
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: q6h6mmwHyk4jURDaBUAx3qm2ENiRSB7DhXulMpe2/cQ=
Subject key identifier: B9:DF:7B:FE:D0:19:B8:FC:0A:48:4B:62:3A:24:67:70:17:66:9E:0E
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 0553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 054C
Signing time: Mon 22 Jun 2026 23:29:48 +0000
Manifest this update: Mon 22 Jun 2026 23:29:48 +0000
Manifest next update: Mon 29 Jun 2026 23:29:48 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: 49q9Kj74ESC5bh14R7s+I4GwkmUxWaTSy+gwHJfkzd0=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: 7nE2sjWaqJwApCwjBQjwmTVTdgonybAUx01R5hVKq1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 23:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Jun 22 23:29:48 2026 GMT
Not After : Jun 29 23:29:48 2026 GMT
Subject: CN=6a39c56c-110e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:64:98:92:24:d7:1e:57:5f:ba:e1:32:aa:
a7:ac:9f:87:29:68:75:9f:97:81:1c:cd:a1:e3:b6:
ff:67:c0:6b:88:b5:7e:ba:63:fd:ae:9a:ab:09:fb:
de:0a:ec:e6:fd:fd:fa:89:62:46:8c:4f:04:4c:c6:
57:15:51:01:12:6f:a5:26:ea:fc:d9:46:32:cd:f9:
0c:46:70:74:ac:e7:1c:32:52:69:16:3b:d0:d9:7b:
6e:41:2f:34:d2:c7:ee:89:ff:de:b9:88:5f:3d:cf:
bc:79:a9:d3:c0:fa:42:f9:ed:98:63:57:10:8a:1a:
5f:3f:7a:d8:94:cd:eb:41:7c:c2:26:0d:26:1e:ad:
07:85:33:b4:9b:90:14:10:b6:21:04:3a:7f:ae:e6:
27:90:78:07:f4:58:f5:2b:6d:23:22:0a:39:a6:ee:
ac:bf:d0:c1:54:68:ee:df:fe:82:7d:e3:ef:25:b2:
f0:b7:71:a9:99:a7:65:e6:56:d0:65:52:65:5b:bf:
f0:c9:b3:56:1c:ce:ca:af:8b:7d:90:b5:16:bf:cc:
d0:6d:29:f1:d2:c8:72:d8:85:a7:8a:13:3c:1d:eb:
88:36:12:52:1e:a5:6c:45:d8:fb:09:ea:ec:a7:ee:
80:ae:a8:78:e8:be:71:a9:2a:52:42:d9:e7:3f:a2:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:7B:FE:D0:19:B8:FC:0A:48:4B:62:3A:24:67:70:17:66:9E:0E
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2d:72:b8:72:72:ad:ca:aa:69:ab:d4:af:f4:92:20:0c:12:
44:64:bb:f1:d8:ad:d5:9c:ca:e6:3d:94:cc:ae:de:b5:da:6e:
f9:ba:a3:6e:2b:e7:1c:0c:d4:24:db:81:66:18:c4:d3:c1:52:
e9:76:05:df:68:2b:2c:08:55:37:75:a3:94:5b:bb:d7:31:1f:
0b:4e:a5:38:70:d9:76:bd:12:04:57:da:6e:e0:83:f0:7d:c9:
ae:f8:e0:8c:9b:aa:b3:5d:4e:78:44:eb:59:a3:92:e5:31:e2:
79:04:7c:98:97:d6:4f:12:6e:d4:01:07:d3:dd:43:5e:ab:98:
e0:57:0c:e0:c8:7b:cb:34:1e:2a:41:b3:d2:42:3a:98:ad:f1:
5a:f5:e1:b8:02:8a:82:9e:e0:5f:d5:48:ef:f9:66:c5:65:15:
b0:22:25:a3:29:3c:88:50:fd:56:4a:e9:e4:7f:6c:1b:67:05:
1f:8c:09:37:bf:d3:53:59:2e:c7:4d:69:ec:05:04:db:07:52:
cb:08:d9:6e:d1:c1:4a:d0:11:d9:ce:a1:59:64:87:38:d1:3a:
03:75:fc:2f:0b:f3:2f:e7:91:ca:7c:c6:31:a3:1a:e1:89:79:
d5:7b:05:45:08:ab:c9:77:22:34:b2:ce:a4:cd:9a:fe:f8:e4:
43:a1:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:45 2026 by rpki-client