
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json)
Hash identifier: kTKAuj+g8/+YJS6kkV8smsEb0gI9j3rVor2ERcMMn10=
Subject key identifier: 6A:99:00:B9:78:31:9A:8C:F9:50:4C:EB:81:73:8C:DB:8B:68:CD:86
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
Manifest number: 07FD
Signing time: Mon 22 Jun 2026 21:17:54 +0000
Manifest this update: Mon 22 Jun 2026 21:17:54 +0000
Manifest next update: Mon 29 Jun 2026 21:17:54 +0000
Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: HI6WZg2g29Q6HlK2WsOsDCV9HFg8eZj7ZRAWSlRUOl4=)
2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: EXIodqZO0EV9Q7D8N2AnvfLDO9Fid8uBbsf7/azJXeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Jun 22 21:17:54 2026 GMT
Not After : Jun 29 21:17:54 2026 GMT
Subject: CN=6a39a682-bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:d3:01:fc:70:8b:d7:7c:39:c3:6e:cc:a5:
a0:ef:38:c5:e1:b1:1c:d4:16:78:d6:0e:1b:d8:9d:
12:43:6d:39:fb:70:a5:ed:78:b9:9a:ee:15:64:36:
15:34:fb:e0:11:39:83:cb:b7:57:16:1a:1e:e8:a2:
71:6f:29:4c:e6:e3:80:1d:df:ea:fe:04:a2:04:3a:
30:33:af:3e:82:a7:21:8c:10:46:0b:0d:0a:ee:b2:
2b:1e:ba:eb:7a:70:2a:10:16:e9:9e:fe:74:55:d7:
71:1b:25:db:4f:31:8a:ae:3d:ba:b7:1f:79:7b:65:
60:46:87:b6:19:4a:46:85:6b:5c:e0:e6:f7:f6:28:
af:be:43:b1:a4:b3:f4:d4:40:52:9c:b6:51:71:05:
de:55:66:9d:22:4f:b1:ed:54:ba:de:75:d0:9e:93:
e3:c1:1d:26:23:ea:ee:eb:70:a9:0c:54:35:82:c8:
2d:95:02:f3:a4:7c:80:35:5e:ce:36:6d:54:63:5d:
5e:4f:9d:1e:b0:52:bf:d0:54:6f:5d:56:75:11:ee:
6f:38:1e:c7:e8:a2:2d:61:17:34:5b:6d:b7:2a:48:
35:ea:fe:96:ab:f5:1d:a9:74:ad:07:42:7d:89:eb:
97:c0:3c:72:66:ae:e2:d5:83:ca:23:9c:d0:11:8a:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:00:B9:78:31:9A:8C:F9:50:4C:EB:81:73:8C:DB:8B:68:CD:86
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:08:54:ee:61:cd:ad:90:f1:22:49:20:a9:d5:25:f5:7e:
20:3f:8c:78:70:f8:61:cb:36:c6:1b:a4:6d:a2:6c:3f:63:ac:
00:7d:3f:52:db:50:3b:a8:7b:7c:f5:2f:3c:08:bb:72:8a:ce:
8a:07:d7:71:2a:1c:a8:69:f2:1d:4f:dc:cb:c3:89:93:a0:aa:
d5:28:21:5b:73:c9:40:d6:3c:df:f6:4d:bd:2c:ce:eb:ee:b0:
15:66:23:60:80:22:13:66:9f:75:cd:ab:03:50:78:0b:3c:bd:
fc:7f:5c:86:64:c2:84:cf:e3:a0:ac:b0:89:eb:87:57:04:f5:
20:67:f0:f2:12:e3:a2:d7:12:1b:8c:f1:89:23:3c:4a:f4:57:
fe:46:0c:f4:8d:1a:31:79:e8:d5:a7:11:9e:59:f7:2c:bb:c7:
f2:74:3f:59:ed:53:4b:0c:43:46:f9:f8:e8:3c:f3:4a:76:8d:
71:e6:b3:22:fc:0b:bf:8d:20:6c:70:f1:05:ce:dc:49:5a:5a:
7f:7b:58:39:14:ca:66:a7:93:80:99:d7:b5:40:a9:1f:34:56:
fb:14:42:c7:e0:ba:b4:cc:3f:26:7e:b9:8f:67:dd:58:0d:a6:
1a:b2:93:61:53:05:01:63:94:aa:4c:18:05:6a:98:f7:90:6d:
c8:f0:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:23 2026 by rpki-client