
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier: feY4eYmnoPm8ivyokWTbecRn1i1YrMLBNZtxVwsKyyI=
Subject key identifier: C8:BB:A3:10:BF:01:AE:5F:B4:0F:6C:E5:DA:70:EB:3E:62:8A:DB:A0
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0AD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number: 0A96
Signing time: Tue 02 Jun 2026 19:37:22 +0000
Manifest this update: Tue 02 Jun 2026 19:37:21 +0000
Manifest next update: Tue 09 Jun 2026 19:37:21 +0000
Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: h8KHnoHHSrK2Mt5xJD5tHnIZcABjtqnS/YdtmbkYoZ0=)
2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=)
3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=)
4: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=)
5: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=)
6: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 19:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Jun 2 19:37:21 2026 GMT
Not After : Jun 9 19:37:21 2026 GMT
Subject: CN=6a1f30f2-e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:ae:61:44:ba:5c:35:46:63:f2:b2:23:b0:
57:c3:8e:4f:02:30:45:be:86:8e:16:3c:52:6d:74:
91:7e:3d:a4:a1:a9:0a:5c:03:98:61:42:19:ed:d1:
9f:96:53:78:71:9d:ba:ea:d5:16:d0:42:f0:8b:f7:
24:e7:ff:c2:5c:bf:1e:71:e5:e6:63:38:89:22:49:
32:6a:30:88:4f:c7:d5:e4:c3:e7:c8:cb:94:63:5f:
ae:e4:54:84:2b:a8:7f:c2:e1:76:4c:8a:2d:cf:ae:
23:40:93:56:1d:6e:33:05:eb:54:8d:8c:fd:02:ea:
6d:9a:1d:78:54:a0:2f:7c:19:34:10:e0:97:6e:01:
c2:87:f1:97:0a:73:2b:c6:a0:53:78:3f:a9:20:5a:
14:33:2b:2f:b1:3e:48:a2:8e:e8:61:ef:27:1a:a0:
aa:dc:26:bf:82:1a:1c:2e:46:64:1c:bb:9c:ec:a9:
d2:61:17:c5:4f:c5:c0:da:f6:02:bf:b7:6c:3c:53:
94:b4:d3:70:2f:1f:ed:94:31:6d:af:7f:35:a7:3d:
51:5f:98:c9:43:cd:6e:70:17:de:af:f1:79:a1:f1:
89:a5:3c:70:66:ed:7a:33:9e:99:ae:ee:7e:fd:e0:
5b:db:00:ae:1d:65:53:be:f5:53:01:d2:ca:15:bc:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:A3:10:BF:01:AE:5F:B4:0F:6C:E5:DA:70:EB:3E:62:8A:DB:A0
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:d4:0f:e2:f8:cf:94:31:bf:d6:03:c2:ea:57:58:0f:60:
fa:5c:db:c1:74:b9:82:52:de:5e:b1:53:84:33:12:73:16:af:
65:70:28:0e:5f:67:17:5e:a9:fd:e2:cc:5b:59:d5:e0:1e:8d:
f6:a1:64:20:9f:16:f9:5a:ab:cd:6a:ef:e6:f5:72:af:15:6c:
60:e4:e4:1d:52:8a:b3:42:12:d8:49:0c:9b:c7:68:18:92:28:
76:e3:da:27:41:1a:78:ca:07:14:e4:55:21:15:98:86:a0:69:
85:33:00:58:1c:58:45:ef:ce:33:f8:bb:9f:55:85:54:17:4e:
28:a0:4c:fc:01:eb:65:29:20:a5:0c:74:82:f7:31:c0:1c:62:
78:83:c3:6b:7e:0f:5a:8c:fb:14:ff:cb:53:38:6e:ec:5f:b9:
7d:1c:14:7b:50:d1:07:9a:24:8f:ad:b2:52:a1:9f:ed:27:bc:
54:c7:3d:e4:8c:a2:d8:98:12:de:32:0c:6a:e6:83:b0:c2:4a:
84:eb:1f:53:67:dd:fb:93:38:c2:7f:7c:4f:47:02:8d:5d:97:
0b:90:af:ae:7f:15:4a:27:8c:31:71:28:3a:d2:13:c4:ee:ba:
b9:af:21:47:40:9f:07:e3:75:1a:eb:90:ea:df:ce:1b:e4:cc:
ba:be:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:19:12 2026 by rpki-client