
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier: QlePqJrSStSga9G7ky9U9W71zNK4rUHD/263uFT07dc=
Subject key identifier: F0:90:E3:BF:A8:96:02:B7:AC:9D:29:54:31:C7:54:D7:95:AA:52:10
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number: D1
Signing time: Tue 23 Jun 2026 06:56:42 +0000
Manifest this update: Tue 23 Jun 2026 06:56:42 +0000
Manifest next update: Tue 30 Jun 2026 06:56:42 +0000
Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: 45X4u6g04S7VjPVb+MuNl41KYxHwbA5YZh5eVYi27vk=)
2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: D4Fh/NIHj7fZ34zloZMh/akkaTIXbYqXpUa5vCDjjrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 06:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Validity
Not Before: Jun 23 06:56:42 2026 GMT
Not After : Jun 30 06:56:42 2026 GMT
Subject: CN=6a3a2e2a-de1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:1c:43:16:8f:21:67:39:56:91:98:99:55:
e8:59:cf:32:1c:2a:1d:94:6e:62:27:8f:a9:6d:3b:
60:b3:e8:7a:b2:b9:7b:3d:f4:b0:86:b5:fe:7a:55:
2d:b3:10:fb:81:4d:8e:2c:39:1b:e8:e2:81:8b:8e:
da:81:fd:ff:80:5b:bc:68:c6:5a:b3:7a:da:7a:58:
3b:18:ff:df:0c:94:83:db:6f:c3:f7:80:9c:f5:43:
34:8d:23:8d:79:41:6a:01:f7:3f:c3:ef:fe:58:2c:
e1:72:b1:92:90:12:6b:9b:94:f9:80:c6:73:ee:9b:
f7:89:9a:ab:39:6c:8a:12:50:1d:84:fa:6b:45:58:
b8:1b:77:e6:31:b2:35:b9:76:82:e1:cf:b3:dd:bc:
e1:29:27:d6:2d:39:55:cd:b7:22:7e:8d:cb:03:46:
32:4a:2f:38:7b:7d:5b:23:1e:29:71:d4:61:ca:f6:
94:3f:b1:60:a2:e3:75:d9:b3:71:5e:23:34:11:5c:
7b:d9:0c:62:0a:37:e4:55:31:f6:a2:f3:8d:10:84:
c5:8f:80:76:11:d8:39:dc:e1:80:cc:9b:69:d3:3a:
bd:a2:67:47:e9:99:3f:9a:72:fc:2b:0c:bf:69:0a:
c1:cb:cd:d8:2c:d0:e1:1f:53:97:ec:23:d4:07:b0:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:E3:BF:A8:96:02:B7:AC:9D:29:54:31:C7:54:D7:95:AA:52:10
X509v3 Authority Key Identifier:
keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:ca:6a:0d:e9:96:38:b0:68:85:cb:d5:60:4a:5f:ea:96:
15:0c:89:00:cd:f0:a9:8b:72:b8:d5:20:07:42:e6:f2:04:b1:
fd:03:6a:5e:41:59:91:03:c0:16:2f:88:89:bb:8e:09:13:84:
18:53:0f:ed:7b:c9:bd:25:1b:59:df:5e:ce:b1:2e:8d:15:9e:
a2:1b:5b:8b:69:e1:9a:ee:26:0d:0a:c5:05:7b:56:c4:25:21:
af:3d:9b:a9:2f:f5:cb:ba:d4:b8:f1:00:55:7c:42:85:21:d1:
91:52:3f:bb:4b:85:a6:06:2c:37:d5:c3:98:64:ca:c7:d4:74:
4e:d6:eb:d8:82:ea:a1:f9:62:1d:08:ff:f3:33:70:d2:63:59:
0d:8b:ab:11:06:6f:a5:d0:79:6f:fc:79:05:9e:83:18:5d:d6:
ae:6f:04:ee:7f:63:a5:c6:20:b6:d4:59:0b:cb:1a:ac:cb:7f:
53:87:cc:61:a0:cd:b6:7b:ca:73:45:cc:2e:1e:a7:e8:6b:2d:
2f:5e:b8:59:4c:41:3f:53:22:54:87:8a:bc:24:df:c8:80:f3:
cb:29:18:a4:5f:9d:8e:ed:ad:b6:9d:3c:96:23:72:d3:b0:24:
f6:0c:e0:b8:db:14:f7:af:7a:de:74:13:54:7e:3a:72:10:3b:
36:b0:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:13:31 2026 by rpki-client