
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json)
Hash identifier: dNWB2Cs0yX5b7s6EV+PyPjC5z0lrbhL1ch9cCsOtbjc=
Subject key identifier: D6:F0:C4:B8:6C:5E:91:65:3C:DB:B9:81:1A:57:F7:92:D0:9E:55:18
Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Certificate serial: 0DEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
Manifest number: 0DE2
Signing time: Mon 22 Jun 2026 17:50:59 +0000
Manifest this update: Mon 22 Jun 2026 17:50:59 +0000
Manifest next update: Mon 29 Jun 2026 17:50:59 +0000
Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: etD2Qjrv2PPVMxPJn63ZBLG1OHysWpai3Zj/U4LvmyE=)
2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl
rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Validity
Not Before: Jun 22 17:50:59 2026 GMT
Not After : Jun 29 17:50:59 2026 GMT
Subject: CN=6a397603-006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:e7:c5:6e:48:32:e8:45:03:a2:05:e3:7d:
ae:cc:70:80:0c:41:47:d7:99:dc:c8:34:45:dc:81:
b3:b3:83:a4:e1:9a:f7:47:ba:83:c6:d0:63:30:42:
d9:ee:e2:82:e7:30:7b:23:da:ee:8a:bc:cf:ce:60:
ed:99:8c:0d:8f:61:6b:2b:cc:48:e8:60:cc:c5:84:
9e:08:22:66:3b:48:ea:4f:8f:79:bd:78:8d:51:d1:
81:ea:ae:47:b9:9e:ed:8f:79:76:5f:ac:7a:23:1b:
94:ff:7f:17:43:e4:6e:f7:27:19:cb:04:ce:e9:05:
8f:c4:36:e1:cd:82:71:b6:00:ef:c0:19:5a:1e:cf:
03:73:cf:12:f7:30:5e:e9:f1:9a:6a:d5:b8:cf:df:
23:83:fe:25:fc:4a:cb:a1:0b:80:67:bf:23:9d:ef:
b5:58:7a:2e:00:3a:bf:2d:7b:53:53:91:a6:45:2d:
45:40:91:50:cb:14:02:4d:c0:17:d4:9c:a7:e5:5b:
c8:04:6f:83:5f:ec:3d:0d:88:f5:e8:e6:5b:e0:46:
08:08:3d:e7:b6:d4:10:b4:83:80:ff:09:53:f9:e6:
4d:60:34:6a:a7:fa:5a:8c:16:53:b7:9e:a5:d7:69:
b0:6c:00:9b:ba:2c:ef:98:69:f5:da:8b:b0:27:27:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:C4:B8:6C:5E:91:65:3C:DB:B9:81:1A:57:F7:92:D0:9E:55:18
X509v3 Authority Key Identifier:
keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b3:bf:22:71:f6:fb:66:c9:f8:3c:0a:7b:c7:1d:c7:ee:9b:
92:97:04:a7:08:5a:d6:bc:d8:2c:f3:5c:a5:5d:cb:e5:d9:b0:
19:f6:ae:0e:d1:70:42:11:33:fc:64:cc:57:69:30:c5:2f:6d:
f8:7e:26:db:a5:a9:da:31:00:30:8d:1a:e0:05:28:8f:40:35:
78:62:23:75:9e:34:1f:57:0e:01:c1:7d:47:d6:af:2a:09:fc:
f7:e8:c6:1a:20:92:18:cb:f0:fe:4d:05:a7:54:56:6c:4d:af:
f6:f9:8e:75:a9:52:7d:26:fd:a0:10:88:71:43:1a:6b:15:73:
ea:f8:08:3c:28:0a:7b:5a:76:0f:8b:13:68:35:4b:8d:49:90:
f4:82:36:c5:17:63:63:50:07:0f:80:49:dd:06:e3:18:a3:8f:
37:a6:5f:55:f1:20:6b:4e:bc:83:78:24:c8:3f:d8:aa:e3:cc:
80:05:17:ed:1e:a1:b6:12:04:9b:d8:30:90:91:fa:49:1d:e2:
33:9a:67:bd:ab:ce:f1:24:6e:1f:22:94:e1:17:82:ce:4f:b6:
8e:d5:c7:a9:c4:3b:e6:b8:3c:f7:8b:28:0d:08:05:7d:a1:1e:
fe:61:4b:e4:1e:85:d7:0f:12:53:27:de:f6:c9:51:1b:81:6f:
0c:fb:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:01 2026 by rpki-client