
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier: ktmX1blBrCPP1oWutxGnSJoGH8KNRlNdG4VWN3BgUVY=
Subject key identifier: 9C:92:0B:93:6F:DB:7F:8D:8E:A7:E8:A6:64:76:2C:71:D3:26:F3:95
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial: 25FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number: 25E7
Signing time: Fri 12 Jun 2026 15:38:18 +0000
Manifest this update: Fri 12 Jun 2026 15:38:17 +0000
Manifest next update: Fri 19 Jun 2026 15:38:17 +0000
Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: jfCULquRo3zdxt/grROTKNAcq3tW7jUvPs2CM0I0r4g=)
2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: H9FBin+3iFpCvFQYKLKBdVVFwBLL9x/T3GklTxzrl8g=)
3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 2QSZtWOqDrHks96zM5GIiao6cA8Lcs0F/CmHj2Ncbeg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9723 (0x25fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Validity
Not Before: Jun 12 15:38:17 2026 GMT
Not After : Jun 19 15:38:17 2026 GMT
Subject: CN=6a2c27ea-4fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:89:4c:94:d1:96:85:45:ec:aa:79:9c:4c:
04:12:ee:16:5b:49:f4:ba:43:36:4e:8d:6b:a1:7f:
08:98:b0:e9:09:da:0d:3b:1a:4a:ff:93:ae:13:72:
fe:4b:6c:5c:08:cd:67:ce:3c:8b:58:81:cf:70:23:
d5:87:57:1f:ea:60:a2:8c:b7:94:35:34:4d:f2:74:
8f:19:fc:f5:80:55:63:a1:f2:fc:10:be:00:de:1e:
ca:fe:81:af:b9:fb:cf:f8:b7:24:0c:27:2e:1d:6c:
5f:f0:43:a1:9a:6a:36:c5:3b:b4:31:72:21:48:b4:
a0:0c:4c:68:10:47:1f:88:f6:77:80:6a:95:48:43:
c6:f7:10:a8:3b:15:b1:ec:6d:15:f1:99:fa:7e:85:
f6:b7:90:cd:ec:f7:7b:2d:be:5c:fd:0d:be:7a:8d:
78:6f:3d:53:71:67:00:6f:1e:1a:fe:2b:68:db:1c:
d7:cc:f1:1c:ee:58:f0:70:f6:b0:19:12:90:2c:1a:
c8:2b:26:c9:b9:f7:5f:72:e8:9d:c0:8b:a7:c4:af:
5a:ec:32:9c:1c:1e:fe:ee:ca:77:62:1f:0a:d3:49:
1c:c0:16:4a:f4:83:5d:55:ee:59:37:0e:00:e0:2d:
fe:3c:e0:28:d1:2b:82:22:16:b9:7b:ab:b9:59:38:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:92:0B:93:6F:DB:7F:8D:8E:A7:E8:A6:64:76:2C:71:D3:26:F3:95
X509v3 Authority Key Identifier:
keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:77:c9:94:7e:66:dd:11:ca:32:70:f6:8f:5d:02:85:26:92:
a7:62:00:7c:3c:be:15:67:cf:89:07:93:2f:6e:36:e6:d4:1e:
9a:cc:f3:34:29:01:f5:eb:1c:54:cc:b0:df:c4:29:2f:00:1a:
14:37:9b:5c:2b:45:03:53:eb:66:e0:c6:22:32:e8:c1:50:be:
7a:6d:93:96:ea:06:63:87:8b:25:87:31:e6:a4:bc:e9:fb:dd:
1a:06:d8:8b:d8:b6:7c:3a:72:f8:d8:f9:31:fa:ce:dd:2e:e7:
6a:99:46:13:cc:e0:9f:dd:c5:3a:26:70:aa:42:ce:da:19:e9:
cd:55:ca:55:d1:9f:eb:09:76:a3:eb:d3:08:f5:9a:7b:0b:bc:
d6:05:44:52:f7:70:57:28:3b:0f:cd:af:8a:a8:28:5b:81:be:
7e:7c:6d:04:c3:d9:73:22:bd:96:f4:ac:13:e5:da:0f:ca:27:
f5:cf:78:56:de:35:4b:1c:3f:68:37:a7:ab:da:42:d4:27:9e:
74:67:73:a9:5a:8d:d0:91:81:e4:26:e1:02:23:eb:3c:44:b7:
7f:5e:f8:4a:93:47:69:63:56:36:d2:da:fa:9a:ca:0c:e4:b1:
64:f1:1f:47:3e:0a:75:48:65:86:d5:9a:93:1d:48:ae:05:61:
23:f8:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:17:38 2026 by rpki-client