
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: nKL3/XvSEq8eV9bVeiUSWIuyPMrbO+dDUBtYxVOk1XM=
Subject key identifier: A1:DC:84:2F:42:D1:53:C3:1A:B7:5F:84:88:5D:18:48:E3:F1:25:FE
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 04C9
Signing time: Fri 05 Jun 2026 00:01:06 +0000
Manifest this update: Fri 05 Jun 2026 00:01:06 +0000
Manifest next update: Fri 12 Jun 2026 00:01:06 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: hcFFENEztigTpiouDdBv6rfKQ2rt/29qUZ6IcrV/pf0=)
2: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
3: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
4: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
5: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
6: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
7: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
8: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
9: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
10: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
11: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
12: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Jun 5 00:01:06 2026 GMT
Not After : Jun 12 00:01:06 2026 GMT
Subject: CN=6a2211c2-43f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:a3:5e:f8:06:c5:07:ea:dd:52:f6:51:72:
ca:c4:d0:c6:f4:f0:2d:8a:cc:41:12:dc:d3:11:18:
b5:87:ef:34:44:5c:3f:d1:b3:69:74:59:6f:2b:34:
23:bb:7b:77:ab:cd:f7:f5:ba:6f:fc:9e:20:e9:1d:
d0:15:0e:09:b8:ce:b0:84:c8:3c:82:89:ca:b8:dc:
8a:86:5c:f7:5b:48:81:f9:99:a4:ea:b0:20:3e:ad:
fc:fb:c4:24:0a:5c:94:23:42:ec:cb:c3:69:d7:32:
f6:e3:68:bb:17:0f:f6:e0:37:20:7c:d8:2f:84:b8:
1d:01:f0:27:19:d1:a0:46:2d:e7:61:22:c0:5b:5c:
66:f2:b8:fb:a8:be:9d:89:6c:57:8e:22:72:3a:e1:
00:77:41:b1:bf:d4:4a:24:f4:18:81:12:35:c1:b1:
3e:4a:9c:7e:e3:a1:7c:8c:e7:5f:a7:d9:14:8a:f3:
9c:5c:58:bb:6e:c2:03:19:c6:bd:22:97:4a:5e:e9:
84:55:e8:bd:c8:67:4d:7c:bc:65:fa:ce:86:20:fd:
bd:a3:61:2a:f4:65:f2:46:5a:68:e3:0d:16:b0:a7:
2b:12:a4:35:71:33:0a:aa:f5:8e:12:b3:48:0a:6e:
4b:cc:69:cb:0e:67:09:f5:eb:5c:37:b9:42:58:3f:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:84:2F:42:D1:53:C3:1A:B7:5F:84:88:5D:18:48:E3:F1:25:FE
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:d2:63:01:ae:1f:cd:4f:57:57:23:72:3a:de:58:d4:07:
3b:e6:9b:67:ad:c5:d2:ce:07:fc:2c:ee:e7:87:95:8b:41:b8:
4b:71:e0:7c:a0:19:98:43:8a:55:a2:c5:a3:aa:ea:5b:33:6c:
35:bf:3d:28:b2:eb:35:15:b1:17:91:2c:73:cd:aa:7b:ef:b1:
8b:06:a0:e4:b7:d3:f5:ae:fa:38:5c:5f:4b:f7:0c:7a:d6:f5:
14:5b:6a:45:2e:27:e3:c4:7e:ba:2f:37:cd:00:1f:26:f8:9a:
b7:15:35:54:4e:bf:0d:06:cc:09:43:ad:3e:c8:7a:7e:18:b2:
69:20:46:85:bf:04:45:52:ab:c9:94:74:5f:ca:2b:9d:cf:e2:
49:27:31:31:4b:7d:ca:fd:55:66:82:19:d2:59:4c:1a:96:e0:
db:fa:1f:43:18:22:90:5e:d3:4f:91:67:07:11:f6:73:cf:f1:
1d:1b:6a:a2:a4:9e:9a:86:9a:1f:cc:e0:29:d8:54:31:4f:e0:
8d:e7:e8:b2:e5:20:3f:63:6e:4b:95:15:01:03:b4:5b:f3:b1:
59:9b:b1:d5:25:28:71:13:b9:39:ac:56:a1:76:08:19:98:7c:
eb:85:60:e3:3d:36:ea:97:05:75:e9:ed:33:f4:9f:7e:dc:3a:
36:6a:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:31:52 2026 by rpki-client