
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier: 5OSrt7lZBMIKMke3KUB24aUb3tmDKcWICYK2clondEE=
Subject key identifier: 68:EC:87:E9:65:6A:07:D4:63:F6:48:B0:47:97:BC:27:E5:8C:8C:C1
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 09E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number: 09DD
Signing time: Tue 18 Aug 2026 20:09:26 +0000
Manifest this update: Tue 18 Aug 2026 20:09:25 +0000
Manifest next update: Tue 25 Aug 2026 20:09:25 +0000
Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: i433JQIe0NzTunhOeuFU7VuNRUuGTiWJOhqvfMavGVU=)
2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: /iSHCrcBHYNHKFSx10qXjyornrh9oW58iGZxMDR9DOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Aug 18 20:09:25 2026 GMT
Not After : Aug 25 20:09:25 2026 GMT
Subject: CN=6a84bbf6-9a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:3e:ac:0e:43:6b:c8:8c:4e:1b:a1:1a:ac:
be:f7:31:0c:2b:e6:a6:e2:8d:6f:b8:5d:44:38:ec:
26:51:3c:02:2c:21:59:f5:4c:99:53:c3:7b:6e:c6:
a0:49:ab:46:e2:b6:b2:6e:43:7f:b7:9b:7d:68:54:
88:49:4a:47:b7:35:4a:6f:e4:85:7f:78:84:e1:da:
2c:af:94:fd:bc:3a:61:2e:10:5b:3c:fb:b1:86:98:
26:42:4f:9f:3c:c3:8c:e4:8e:af:40:ef:6c:1e:e8:
26:74:f7:dd:56:9d:bb:a0:82:df:91:49:df:a2:b8:
be:af:e6:a0:88:e2:28:27:5a:50:76:e5:1c:2d:3d:
06:1a:ae:d5:4d:d2:0a:7a:30:8f:7a:86:e6:f6:7e:
34:cf:ab:27:8f:c7:69:de:e3:c3:09:9a:41:e9:66:
f2:fa:f5:b6:37:70:81:60:f9:2a:e5:3b:78:2a:a5:
93:e1:6f:c8:f0:21:ab:8a:70:6e:a8:0f:ba:74:8b:
22:96:ee:8b:ec:f2:83:a8:c6:c4:1c:e5:7f:a3:02:
26:85:11:53:2f:c1:73:f2:4d:07:1b:08:61:0d:b7:
b6:0d:8d:58:86:cd:0a:be:3c:79:dc:3c:db:84:ec:
63:5d:34:c5:ae:2b:e5:07:8e:9a:0c:42:58:2c:78:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:87:E9:65:6A:07:D4:63:F6:48:B0:47:97:BC:27:E5:8C:8C:C1
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:a0:22:bb:c1:be:0e:5c:de:54:a0:1b:38:92:8c:85:5e:71:
89:56:d7:8c:de:c9:c1:72:38:d0:30:8b:2b:a7:02:0c:b1:9a:
cd:a9:64:87:53:cf:82:88:02:96:75:cd:e6:ed:74:c1:fe:e4:
aa:b8:f6:77:5e:43:fc:8d:39:13:3a:6f:67:ce:87:f3:76:06:
09:fe:cb:b9:aa:a9:2b:89:61:cf:b6:aa:64:ab:60:31:7d:11:
81:b3:12:ff:22:ee:46:80:6e:89:c0:3c:a8:7b:11:f2:79:1e:
fd:69:24:ae:76:a4:83:37:9c:38:dc:71:51:be:cc:c7:00:82:
51:89:a8:1f:d4:c3:ed:0a:4d:e9:b5:bc:10:c7:31:44:1d:ef:
ad:39:34:56:33:fa:6f:d6:0f:99:d4:2b:52:9d:f6:9e:20:46:
cf:74:12:30:7b:5a:87:94:d4:81:cd:7e:8b:ce:fa:7a:91:bb:
08:83:e2:de:b4:44:ca:7f:7a:a1:cd:8c:21:4e:c4:2e:2a:8b:
5b:c1:1e:84:05:cf:7d:98:1d:3a:fc:3c:c7:ad:11:e0:78:bf:
bb:ac:1f:42:48:e4:10:b1:85:80:1f:8d:28:ab:6f:9d:ed:85:
89:65:9b:f9:f9:55:62:c3:f5:f3:87:49:7a:7b:31:d6:73:d9:
61:17:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:44 2026 by rpki-client