
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier: SnaDFOvqsML9kdqahrE4QWsE0I8AxHBAaNEZDPbSBLc=
Subject key identifier: F0:51:51:B0:1B:9A:99:A1:56:BB:54:99:47:98:18:01:94:F3:C1:E9
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number: 0230
Signing time: Mon 15 Jun 2026 02:50:02 +0000
Manifest this update: Mon 15 Jun 2026 02:50:01 +0000
Manifest next update: Mon 22 Jun 2026 02:50:01 +0000
Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: YwBkciH6+O6L0b6YUiCs68EL+uC68pjGKJZlcNgHz9E=)
2: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=)
3: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=)
4: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=)
5: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Validity
Not Before: Jun 15 02:50:01 2026 GMT
Not After : Jun 22 02:50:01 2026 GMT
Subject: CN=6a2f685a-1b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:1e:13:77:8d:18:1b:9b:4d:5e:a9:d8:4e:
23:41:2c:a8:55:72:80:a0:e2:95:27:8d:12:e6:6f:
d4:6f:e4:d1:1b:49:33:55:c1:96:46:83:fd:03:e5:
17:1e:70:ef:7b:fe:df:e2:8e:98:a1:d7:5b:36:19:
5e:1b:25:59:56:3b:b6:27:a3:75:58:1e:9c:ba:25:
a2:b3:3f:0f:59:20:bb:34:ee:66:68:e6:13:b5:1c:
e7:4f:ca:91:d0:c9:d3:8e:3c:2d:8c:aa:4b:be:ad:
3a:b3:3e:8a:93:47:44:e2:e1:cb:fe:ab:84:d5:5e:
74:d6:f3:f4:d0:7c:40:48:a2:4a:25:5f:a0:55:14:
46:7c:7f:12:41:5e:45:32:22:5c:ff:2e:0c:4c:93:
1a:00:21:56:d5:4a:28:2c:68:7e:f1:76:fd:eb:c3:
ce:7a:2e:4a:b2:f8:c2:68:0d:78:30:17:ce:5d:0a:
1a:06:05:e5:39:f5:7c:f0:fb:6c:ce:db:79:1c:d1:
d8:3d:5c:15:63:94:32:4b:dc:9d:00:dc:b0:f0:65:
c2:e5:17:71:d1:a1:0f:eb:ad:db:8b:3e:e4:30:51:
fe:83:18:91:51:25:ee:18:b3:8c:f5:21:aa:18:42:
9c:e0:bb:35:a1:d2:6c:97:22:fd:77:5a:45:6c:f1:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:51:B0:1B:9A:99:A1:56:BB:54:99:47:98:18:01:94:F3:C1:E9
X509v3 Authority Key Identifier:
keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:35:05:b8:1e:ef:8c:d5:50:a4:7c:ad:fa:1e:b0:1f:11:
93:58:96:19:6d:58:a9:b7:b2:e8:a5:af:85:23:d9:e1:da:2e:
b4:d2:8d:af:46:b0:e3:7a:be:5c:ed:07:d5:b6:b9:f7:d2:f7:
56:dd:7c:d6:44:26:c0:28:1c:60:c6:d1:e2:1e:97:0b:46:c6:
4d:0c:d3:27:8a:f6:0b:74:fc:97:eb:5e:29:a4:fd:c6:e2:75:
1e:84:96:7a:ae:d4:03:29:1c:d6:cc:49:5a:e8:01:2c:c4:0f:
61:01:07:a5:12:1c:02:a4:f7:88:6b:07:74:5b:62:7e:fa:e8:
24:f7:56:e2:e0:b8:e2:c2:c6:d7:9b:a4:63:9d:07:fd:c2:a1:
59:2a:32:73:c9:63:40:7a:65:64:04:86:e3:dd:23:34:15:7c:
c3:f1:a1:90:ed:97:bd:72:5e:dd:c8:b9:5f:8c:cb:d4:e6:23:
e7:b9:69:c1:9c:e0:cc:d1:a7:00:16:ff:e6:a0:b7:b8:78:a7:
db:5e:c0:16:57:49:5b:95:b8:c2:9b:14:90:40:7b:e9:e8:b2:
f0:fa:99:b4:b0:0c:62:4b:61:a5:77:25:9e:a7:ae:43:59:75:
6b:6e:d8:3a:f4:39:1b:3b:0b:7d:47:12:de:7a:5a:0c:36:52:
5c:88:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 08:01:54 2026 by rpki-client