
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json)
Hash identifier: BJoNl7lNt0haXxIVslITU45U61G3fN1ttt0anlWTPSo=
Subject key identifier: E9:30:5D:2E:CE:A9:D3:B2:65:4A:FC:7B:62:A0:99:6F:74:77:EF:71
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 0829
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
Manifest number: 07E8
Signing time: Wed 10 Jun 2026 21:26:40 +0000
Manifest this update: Wed 10 Jun 2026 21:26:39 +0000
Manifest next update: Wed 17 Jun 2026 21:26:39 +0000
Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: BIxCeOVLSTzj+H9MTWoEV/N87IvSpDWz4s4meXWpFp8=)
2: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: 2PM2q9cUg2P0NzsrCEQgTadgMBgcus+n4gLLyMzQ2+A=)
3: 9507206A63A111F092E32646C4F9AE02.roa (hash: zbwsIMflxwphg5gU9UqOZAbwNHUfzLTXefSGHx8E9Ms=)
4: 66FC64186D0711F0AC1BE951C4F9AE02.roa (hash: gVwWJAGwFMN8FtAbSFBX/YkFLx2iObisxi/ECzC4Gms=)
5: 94A5320663A111F092E32646C4F9AE02.roa (hash: sIgCJcq0Zl47ilkYoj6SY92FU+t+igEFIIfzQQa1AGM=)
6: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=)
7: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: 07OvimTtnDe97y43gOmhP2mYLb6FKJ2TL30DbKiYSdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Jun 10 21:26:39 2026 GMT
Not After : Jun 17 21:26:39 2026 GMT
Subject: CN=6a29d690-14a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:9b:9a:8f:4c:c9:c2:17:ef:fc:85:5d:d6:
06:d9:86:57:ea:e4:6f:9b:fd:ed:b3:f9:34:5d:04:
d8:7a:a4:58:08:6d:99:5e:e4:85:79:f2:aa:a9:3e:
de:b3:7d:50:78:53:f2:c8:67:9f:a2:9b:24:47:b9:
ee:4c:08:fc:ae:17:07:a5:4e:33:a5:c9:c0:33:1b:
55:66:8f:fd:e9:bc:f1:b5:39:49:0d:ec:cb:a7:db:
cc:c6:20:d5:95:f2:43:8a:d5:86:12:35:d2:6a:d2:
d9:94:a4:12:6b:d9:c5:64:7d:7b:ab:97:9a:a6:a2:
96:93:8f:bc:ad:27:2e:6c:3c:ed:e7:69:a3:f5:dd:
ef:24:ea:fe:75:12:c5:09:86:d3:e9:11:43:15:ee:
85:4d:d2:1f:04:d6:5b:c9:ab:c7:77:f1:4d:f8:0e:
21:99:a7:ae:42:7f:2b:82:ef:6e:02:bd:35:58:ae:
bc:ef:96:c3:0c:72:1f:c7:07:fe:8a:1c:bf:6e:37:
6a:65:49:5e:4a:de:95:bc:29:27:db:58:d1:5f:44:
86:5e:60:d9:b2:24:5e:e5:5f:35:e6:55:4e:0a:ca:
23:1b:91:52:16:17:bc:fd:30:36:34:5a:69:15:1b:
14:6b:c0:57:44:ee:78:c8:b1:10:c8:36:19:ad:c1:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:5D:2E:CE:A9:D3:B2:65:4A:FC:7B:62:A0:99:6F:74:77:EF:71
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:10:5f:67:34:eb:0a:e7:e4:34:40:14:be:bb:86:cf:13:
4f:d5:5e:a3:3e:cd:47:37:26:4b:e8:f2:eb:cc:54:5c:ed:54:
c4:dc:d6:eb:99:66:31:92:2c:b0:cc:7e:35:98:cb:f7:74:4f:
90:d4:ac:b2:37:b0:ec:a7:03:86:6f:f3:53:ec:29:2f:dd:15:
b2:23:65:3b:2f:be:ee:1b:b1:1f:6b:ef:37:04:9c:37:38:70:
92:db:24:9b:72:23:60:79:32:c9:d0:77:fe:d2:27:f2:97:fe:
45:3f:d7:72:3d:00:6a:92:be:00:60:e1:2a:f2:c2:4e:a2:db:
3d:72:53:1a:a9:06:74:1d:15:bf:51:1d:b1:97:09:04:ab:5b:
62:5f:59:39:c9:e5:cd:37:74:3b:de:52:4c:36:36:37:28:71:
b9:f8:1c:4e:e4:03:fb:c0:a8:bd:33:99:2c:75:8a:a5:64:04:
b2:79:8d:87:29:7b:2f:23:1a:fd:92:3a:64:31:e7:79:88:e8:
57:4b:8a:13:06:a8:12:25:00:65:54:89:f0:a7:9c:96:28:ea:
c5:1e:77:89:20:86:97:e1:60:2c:d7:54:07:34:28:f5:cf:87:
ef:3f:41:cf:db:9e:9e:b1:55:b7:dd:42:bb:05:be:f3:6a:44:
3a:76:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:41:32 2026 by rpki-client