
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: wOJFjYOsPcm2kwgeZpAa62OaRi+SPbPak/yYuH7o6Xk=
Subject key identifier: 45:59:BD:74:B9:DF:EA:E6:B8:88:40:96:93:D2:8C:C4:B7:09:74:1F
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 02BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 02B0
Signing time: Sat 13 Jun 2026 01:28:38 +0000
Manifest this update: Sat 13 Jun 2026 01:28:37 +0000
Manifest next update: Sat 20 Jun 2026 01:28:37 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: HlrO21Li32yWETgvcjZNOCXqGWKLuhdwSjZvG/sTuO4=)
2: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=)
3: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Jun 13 01:28:37 2026 GMT
Not After : Jun 20 01:28:37 2026 GMT
Subject: CN=6a2cb246-9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:a9:34:0f:fb:de:27:eb:86:07:96:f0:4e:
5f:42:14:b7:eb:61:7e:be:14:1a:f3:22:f6:50:78:
fe:22:ad:a6:ed:31:61:ba:d8:46:c7:9b:3a:50:28:
ed:18:10:1e:10:22:45:53:6f:da:4c:bf:d5:7b:39:
4f:f1:92:cb:05:74:f2:75:ea:ed:fd:ca:91:95:f0:
4a:ee:c1:55:f2:7b:b7:80:26:20:ec:f0:73:de:bc:
2e:c4:aa:e8:1b:5d:48:62:bb:3e:d5:af:e3:3b:3e:
c0:f5:ae:86:cb:d1:eb:f6:d4:12:f9:9a:0b:b2:d9:
17:c8:b4:a1:80:40:10:76:1b:cc:fd:c6:5d:69:49:
21:05:72:38:43:8d:b7:11:15:12:28:54:5c:d7:ec:
bb:29:47:d0:28:b4:40:ea:48:9b:0a:23:81:54:d5:
7f:23:c1:24:63:5a:b2:f4:28:dc:6b:60:dc:49:29:
73:85:0d:67:29:4a:0e:94:af:bd:71:a6:f6:21:9a:
e3:35:7c:9d:b0:c9:b9:49:1e:b4:2f:de:63:ab:32:
09:05:98:e8:49:c1:e5:e4:ab:fc:59:ca:d6:17:d1:
bd:e7:96:be:d7:c4:fd:dc:46:a3:c3:fd:c4:91:86:
18:0a:ac:41:53:48:d4:da:03:24:30:bd:05:1d:8e:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:BD:74:B9:DF:EA:E6:B8:88:40:96:93:D2:8C:C4:B7:09:74:1F
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d1:3c:35:35:78:a4:67:60:f3:a7:af:0d:59:39:67:ff:f8:
d3:83:85:f8:66:f1:c8:5a:1e:04:d2:36:73:d1:fc:a1:7e:6e:
96:bd:2f:07:b5:b9:30:94:91:ee:ae:73:bd:ba:c4:13:d6:de:
b3:d0:fd:e7:9e:5a:b5:82:40:e5:1b:11:2c:9a:73:01:a5:ba:
07:28:46:dc:93:e9:2e:3c:22:91:95:81:d7:e7:03:08:fa:ef:
a6:f1:4b:10:eb:8b:36:8f:8a:8d:e1:3c:47:3b:b1:c7:4d:e9:
69:a6:88:1e:76:7b:b4:67:92:7d:5d:7c:40:d3:dd:11:b4:50:
31:d8:91:20:89:01:05:8c:be:d3:0f:7f:03:b8:fa:6a:ea:ee:
3f:79:74:1e:8e:5a:a5:0a:19:05:37:6c:07:2a:a8:ab:6d:22:
cd:cd:0c:f1:c4:34:5f:35:a9:e1:4d:72:d9:9a:ce:99:c2:b5:
ab:61:e7:db:4c:a0:eb:0b:cb:a4:81:26:c7:d4:c6:55:15:56:
cb:84:85:e7:a8:b9:f7:4a:36:e4:c8:e6:41:20:69:91:17:25:
fd:1e:01:7f:91:74:2a:67:cd:e1:a1:2d:1b:03:13:d8:f0:80:
43:70:72:4d:98:d8:c9:33:51:38:bb:65:03:4d:eb:a2:ec:fb:
f7:84:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:33 2026 by rpki-client