
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier: tgDm1hdDCFNqW9TzDgU1q0N2GeXTWKPq53/AOJADJGM=
Subject key identifier: 2A:9E:BA:68:10:CD:8B:46:FD:46:BA:4B:F1:0C:4E:A0:1A:1C:93:8F
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number: 013C
Signing time: Mon 01 Jun 2026 06:08:37 +0000
Manifest this update: Mon 01 Jun 2026 06:08:36 +0000
Manifest next update: Mon 08 Jun 2026 06:08:36 +0000
Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: mYbRX9BMbRLbBbwwsbllOK7TXXUL8QmO3NYAFZ19rWE=)
2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Jun 1 06:08:36 2026 GMT
Not After : Jun 8 06:08:36 2026 GMT
Subject: CN=6a1d21e5-476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:67:5f:13:4a:5b:7c:80:88:28:d7:44:3f:
4e:9c:71:94:e1:0d:13:06:d4:d6:c7:f7:11:a9:1c:
d1:81:a2:6f:2e:f7:88:9b:6c:5d:5d:b4:20:ab:26:
ce:b0:28:fe:31:ba:60:44:79:4b:d4:cd:31:f9:66:
b4:37:14:c6:2e:65:08:51:f7:c9:b2:c2:6a:b5:6a:
89:a9:1d:3f:0e:39:85:37:13:1a:ea:cd:62:45:0b:
8a:c0:b6:1e:02:97:7a:32:8d:40:c2:f4:5f:6e:8e:
e6:4c:1c:ec:7b:ca:05:5a:3d:d2:2c:08:f2:32:84:
8b:96:56:15:f2:79:4d:59:91:aa:4b:de:bb:76:9c:
f4:79:a2:cb:8d:25:9f:18:b5:9b:0c:5c:74:f8:62:
de:21:88:2a:2f:ae:dd:91:65:0c:c2:b0:4c:d5:b8:
c9:0c:e5:19:da:75:bc:b6:b3:4d:76:69:ab:d3:43:
ce:86:f5:03:55:ed:2a:a3:00:68:de:8d:d9:ae:72:
46:5c:f8:f6:fb:5e:d0:d1:46:ae:a7:33:ff:53:37:
16:9c:3b:5b:66:ab:d1:46:94:50:05:b8:c8:29:94:
79:f9:96:15:93:02:7c:dd:78:2f:99:c7:67:69:29:
e5:f4:71:7c:34:1b:53:1e:09:37:80:c5:7f:a6:eb:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:BA:68:10:CD:8B:46:FD:46:BA:4B:F1:0C:4E:A0:1A:1C:93:8F
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:44:b5:4b:6b:e2:82:a0:40:50:b2:93:35:f9:21:d1:12:
62:2d:7a:99:4a:5b:0a:00:a2:bb:15:9f:ee:e2:3c:80:43:1e:
2c:ee:7f:76:5d:5a:b4:eb:4b:a5:1d:a2:73:2f:90:09:c6:97:
37:ac:71:2f:c7:93:47:be:43:e6:d5:96:32:85:10:f4:52:d3:
10:42:d1:22:62:4a:95:7e:46:a8:0c:be:23:b8:72:7c:45:c7:
92:52:b1:4c:c5:23:ea:5f:af:f4:63:95:c0:6b:ee:5b:55:35:
b4:1a:ee:b1:18:80:75:d2:6f:2b:dc:cc:23:7d:88:6f:89:7f:
97:0e:86:70:a7:a0:39:5a:38:cd:36:33:3e:bd:9c:d1:d0:a0:
10:e6:8d:d8:37:4d:6c:ac:5a:00:04:bc:e4:1a:ec:76:9f:7e:
75:53:db:f1:43:40:6d:dd:f0:6a:37:e4:74:29:fe:ad:92:88:
0e:99:67:62:13:ad:d3:2f:20:16:68:83:a5:f7:4b:97:7e:66:
2c:f9:91:6e:f2:5e:7e:91:09:fe:f6:cd:33:b3:19:9e:d5:a7:
06:be:8f:2d:a9:36:f9:f3:99:a3:c6:88:80:73:b2:d7:57:57:
d0:01:ef:30:da:6f:04:28:19:29:60:29:7d:ec:a9:37:6b:48:
1d:b2:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client