
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: gg6wDKQ+xo7S4+h8weCt1A4TIAmH2uW98bD/9WIN6gg=
Subject key identifier: 05:FE:82:78:7E:EB:09:98:16:94:31:F4:DB:C4:2B:0F:F5:19:86:E5
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 079E
Signing time: Mon 22 Jun 2026 21:30:54 +0000
Manifest this update: Mon 22 Jun 2026 21:30:54 +0000
Manifest next update: Mon 29 Jun 2026 21:30:53 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: BVJkcBPefMXzDHsFbwwr11MGxSIjIeFomvnZZ+V0NRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Jun 22 21:30:54 2026 GMT
Not After : Jun 29 21:30:53 2026 GMT
Subject: CN=6a39a98e-176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:db:10:df:3a:6a:31:78:2f:5e:91:ff:a1:
9e:43:a5:e7:7f:fa:c3:15:9e:27:b3:c3:29:db:cd:
93:4c:f7:10:1f:74:2c:60:56:41:e5:0d:3f:1a:f9:
ad:ec:2c:bb:76:8a:33:4b:a9:ae:f5:ff:a6:bb:d4:
14:25:40:cd:75:bf:05:ac:ae:f3:5f:67:c1:82:f7:
90:38:44:93:09:a0:75:fc:d5:89:6e:c7:cd:e4:2b:
ac:48:1e:c9:64:76:53:f3:f8:b7:e8:93:e7:03:32:
24:da:ef:7c:22:12:ca:b1:b3:e2:d3:a7:88:9c:19:
96:74:03:f1:e0:1e:0b:ee:f0:91:68:a2:82:0f:7c:
2c:2a:7f:71:21:45:cd:da:37:2f:b9:07:64:c1:b9:
c9:43:25:34:82:5d:7b:18:85:82:63:21:b0:51:16:
71:22:8d:48:3e:d1:d5:c1:34:19:48:20:ae:a8:a5:
57:c0:fd:da:b3:e6:20:ff:a5:b7:ea:b3:25:68:3d:
ec:c6:78:88:07:d9:4e:1a:2b:0c:fe:ed:82:30:f4:
3b:d5:ad:81:1e:ea:d5:f6:a5:b8:a1:74:bd:03:7a:
25:2a:59:bf:83:e0:bd:c0:c0:d2:32:43:20:6d:40:
b3:1f:6e:b0:ce:27:74:31:a1:3e:da:9a:d9:45:32:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:82:78:7E:EB:09:98:16:94:31:F4:DB:C4:2B:0F:F5:19:86:E5
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:7d:1c:09:62:83:4e:ae:63:ec:da:3c:59:7a:f3:a1:a8:
51:52:71:1b:45:68:b8:cc:53:c3:bf:65:66:ac:b4:46:c2:82:
b1:d6:5e:30:ff:d1:1b:e5:06:58:e5:cf:2c:5d:44:ce:5e:41:
22:9e:26:c4:d9:0b:f6:75:69:da:e1:c4:27:f0:da:de:47:0c:
45:2c:73:85:bf:2c:61:1f:3b:ff:c6:95:2b:1e:27:53:73:07:
81:f6:fa:02:ef:24:c5:65:fd:ae:34:3a:25:fb:6f:9f:9a:43:
11:cd:d2:70:ac:2a:e1:2d:14:d2:bc:e5:39:e4:9b:29:38:c5:
bc:c4:cc:ed:02:89:da:90:79:1f:6b:88:a6:07:d6:fd:c0:66:
bb:84:d4:cf:99:9c:78:67:c2:87:f6:1c:8b:68:d8:1b:70:59:
8f:0d:ff:c9:85:4d:a3:3e:97:9d:f6:1a:97:54:8c:be:f1:15:
9d:0f:8e:b0:ed:d7:36:8d:49:cb:8d:25:c6:6c:77:aa:c9:ac:
59:97:20:4d:44:e6:34:54:41:41:e4:dd:48:2c:d7:7a:e2:2e:
78:9b:72:46:2d:a0:29:cb:57:90:5f:50:8c:40:b4:21:67:fb:
0f:5f:48:c8:43:26:1d:9e:d7:40:39:b9:d6:a7:70:17:d7:f9:
2c:68:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:12:33 2026 by rpki-client