
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File: X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier: 6HQ/fojujXjsPt2WRmgMwtS7kv5qtbE61UVfs41hmqc=
Subject key identifier: 9B:74:5C:45:33:38:90:94:FE:49:A8:7B:20:DF:92:E1:C4:24:DD:0A
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer: /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial: 354A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number: 354A
Signing time: Fri 12 Jun 2026 14:37:30 +0000
Manifest this update: Fri 12 Jun 2026 14:37:30 +0000
Manifest next update: Fri 19 Jun 2026 14:37:30 +0000
Files and hashes: 1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: DybkpaQ8fYV8o6GyuftU8bnnRwcyOUObAoB3kglSxWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13642 (0x354a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Validity
Not Before: Jun 12 14:37:30 2026 GMT
Not After : Jun 19 14:37:30 2026 GMT
Subject: CN=6a2c19aa-bc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:ca:32:c8:a8:4c:ad:3b:7b:75:04:4b:6f:
29:f7:6a:0a:b2:d6:69:fe:56:38:f0:3a:ca:6b:62:
34:1d:7a:75:89:9b:ad:a2:8b:a9:b9:c5:5e:3c:4d:
fd:c4:12:85:d3:05:05:05:70:a7:a2:0e:82:9c:a0:
d1:62:de:14:7a:10:3e:2c:c9:ab:4e:b2:2e:a6:00:
da:9a:04:c0:bb:fc:77:4d:66:be:96:07:12:b2:6f:
c0:97:64:cc:ff:fe:b1:0a:3f:b8:15:52:da:17:2e:
b8:68:e0:f4:14:88:0b:b7:d2:87:c8:c2:28:4c:77:
78:b8:d7:da:01:af:98:56:36:d1:7d:49:9c:bf:70:
0d:0b:43:f2:d6:2e:21:5d:ca:de:90:51:7a:27:99:
18:ed:19:24:aa:39:9a:91:22:de:a7:20:ec:10:03:
bc:fb:4a:ad:78:0e:ab:2b:d5:b9:2b:45:0e:d7:b4:
d6:be:1f:0d:df:66:3b:e8:e9:85:4a:10:9a:b5:0c:
80:59:8c:a8:06:ef:07:5c:1e:18:27:b8:e9:98:e9:
f6:5e:4a:ba:3d:96:24:b4:6f:b0:b1:71:89:f3:6b:
e1:db:04:4a:d7:e6:63:6b:b4:3b:9c:12:50:a8:c6:
b7:b6:48:dc:89:e1:42:df:02:d2:69:af:08:1c:77:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:5C:45:33:38:90:94:FE:49:A8:7B:20:DF:92:E1:C4:24:DD:0A
X509v3 Authority Key Identifier:
keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:05:37:ec:0c:a9:bb:29:54:0e:9b:4a:68:98:6b:1e:65:
14:96:80:ec:8f:dc:3b:f1:a4:fc:08:12:a1:77:31:cd:29:f0:
dc:90:bb:ab:0f:12:f4:d1:c3:97:83:a7:33:97:0e:91:4f:7e:
86:0a:ca:67:b5:3d:84:6c:f8:2a:09:56:92:b7:47:78:08:e9:
16:5e:e4:be:f9:7d:ff:c7:1e:f3:94:13:04:a5:e4:cd:68:a8:
cc:ef:8f:23:3d:75:62:83:7f:39:3c:bf:d6:70:be:ff:a5:d4:
33:62:25:3c:08:86:1e:03:1f:0e:03:8e:04:2b:7b:ff:7e:1d:
f0:0d:1a:df:ce:5c:06:e9:42:a1:4c:66:0d:c4:51:8c:c3:e6:
d4:13:f8:11:37:46:59:6f:40:f1:e0:c4:39:f2:62:b7:72:90:
af:a7:86:18:a4:b8:c6:5c:38:21:81:de:d3:53:29:02:46:06:
5c:46:89:0c:11:53:ec:4c:fc:ce:0c:ac:c5:4b:ad:84:c2:ce:
12:cd:81:dd:9a:29:65:85:e3:7c:ac:23:a2:93:85:91:26:fb:
7e:fe:7e:c7:19:32:4d:85:1f:44:8c:90:d0:24:aa:45:83:ee:
b5:21:9f:c7:d8:d1:cd:62:d9:aa:8c:1c:9e:e5:91:69:84:11:
59:86:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:20 2026 by rpki-client