
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: YFEgsDGhTPmeQhtZCNrkR2erDuJiR8aESCPYL9diJlA=
Subject key identifier: 53:AC:46:91:3D:3E:A0:D0:71:D8:B8:35:B5:1F:C1:58:4E:1C:17:36
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0150
Signing time: Mon 01 Jun 2026 02:12:48 +0000
Manifest this update: Mon 01 Jun 2026 02:12:47 +0000
Manifest next update: Mon 08 Jun 2026 02:12:47 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: pkGH6DG5TW/WkjEucGaYjEy5AOKbkvu5L8NqiwrgaXM=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: 6lO6h2G77UVb/TYYp/IKbTb/elPRTlBLimPdGpXo2iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 02:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Jun 1 02:12:47 2026 GMT
Not After : Jun 8 02:12:47 2026 GMT
Subject: CN=6a1ceaa0-39bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:69:d0:df:0b:ee:b8:81:6f:89:96:ae:d9:
43:cb:04:0e:c4:e4:6b:8d:aa:57:55:da:25:3f:41:
6c:5d:20:c9:24:fc:8e:4c:c1:ab:bb:0e:7b:2d:4b:
3b:82:3e:9a:e4:e8:a5:32:5c:6c:e5:63:f7:a1:b1:
1e:83:44:a3:25:8e:8e:c4:93:8b:a0:ff:48:1e:d5:
e3:eb:61:b0:39:f3:c3:56:a9:17:fa:39:9c:f9:37:
d6:c5:ce:d6:c7:c0:75:92:16:3a:15:70:a9:52:aa:
91:6d:38:58:66:48:ad:0e:cc:9b:c9:cb:3f:b6:2c:
4d:64:41:95:52:39:19:9a:dc:1a:25:f9:88:4b:28:
55:31:c4:1a:49:4c:78:1d:5d:11:b1:68:2e:de:20:
4f:6e:6f:c4:a0:1c:97:69:db:2f:40:6a:29:91:e3:
38:14:45:bd:ef:a5:d9:29:71:be:51:6d:f8:b5:24:
40:7c:e9:04:41:61:d8:29:6b:79:c4:33:ea:24:f1:
55:07:7b:0e:41:3b:c9:6a:2c:be:9f:0f:22:d4:5c:
e6:e6:59:fa:ca:c9:3c:dd:af:19:16:9c:74:29:2e:
01:51:a5:3b:d6:77:ce:b3:d6:b2:81:e7:6b:42:8b:
dd:89:fc:cd:36:f5:1f:fa:c9:a8:cb:9c:7c:05:a8:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:46:91:3D:3E:A0:D0:71:D8:B8:35:B5:1F:C1:58:4E:1C:17:36
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:79:2c:86:40:ec:0d:ba:34:fd:aa:de:e1:08:ac:8f:0f:ff:
bd:05:a8:3d:ed:39:6e:94:49:5c:2c:4b:8b:a6:59:0b:35:8f:
62:4f:da:2d:2f:23:32:8a:42:dc:3a:d9:ae:b3:ee:57:5c:8a:
62:7e:1f:b5:5e:88:ea:19:87:e6:1b:e1:cc:e9:56:b2:75:b6:
4a:e3:82:be:29:1f:74:24:66:76:55:56:81:18:e1:ec:13:7f:
a8:7d:0e:f2:ad:81:96:da:7d:fc:f6:22:0e:27:f8:fc:47:4c:
ba:7d:65:1d:bc:a1:78:cf:a6:76:21:72:a2:d4:43:e4:bc:e1:
2f:46:28:3f:bf:51:f6:02:fe:c1:bb:b3:cf:51:3a:a0:21:fb:
94:d1:72:49:15:5a:b9:af:15:81:22:cd:ca:a9:ab:d3:0b:a9:
a8:e9:cc:8b:5e:c0:4f:3b:1b:ec:68:35:cc:fb:fd:49:b0:ba:
df:f2:cc:f9:d1:b6:63:b3:93:19:36:78:d1:0c:ea:5b:98:28:
be:71:22:85:c8:c0:7a:5a:e5:f3:7f:82:b2:c2:49:86:2f:55:
51:92:d4:51:84:7b:66:06:88:65:ca:c7:24:ba:d0:d4:1b:e2:
6d:26:1d:a1:78:48:ed:a5:f1:55:2e:d6:2d:93:31:3d:b5:5b:
7e:7d:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:01 2026 by rpki-client