
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
File: xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json)
Hash identifier: qBZQvsyr2JxW3QFNv8e/8h+vAqlxybFj7cMM1QvazYs=
Subject key identifier: 63:1A:31:D6:8E:88:52:7C:AB:C2:9F:8B:CE:C5:73:CC:2F:74:8B:40
Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12
Certificate issuer: /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
Manifest number: 06
Signing time: Fri 17 Jul 2026 10:33:13 +0000
Manifest this update: Fri 17 Jul 2026 10:33:13 +0000
Manifest next update: Fri 24 Jul 2026 10:33:13 +0000
Files and hashes: 1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: KRln0PfvAZ064wcjlo+ECN3zpRTd79FU2wPARqJ+pW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl
rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212
Validity
Not Before: Jul 17 10:33:13 2026 GMT
Not After : Jul 24 10:33:13 2026 GMT
Subject: CN=6a5a04e9-7bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:c2:27:f4:6e:72:9b:01:9b:45:51:c4:4f:
b9:6b:88:93:00:3e:b3:22:b0:be:e7:bc:1f:fb:38:
9f:d0:29:3f:2b:16:50:d0:f9:7c:78:d6:6a:32:39:
c1:54:e8:a0:74:8d:cb:ac:ef:7b:93:12:46:81:b7:
90:89:00:cf:2b:ea:6c:eb:ef:ae:62:93:98:ac:51:
16:15:48:b4:d3:e3:bf:b4:61:1b:54:eb:61:1d:84:
0f:cc:30:48:22:13:f8:e8:9c:b7:4f:79:17:59:dc:
cd:c8:58:81:06:c8:a3:f1:a9:97:b4:d0:d1:b0:b3:
eb:92:69:af:14:6b:4b:62:1a:cb:05:51:6c:f1:95:
df:0e:02:31:7d:3b:4d:72:e0:2c:16:b5:d2:56:ba:
b5:cb:71:60:51:cb:b7:c5:82:1d:cc:c8:66:d6:ef:
86:ad:d0:97:fe:64:4c:17:c8:e8:b7:2b:ee:eb:de:
c5:cc:31:ad:75:c9:e9:03:5f:4b:6c:24:13:d5:73:
01:ef:08:8d:5d:e9:41:b1:c1:e3:d1:9e:ae:8d:db:
73:fa:3c:77:1c:f4:10:d9:ac:17:8b:32:e2:4a:05:
18:64:6f:a0:62:3a:a0:70:ca:07:8d:9b:17:ca:11:
6c:2e:13:1f:66:67:48:96:80:da:64:be:ce:32:e8:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1A:31:D6:8E:88:52:7C:AB:C2:9F:8B:CE:C5:73:CC:2F:74:8B:40
X509v3 Authority Key Identifier:
keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:47:36:1f:ae:72:69:dc:95:e7:f0:35:18:1b:69:0a:90:
e4:6e:bb:3c:89:ae:c1:cb:bc:a9:e8:eb:36:8f:61:46:26:cc:
1b:1a:39:7f:99:76:c5:04:1f:3a:e0:39:34:0e:13:a0:a8:5a:
b0:14:2d:a8:04:7d:e8:51:01:c1:e7:82:4e:e2:85:1e:9f:9f:
04:fb:e9:ae:3a:22:30:3c:56:7b:38:23:3a:e6:5e:72:a7:29:
d3:6f:52:1e:1f:87:2b:16:01:53:f9:88:f8:a3:e8:eb:ca:e2:
3f:7a:b8:d6:9a:f0:60:b2:ed:b5:ab:77:c7:2c:f2:4c:e3:ba:
9e:fa:29:7c:6d:ea:74:8f:3e:f1:d1:c9:35:16:d5:b9:37:c8:
27:13:08:6c:4a:d6:df:88:17:1c:7e:0e:a1:ae:cd:2c:fc:02:
c5:b6:c7:8f:bb:65:e4:63:93:90:7b:5c:82:75:1b:15:31:86:
26:1a:64:2f:4c:fa:81:36:f7:1c:55:17:11:9f:e4:7c:10:81:
4d:24:52:ac:5e:ac:c1:3d:97:88:a8:73:f3:4a:39:37:29:f4:
65:a4:a0:fa:79:a2:6f:b1:be:be:c8:f8:23:ac:25:f7:f9:69:
40:46:c1:44:8b:ee:c7:07:b4:bc:5a:63:0a:33:e2:e8:cc:7c:
d3:8c:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:00 2026 by rpki-client