
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
File: XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json)
Hash identifier: RuH38yduA5SWnuQLprdV6DMwOz0BftgSPKf3ppPleNg=
Subject key identifier: B5:79:FD:18:9C:B6:E4:38:90:8F:37:79:D9:CB:0E:72:5E:80:EF:B4
Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
Manifest number: 79
Signing time: Tue 23 Jun 2026 08:01:19 +0000
Manifest this update: Tue 23 Jun 2026 08:01:19 +0000
Manifest next update: Tue 30 Jun 2026 08:01:19 +0000
Files and hashes: 1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: v/FsyXfP9ZHKGxttaduiINQM/NHah5uyZbvSGeP+OPE=)
2: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=)
3: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Validity
Not Before: Jun 23 08:01:19 2026 GMT
Not After : Jun 30 08:01:19 2026 GMT
Subject: CN=6a3a3d4f-9bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:76:82:4b:40:9a:97:64:d0:f4:3a:87:62:0c:
36:f3:cc:5d:d9:5d:88:ad:20:37:b3:c6:c8:01:0d:
79:bb:6e:28:8b:1c:a2:3c:e9:40:8f:8e:58:37:07:
ff:e0:c9:cf:02:bb:35:1c:e3:7a:d5:00:14:2f:3e:
02:ea:e6:7f:ad:a8:5f:e6:fb:e9:cc:44:06:1f:a9:
70:e9:3b:5a:72:a8:97:58:61:28:d9:fb:e6:6d:b9:
cf:78:59:0b:d2:44:6c:00:b7:d0:38:24:62:ad:77:
93:fe:47:e1:7d:4f:62:db:6b:07:9a:33:ae:ce:64:
e4:31:e0:82:b2:fb:04:b3:cc:0b:78:f6:5b:1b:0e:
6d:39:46:c8:e7:d1:ea:8a:7a:b7:83:2f:dc:aa:59:
ae:3e:2e:3a:b9:af:28:de:b5:38:ed:3a:0f:c1:e1:
01:80:05:c5:b6:6a:10:26:e4:bd:50:1d:0b:19:01:
b0:7f:56:8f:cb:2f:4e:49:f8:95:5b:b3:95:23:2e:
fc:7f:64:cf:21:91:d4:29:d9:01:55:cd:11:15:9c:
ff:55:13:67:5d:ec:47:12:da:d3:68:b4:44:f8:87:
cd:4b:17:66:0e:0c:24:dd:8f:30:0a:60:0c:b8:0e:
a6:17:7d:e8:e1:c6:d9:d2:af:48:49:b9:84:16:3d:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:FD:18:9C:B6:E4:38:90:8F:37:79:D9:CB:0E:72:5E:80:EF:B4
X509v3 Authority Key Identifier:
keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:52:b2:52:60:f0:07:80:b8:eb:39:f6:ca:eb:17:1d:e5:
86:b1:2c:a2:14:b5:df:1a:94:f4:db:4b:13:ae:1a:f3:dc:92:
ac:d1:97:18:f1:1e:58:51:4b:c1:a3:5c:3c:4e:fb:1b:ac:f5:
66:5a:69:52:13:d3:57:21:7e:2f:d5:dc:da:5c:9d:f3:f6:53:
cf:f3:35:4e:fc:8c:a9:51:7a:69:8b:c6:b7:16:e9:29:f1:a7:
48:7d:b6:db:3e:b5:ef:48:a6:cc:dc:3b:f7:51:8f:32:e0:82:
3b:4a:75:8e:2d:cd:f2:82:ca:60:7c:94:a7:4e:5c:94:3c:33:
30:73:9f:39:b3:8a:6e:74:a9:53:aa:f2:22:55:92:ec:f5:47:
f4:63:08:5e:6f:bb:53:47:30:bb:e5:18:40:e0:2a:28:d4:cf:
da:9a:a8:7f:16:db:26:89:c3:7e:fd:69:59:ca:83:4d:ce:73:
cd:16:33:df:7a:f9:ee:d9:33:21:ff:2e:b6:34:75:b0:5f:eb:
0a:58:3a:6a:02:9b:bc:f0:82:2c:a3:39:57:21:e6:49:a1:9a:
ff:f4:9c:5c:81:35:d7:40:86:ed:91:74:48:3f:0a:0d:fb:da:
2a:ed:42:22:34:7a:1c:9d:eb:19:30:07:fd:10:45:39:61:be:
05:8e:d8:43
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Q0E1QjExMC8GA1UEBRMoNUQ0RjQxMkFFNDgwMTBGRTU0ODdGMDE4RjE3MUE5QzY0
NjlEOUFDNTAeFw0yNjA2MjMwODAxMTlaFw0yNjA2MzAwODAxMTlaMBgxFjAUBgNV
BAMTDTZhM2EzZDRmLTliYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD8doJLQJqXZND0OodiDDbzzF3ZXYitIDezxsgBDXm7biiLHKI86UCPjlg3B//g
yc8CuzUc43rVABQvPgLq5n+tqF/m++nMRAYfqXDpO1pyqJdYYSjZ++Ztuc94WQvS
RGwAt9A4JGKtd5P+R+F9T2LbaweaM67OZOQx4IKy+wSzzAt49lsbDm05Rsjn0eqK
ereDL9yqWa4+Ljq5ryjetTjtOg/B4QGABcW2ahAm5L1QHQsZAbB/Vo/LL05J+JVb
s5UjLvx/ZM8hkdQp2QFVzREVnP9VE2dd7EcS2tNotET4h81LF2YODCTdjzAKYAy4
DqYXfejhxtnSr0hJuYQWPW6HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtXn9GJy2
5DiQjzd52csOcl6A77QwHwYDVR0jBBgwFoAUXU9BKuSAEP5Uh/AY8XGpxkadmsUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0QyNUQ4NjhFQzAz
QTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1z
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWFU5Qkt1U0FFUDVVaF9BWThYR3B4a2FkbXNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD
QTVCL0QyNUQ4NjhFQzAzQTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1
VWhfQVk4WEdweGthZG1zVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBWWFKyUmDwB4C46zn2yusXHeWGsSyiFLXfGpT020sTrhrz3JKs0ZcY8R5YUUvB
o1w8TvsbrPVmWmlSE9NXIX4v1dzaXJ3z9lPP8zVO/IypUXppi8a3Fukp8adIfbbb
PrXvSKbM3Dv3UY8y4II7SnWOLc3ygspgfJSnTlyUPDMwc585s4pudKlTqvIiVZLs
9Uf0Ywheb7tTRzC75RhA4Coo1M/amqh/FtsmicN+/WlZyoNNznPNFjPfevnu2TMh
/y62NHWwX+sKWDpqApu88IIsozlXIeZJoZr/9JxcgTXXQIbtkXRIPwoN+9oq7UIi
NHocnesZMAf9EEU5Yb4FjthD
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:13:10 2026 by rpki-client