
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier: cSNFwdg3/iTBNjj9XvN647bJ0Mw6/RLYG5XxmZPcju0=
Subject key identifier: C8:13:B9:6B:E5:AD:02:FE:86:1A:38:74:97:62:0F:1B:76:B9:34:99
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number: 015D
Signing time: Sat 13 Jun 2026 04:56:33 +0000
Manifest this update: Sat 13 Jun 2026 04:56:32 +0000
Manifest next update: Sat 20 Jun 2026 04:56:32 +0000
Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: kKkJm2mAWlAV7BLcGtih3BbzF7ckMlaKtcz+g70LlvY=)
2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Validity
Not Before: Jun 13 04:56:32 2026 GMT
Not After : Jun 20 04:56:32 2026 GMT
Subject: CN=6a2ce301-ba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:9e:7b:06:de:e6:0f:30:0c:ae:5d:30:4a:
7d:d9:3d:0e:55:85:41:6a:53:c4:b4:66:2c:bf:ae:
b2:c6:b1:52:66:f6:92:56:3e:a1:72:f7:03:8e:0c:
6f:74:8c:8c:68:60:ac:a8:4b:a4:1b:96:09:ce:ef:
9b:64:be:1a:9c:1d:a2:7f:3e:73:62:3a:63:51:50:
00:7b:20:74:8d:f4:95:d7:c1:11:7f:b9:2f:0c:46:
32:ef:b9:47:92:bf:a0:8e:26:d0:65:76:7a:df:f9:
ee:5e:3c:af:9c:af:0f:b8:3a:99:63:94:92:18:e3:
2d:c8:86:2a:89:9d:c9:9d:54:a3:93:0b:2f:86:16:
28:51:78:bb:db:f2:21:69:37:b4:c4:01:ff:b5:c4:
bc:15:d2:e0:ea:02:e5:98:31:a7:bd:a5:81:e8:ef:
a4:2d:7e:14:a1:a3:63:2b:f2:c8:25:bf:cd:55:4c:
de:90:44:02:10:56:d8:53:69:aa:b3:2a:90:ba:8d:
b2:43:53:ba:59:b5:64:0d:b6:67:d3:f2:bc:b1:95:
4e:f7:62:49:a9:8f:e6:17:60:41:77:e3:3b:d4:31:
09:56:6f:af:88:25:1f:3d:fe:cf:0c:b9:6b:2c:8e:
71:a6:7f:50:ab:85:4a:e6:95:39:80:1e:51:bf:bd:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:B9:6B:E5:AD:02:FE:86:1A:38:74:97:62:0F:1B:76:B9:34:99
X509v3 Authority Key Identifier:
keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:94:99:d0:c1:73:c8:62:81:65:4f:43:c4:2e:4a:45:a4:
42:f0:6a:98:4b:ec:23:f7:04:6e:b3:53:7a:89:2f:9c:e9:f7:
7c:f5:8e:c8:e3:49:bc:a0:3d:24:a5:20:54:e0:b9:4d:e5:0e:
e0:0e:69:d1:63:a0:2b:d2:bc:3b:80:16:11:b4:3a:81:16:b7:
b6:ad:1f:c8:cc:43:7f:f5:99:53:93:5d:cb:a1:e9:cc:65:0e:
96:be:c9:f1:19:91:9d:7e:c8:4d:8e:21:22:c9:80:40:78:f8:
c0:dd:37:fa:a3:35:7e:39:19:df:a2:d4:ce:f2:d7:f9:ca:14:
cc:a8:db:db:01:58:f8:d0:65:fe:c9:25:5d:77:3f:38:b1:55:
a5:e3:ce:16:ff:6b:5b:43:7d:5b:05:4d:cc:5a:00:99:7b:29:
bf:92:71:d2:e9:1e:96:84:ff:a5:22:ad:a6:17:0f:62:fa:0c:
26:7e:ed:b6:37:b0:7e:15:30:b8:95:b6:0f:c1:3d:04:b7:59:
55:c2:b4:9c:a5:3a:6f:5e:4a:dd:63:59:e6:92:9a:8d:b2:11:
53:16:c6:fc:b4:ff:b2:f0:45:da:2b:17:ce:0d:c7:2e:44:b3:
21:82:94:de:f5:bc:e4:46:27:86:c6:22:71:a3:01:5c:89:c5:
94:d1:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:32 2026 by rpki-client