
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier: uYY+2nRepUoIt1n9t1EW3Dxbn3FCHBPE5XL5rgMR6cE=
Subject key identifier: 24:70:B1:26:32:7D:3A:0F:D5:9C:03:8D:E1:E0:86:02:57:D6:58:0B
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial: 0A6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number: 0A64
Signing time: Tue 30 Jun 2026 20:13:18 +0000
Manifest this update: Tue 30 Jun 2026 20:13:17 +0000
Manifest next update: Tue 07 Jul 2026 20:13:17 +0000
Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: UJLxQl3Z/GtkshQ5hNg+vuUxT7fM3DF/JVANFEgFy/s=)
2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 20:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Validity
Not Before: Jun 30 20:13:17 2026 GMT
Not After : Jul 7 20:13:17 2026 GMT
Subject: CN=6a44235e-c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:9d:71:f1:7b:1d:73:d2:46:f4:04:76:0d:
cc:7c:ea:d3:0a:a4:99:e4:80:3f:f2:02:60:f5:38:
05:de:73:be:cc:d0:33:08:82:b1:eb:44:6a:eb:81:
a8:ed:43:44:5e:15:14:f0:9a:e2:5e:bb:ce:a0:51:
6a:c5:a8:5a:78:44:52:52:87:10:12:58:6e:38:0c:
5a:d0:c5:df:64:d7:d0:89:65:42:fd:83:6c:65:ca:
91:03:3f:34:06:88:f4:90:39:3a:75:cd:e8:70:f1:
77:c2:60:7f:e3:8b:7d:66:96:e5:8a:56:df:b9:66:
2d:07:4f:af:ba:fa:5f:9c:aa:51:92:84:3f:65:e2:
0b:41:96:6e:85:25:8f:44:f9:6d:9d:6b:fd:3f:48:
f9:2b:f1:65:2d:0f:3d:0b:c7:32:b3:50:f0:1a:2a:
74:b5:8e:04:cb:63:7a:21:63:db:c7:62:0f:ec:82:
70:6b:61:d8:4f:06:fa:44:bf:87:b9:c5:57:5f:9f:
5a:e5:a0:f7:a0:a8:dd:20:84:b2:fe:62:cf:be:e4:
ec:fa:4b:d1:5b:0c:e3:1f:d2:41:50:fb:b5:92:fe:
24:15:6a:58:40:b2:37:6d:a8:0e:ce:fe:a2:7e:a1:
15:7d:ac:d9:ed:54:39:07:a9:af:d7:0d:ad:e8:a4:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:B1:26:32:7D:3A:0F:D5:9C:03:8D:E1:E0:86:02:57:D6:58:0B
X509v3 Authority Key Identifier:
keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:71:48:b5:c6:04:eb:47:54:74:91:5c:c2:4f:f0:b4:89:a8:
39:25:c4:7a:82:93:89:9e:09:ea:b9:85:f3:e3:38:14:5b:86:
56:d6:2d:fb:f8:1c:ea:89:70:b9:1d:16:d7:62:70:38:b8:34:
8b:04:90:d1:da:01:53:ba:62:34:4a:56:5f:2e:f5:d1:3b:33:
f1:14:bb:8b:ee:4a:44:87:ef:62:6d:39:7a:33:0c:07:5f:66:
b4:a6:ee:40:89:ac:28:63:32:b1:49:8b:63:1d:5a:a9:95:2d:
45:a1:36:d5:91:2d:88:f8:33:3e:e8:15:c9:f0:f9:c9:49:05:
98:92:58:45:fe:11:5f:8c:a0:b7:7e:97:d1:39:a6:f3:53:db:
86:8c:bd:c0:86:13:e5:33:0f:5d:18:a8:3f:06:83:cb:a3:c8:
77:ee:c7:46:a6:9d:fb:bd:b0:7f:fc:f8:74:2a:23:4c:d5:a2:
2d:a2:63:9d:fb:d6:94:15:cc:f1:ff:57:13:09:ff:c6:7b:72:
d7:ea:05:c6:db:31:1c:d4:3e:ce:88:45:b3:47:0e:d7:65:9e:
d6:e8:ae:99:dd:41:a7:2e:3d:8d:32:82:a7:0a:17:2b:e5:ce:
3c:52:1c:87:09:b0:80:44:12:a6:dc:68:c1:68:ad:a7:20:b0:
f1:f2:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 21:54:19 2026 by rpki-client