:11:a2:e2:
f8:7a:de:f6:0d:29:4b:75:bc:e9:ee:7f:3f:ac:42:
83:96:80:48:04:36:51:00:f7:b2:96:e8:d5:2f:26:
13:80:cd:c4:47:21:eb:a5:df:72:44:77:2c:98:ee:
ee:d8:0b:80:fc:28:48:17:a9:fe:d2:ca:ad:1d:d1:
eb:33:7f:48:a3:d7:39:a1:22:51:7e:07:a7:a4:de:
fe:75:0b:42:fb:e5:da:56:2d:cd:c7:53:2c:df:0a:
f7:66:7c:d7:b4:f2:46:04:57:e0:52:21:50:7d:6c:
2a:3d:dc:59:3f:79:9b:06:53:ec:74:3b:12:e4:c8:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:53:59:39:01:4F:F5:98:BF:30:B5:53:D2:D4:31:37:1E:77:11
X509v3 Authority Key Identifier:
keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:12:15:18:b9:2d:f6:20:69:6a:34:1b:c7:64:45:47:71:b3:
c4:f2:9d:6a:16:85:c9:cb:fd:b1:79:d3:91:d2:38:29:50:82:
08:78:05:a5:61:17:4f:4d:f3:35:e4:4a:68:41:e1:13:5d:2a:
f6:27:27:79:e7:0a:b6:11:40:37:e0:6a:55:f2:30:e2:ff:44:
bd:eb:18:f0:07:de:c1:92:a7:de:2d:0b:ef:a4:b4:8e:f7:75:
5c:94:bd:3c:ae:cd:ba:ca:77:77:ef:65:6f:17:cb:c9:7f:f1:
d0:25:90:8b:f5:b1:40:5d:9b:b1:7b:d2:fd:c2:43:66:e8:08:
b0:b3:4e:5d:b6:7e:83:e1:04:0e:94:12:c1:c0:02:49:96:fd:
d3:82:a5:18:26:fb:d5:a8:34:df:d5:66:94:69:ae:31:54:1d:
6f:1a:87:41:b2:76:53:e0:50:0a:83:85:22:78:29:9d:d9:cd:
1a:ae:96:fd:ca:30:9a:0f:6e:b4:64:2b:69:e1:0a:10:23:0a:
42:22:e4:4d:60:94:8d:94:93:49:b4:a0:29:cb:3e:b3:80:21:
dd:7a:7a:82:43:68:a3:b2:13:58:a6:33:20:94:19:4f:1f:8c:
25:af:fa:4e:03:17:1a:b7:39:87:b7:c3:7d:63:13:b5:de:ae:
f8:13:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:02:49 2026 by rpki-client