
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier: UDw3a6P9DTvk8UBwARzBSNRYpu5/Mg5PnteVZ6cdIzg=
Subject key identifier: 11:89:17:41:6F:FB:1C:F6:05:DC:85:78:6C:59:08:0D:50:87:E3:BE
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial: 079E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number: 0796
Signing time: Fri 12 Jun 2026 21:34:02 +0000
Manifest this update: Fri 12 Jun 2026 21:34:01 +0000
Manifest next update: Fri 19 Jun 2026 21:34:01 +0000
Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: alAn0cMNml0MZ9OTIL4xnkBrpr1Y+qckFtww7+Rgb8I=)
2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: IhW0qxbo8h3sFHYh2PU8II7oZ+tmgZjeNcwWwyZj0fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Validity
Not Before: Jun 12 21:34:01 2026 GMT
Not After : Jun 19 21:34:01 2026 GMT
Subject: CN=6a2c7b4a-af88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:e7:d5:de:33:42:f9:d6:e7:f9:ba:eb:3f:
48:43:04:28:75:af:9b:16:14:fa:dd:8a:c1:e7:f4:
b1:e3:fb:d8:74:62:c3:24:07:88:c2:7e:b4:00:ee:
17:3c:e7:29:59:46:12:9b:47:df:74:6a:e1:0b:34:
da:c7:25:ff:db:66:1e:3c:ea:ef:f1:ea:7f:e2:c2:
36:48:0b:c0:c7:4d:94:22:0c:ae:dd:40:72:eb:59:
35:7b:2b:d6:5e:e6:d2:2c:35:e5:f5:80:81:a2:1d:
7d:ec:22:03:b8:1e:db:42:0f:40:ad:5d:e4:ae:d8:
b0:47:de:45:75:4f:1d:0c:24:ab:62:82:97:16:71:
a1:40:66:94:79:0b:da:c7:49:60:8e:5f:b4:9e:ca:
65:84:9b:24:76:98:0f:91:dc:17:40:14:e5:75:d5:
d7:5b:f1:57:1a:31:a9:33:6e:4b:b1:89:80:f4:36:
bf:bf:6b:1d:ba:5b:21:3d:2a:33:ed:ac:fc:dd:39:
5e:a2:8c:b1:0c:09:0f:41:79:9e:b8:a7:b1:ee:e1:
4d:93:7f:0d:07:85:4c:f4:11:af:59:c1:0b:b9:ee:
f7:f5:5d:a3:e5:db:c0:34:39:4b:ca:0c:b5:8f:ea:
4a:f4:a4:7c:8b:ad:5f:f0:98:b6:32:ac:5c:37:16:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:89:17:41:6F:FB:1C:F6:05:DC:85:78:6C:59:08:0D:50:87:E3:BE
X509v3 Authority Key Identifier:
keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:0e:ba:b0:fc:11:2c:bf:d6:88:71:78:11:a4:c8:77:fe:
6e:53:65:f7:28:22:dd:2b:2d:75:9b:ba:a7:3e:02:25:f4:41:
78:62:d5:09:9e:eb:1a:94:01:0e:b3:52:6c:05:48:8a:ed:5b:
e9:7f:2f:9c:31:9f:e5:ef:c3:99:40:18:0e:c5:4e:bd:ac:d6:
ed:2a:13:d6:75:e9:e8:a1:92:03:c8:03:f4:d0:37:2c:6e:28:
05:13:66:86:dc:6d:40:12:2c:8d:a1:1d:71:85:d9:85:58:ba:
3f:b9:30:a5:c6:b7:22:91:d6:94:17:e1:dc:07:36:76:44:92:
77:1d:cf:85:a7:4e:d2:9d:e3:bf:37:fb:b9:e9:ef:87:52:a6:
e8:32:64:cb:35:5b:5b:f4:df:47:03:e8:6f:be:c1:f0:df:42:
fd:65:bd:c9:86:d8:96:80:2f:95:89:bc:37:42:c9:d6:04:e0:
aa:df:c2:e9:18:38:22:71:21:b7:1e:f6:4e:2b:83:43:56:d3:
2e:bc:33:5d:aa:04:3d:03:98:ac:93:6a:6e:f8:99:7a:b3:b2:
6a:d6:c4:56:ac:07:85:fe:bc:a0:f2:6b:5c:62:dc:12:2c:42:
39:f3:52:36:f3:65:f3:b8:b3:06:21:47:12:12:06:fd:17:7c:
16:e5:8e:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0
QTUyOUQwOUEwHhcNMjYwNjEyMjEzNDAxWhcNMjYwNjE5MjEzNDAxWjAYMRYwFAYD
VQQDEw02YTJjN2I0YS1hZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApg/n1d4zQvnW5/m66z9IQwQoda+bFhT63YrB5/Sx4/vYdGLDJAeIwn60AO4X
POcpWUYSm0ffdGrhCzTaxyX/22YePOrv8ep/4sI2SAvAx02UIgyu3UBy61k1eyvW
XubSLDXl9YCBoh197CIDuB7bQg9ArV3krtiwR95FdU8dDCSrYoKXFnGhQGaUeQva
x0lgjl+0nsplhJskdpgPkdwXQBTlddXXW/FXGjGpM25LsYmA9Da/v2sdulshPSoz
7az83TleooyxDAkPQXmeuKex7uFNk38NB4VM9BGvWcELue739V2j5dvANDlLygy1
j+pK9KR8i61f8Ji2MqxcNxYdIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGJF0Fv
+xz2BdyFeGxZCA1Qh+O+MB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1
RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05
ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAizQOurD8ESy/1ohxeBGkyHf+blNl9ygi3SstdZu6pz4CJfRBeGLVCZ7rGpQB
DrNSbAVIiu1b6X8vnDGf5e/DmUAYDsVOvazW7SoT1nXp6KGSA8gD9NA3LG4oBRNm
htxtQBIsjaEdcYXZhVi6P7kwpca3IpHWlBfh3Ac2dkSSdx3PhadO0p3jvzf7uenv
h1Km6DJkyzVbW/TfRwPob77B8N9C/WW9yYbYloAvlYm8N0LJ1gTgqt/C6Rg4InEh
tx72TiuDQ1bTLrwzXaoEPQOYrJNqbviZerOyatbEVqwHhf68oPJrXGLcEixCOfNS
NvNl87izBiFHEhIG/Rd8FuWOZw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:19 2026 by rpki-client