
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json)
Hash identifier: 0mSk4tBkmzuWL6fNWqcLNy0d4ezA1/6PaUQyJkZgfkk=
Subject key identifier: 20:70:1A:8C:18:7E:7B:A8:6D:23:51:77:85:BD:E8:0A:25:7A:DD:99
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 23EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
Manifest number: 23B4
Signing time: Fri 12 Jun 2026 15:47:33 +0000
Manifest this update: Fri 12 Jun 2026 15:47:33 +0000
Manifest next update: Fri 19 Jun 2026 15:47:33 +0000
Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 75fSNSoELfDdb5R37lIFJZL0zMlTt/Fq+CjID+5ePAI=)
2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=)
3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=)
4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9199 (0x23ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Jun 12 15:47:33 2026 GMT
Not After : Jun 19 15:47:33 2026 GMT
Subject: CN=6a2c2a15-fa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:27:20:dc:83:f9:9d:e2:94:08:ef:70:a3:
9e:a3:9b:6b:50:1f:c6:7d:9e:5c:e5:fd:5e:fa:e7:
d7:14:90:6b:1d:b6:69:a4:60:25:30:82:6f:be:dc:
c4:9e:ad:08:93:e6:55:fe:b8:8c:2c:eb:d6:49:be:
df:c9:a5:ec:51:ed:f7:cb:5b:49:0d:98:7a:07:ce:
f8:07:6c:ec:8b:44:e3:db:05:c6:35:cb:f7:3e:73:
09:51:a8:d2:34:7f:21:19:48:a7:73:5e:b2:b5:f7:
15:b5:be:10:88:71:32:3c:bf:60:2f:6d:5e:07:d4:
c3:31:02:c0:c8:20:2c:75:58:76:2d:c6:d1:f2:51:
41:b4:04:3a:6d:cf:84:3e:be:01:58:d2:2f:3b:ef:
e1:19:cd:93:f9:7c:31:ff:72:4e:f2:fb:d8:b6:c2:
19:7d:9e:3c:4b:18:f1:72:dd:1a:26:5e:a9:1e:53:
cb:96:3c:53:7f:b7:f7:d8:b6:e6:44:7e:bc:25:b2:
14:0e:0a:b8:1b:06:4c:d3:40:2a:3e:c9:54:3a:08:
b8:1f:e5:26:fa:cd:2a:44:0b:b1:7b:12:8a:91:59:
fc:de:e4:52:94:9d:7b:24:b5:b3:6f:75:cf:2b:c2:
51:7c:d4:4f:3d:90:5a:13:df:35:4e:72:63:3d:54:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:1A:8C:18:7E:7B:A8:6D:23:51:77:85:BD:E8:0A:25:7A:DD:99
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:27:23:7c:94:4c:1b:0f:31:00:36:99:ba:40:93:a7:3b:
40:8b:a8:b5:36:b7:03:ff:60:59:dc:64:40:98:ac:9b:42:1f:
e9:7e:76:14:d2:3f:f8:92:50:50:e7:fa:d6:11:b3:b9:a8:95:
c2:51:ec:82:cf:0f:f3:33:c1:5a:40:b8:64:43:25:bd:46:35:
a3:7c:f5:2c:60:c8:3e:80:d0:d1:ce:57:ac:16:91:dc:8e:49:
d3:91:bb:3f:0c:56:40:da:bd:d9:b4:d1:f0:8e:74:ea:ac:b9:
95:c7:31:0b:61:15:92:8c:c3:76:94:17:20:e0:5f:17:f7:90:
eb:b5:a2:0d:af:3e:99:32:68:b9:e7:6e:33:85:e6:3c:e3:01:
9d:fa:89:26:4d:80:90:c9:4b:89:3c:ee:a5:b4:d0:47:78:27:
c1:54:39:5d:e7:fb:cf:25:95:59:51:18:58:e4:2b:0a:9a:eb:
90:f6:2b:f9:0e:63:75:c9:59:7a:5f:78:e6:7b:b2:a6:f8:64:
0a:3a:38:e3:49:db:36:e6:15:ac:fb:db:8b:00:cd:40:60:6e:
32:57:6c:7a:f8:d4:34:51:65:2e:df:d5:af:4b:6d:4b:c5:30:
1d:c3:46:5f:84:7e:13:aa:1c:1c:ec:6a:bd:cf:7f:3f:7b:c8:
e0:49:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:00 2026 by rpki-client