
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier: 6AulFrjGAu4KR54otkqDoND5Ft77rPvk9Q45WcX8gHI=
Subject key identifier: DF:87:6E:A1:C8:D6:CE:64:6A:AB:5E:FC:2C:72:29:F1:65:BE:FF:64
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number: 6E
Signing time: Fri 03 Jul 2026 08:48:22 +0000
Manifest this update: Fri 03 Jul 2026 08:48:21 +0000
Manifest next update: Fri 10 Jul 2026 08:48:21 +0000
Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: xcgx2elY77ED936i+4/6vDLF0q1xeKghEas2+j8Z6bU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 08:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Validity
Not Before: Jul 3 08:48:21 2026 GMT
Not After : Jul 10 08:48:21 2026 GMT
Subject: CN=6a477755-d5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:ea:36:9b:9c:94:a0:e8:56:9b:c0:0a:68:
93:13:48:36:e0:f8:05:3f:9d:b7:a1:51:f2:71:ed:
d2:b6:17:7c:97:b1:24:3a:23:59:b2:04:42:aa:f1:
60:a5:ca:12:78:44:a5:9c:a2:25:74:c6:62:36:d2:
6a:00:68:d6:f8:99:46:65:2b:c8:78:66:61:61:93:
64:84:60:b2:72:0f:a3:45:6d:2e:80:4b:d1:41:3b:
e0:81:c8:4d:81:50:d5:7a:b2:a3:ac:ca:66:21:c6:
c3:2f:79:2e:c5:52:24:5d:21:fa:4d:5c:d1:68:76:
75:1d:ca:bc:a7:f1:6b:5f:a0:d2:be:d9:44:5a:a6:
e3:34:1e:a5:84:92:1a:70:c2:d6:34:b1:ab:85:d8:
61:2d:74:12:ac:4c:d6:2e:3b:80:a0:d5:e7:c9:76:
e0:6a:04:c7:52:3e:8a:86:8d:ca:95:46:73:42:d2:
48:38:53:62:c9:49:5e:da:b2:d7:b3:ac:88:7f:55:
ed:19:17:f4:e2:ec:c3:c5:20:98:8e:83:ab:9b:22:
a2:ae:63:ef:94:b4:60:e4:6f:c8:37:1b:22:f8:53:
62:1b:92:3a:4a:24:d8:95:90:fd:84:c9:dc:62:aa:
c9:f2:08:21:60:aa:be:3f:21:f6:12:7d:88:f3:49:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:6E:A1:C8:D6:CE:64:6A:AB:5E:FC:2C:72:29:F1:65:BE:FF:64
X509v3 Authority Key Identifier:
keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:e4:e8:4d:ff:82:4d:ea:6f:c3:a7:75:44:9a:e8:f2:fb:d0:
33:19:7a:63:8c:9c:58:35:a5:28:d5:47:b5:8a:65:ff:6e:37:
fc:04:99:92:98:36:41:d2:50:a9:4a:ed:0e:bc:ae:b0:03:c5:
56:bc:49:48:e2:d8:58:bf:ce:d8:d4:f5:6e:00:91:b4:fd:db:
7d:14:fb:2a:12:73:9b:ae:68:e0:9d:64:17:d9:91:af:f3:29:
15:84:47:c8:5b:26:04:fd:fa:04:18:b3:f4:18:c4:f8:80:8b:
f3:8b:d1:ce:27:8a:0a:b2:eb:bd:97:2a:a3:1d:f4:eb:e1:4a:
26:76:f7:48:3b:cc:37:cd:c3:0c:a3:3e:af:c0:d8:75:e8:56:
ad:da:0f:56:b2:7e:6d:ce:5d:57:e2:10:29:36:c2:9b:3e:5f:
c2:d9:10:e0:03:37:bb:07:9f:f2:3a:02:62:96:e6:81:5a:ad:
4f:ae:66:3f:ff:c6:dd:59:4a:45:64:c4:a2:74:53:a3:ec:8e:
a6:76:b4:e4:9e:8a:ce:87:ea:80:82:c0:f3:f9:38:27:d2:6b:
f1:10:57:77:25:9b:4f:07:46:76:f7:3e:41:af:d3:df:fd:95:
b5:aa:37:fe:94:fa:9b:c5:d3:31:e4:92:4a:10:85:96:42:40:
51:b8:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:39:29 2026 by rpki-client