
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json)
Hash identifier: 1Ol46GdQZofRLXUvn8k2c1uOt0RL89t2ckNYdkEbPSY=
Subject key identifier: FE:16:51:45:C6:61:CC:68:3D:9D:B4:07:33:30:E7:21:FC:4A:7A:C2
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
Manifest number: 053B
Signing time: Fri 12 Jun 2026 23:37:24 +0000
Manifest this update: Fri 12 Jun 2026 23:37:23 +0000
Manifest next update: Fri 19 Jun 2026 23:37:23 +0000
Files and hashes: 1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: SMmmHIRs/xjyssnsS2fBY8fZ62M/3ZpQ3IjSziYHOq8=)
2: 87840F3AFBD111EFB4804F27C4F9AE02.roa (hash: vIEtRSxvBa0Xc/IiKtnrGRDGvVh6iD/nJgJJDv2I0S0=)
3: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (hash: rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Jun 12 23:37:23 2026 GMT
Not After : Jun 19 23:37:23 2026 GMT
Subject: CN=6a2c9834-6b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:58:e6:cc:8c:45:f9:95:36:6e:16:53:fc:
bd:15:5d:6e:6f:63:bc:be:c8:2c:7f:61:2e:41:32:
bd:3f:44:ea:b0:1a:49:65:56:24:13:09:3f:39:14:
d9:f0:f9:90:83:52:8d:01:d5:e0:06:31:88:1c:6e:
e3:61:93:e9:d2:3e:ce:0c:25:63:01:0f:4e:71:fd:
ca:b2:a0:26:6b:20:d4:48:92:4f:6f:58:c8:6d:e3:
6a:a8:45:e6:4c:09:52:ab:59:4a:65:c1:dd:b1:91:
da:3e:8b:c1:a9:1a:14:9f:01:f9:97:6c:db:36:e8:
d8:75:a3:76:36:7b:96:2c:b8:f3:7b:dc:fb:7b:64:
1c:f0:f1:46:5d:00:2a:ad:11:56:68:66:d6:b6:7b:
35:85:3e:43:73:f0:5c:5a:a4:82:fd:51:ef:44:84:
66:67:16:40:9d:43:bc:65:e2:a9:b4:f1:79:a0:6e:
25:b6:58:a9:93:38:16:ac:00:19:5b:cb:57:91:0f:
2f:53:04:c4:2a:62:40:45:8d:00:1a:a4:ce:f6:27:
84:58:59:86:b2:59:02:bc:e3:fb:cb:a0:da:d8:a9:
cf:c7:44:17:80:f8:a6:7e:63:eb:5e:ed:8e:58:aa:
ac:5a:f4:62:f9:26:95:34:e5:31:82:5b:1d:3b:96:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:51:45:C6:61:CC:68:3D:9D:B4:07:33:30:E7:21:FC:4A:7A:C2
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:44:48:00:5a:36:85:b0:08:c7:fc:6c:10:6c:21:60:c2:
10:a5:25:0c:4c:41:cc:b7:2e:89:77:05:0e:c2:41:75:41:44:
78:94:fd:e3:48:90:8a:4e:ca:25:1d:2d:26:5f:8b:65:a1:5a:
fe:71:fb:c6:54:e0:dd:ae:68:7b:59:0d:e7:9e:ec:40:e6:9c:
9e:50:11:b4:95:dc:3f:c2:0d:b1:24:32:3b:01:29:8e:1e:24:
b6:3d:72:03:a4:18:c0:38:64:83:71:4a:1b:e0:3e:5a:11:3a:
79:1f:42:a5:4e:29:7f:f8:7e:96:c1:c5:aa:51:6f:e4:78:98:
96:b6:c0:bf:87:f4:18:24:44:a4:a7:1b:00:8e:77:0d:4d:9e:
0f:74:db:d9:de:15:c0:4e:71:9a:b4:bb:1b:73:4a:5f:fb:33:
39:99:7f:4c:6f:f7:15:fb:50:ac:9b:3e:68:6d:8e:53:6f:24:
d5:17:0d:5a:f8:2a:6e:5e:44:84:10:52:b8:33:f2:81:9d:b5:
89:7c:52:9c:91:87:bc:5f:3e:a1:c5:60:b7:74:34:ea:73:4f:
92:6e:99:87:8c:98:d0:36:94:df:49:e3:25:00:d9:45:69:a9:
a2:e0:07:85:51:62:03:56:75:97:a6:9f:29:d3:d9:82:9d:9b:
38:10:aa:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIwMDVDNzY0NDMz
M0JDMDI5N0EwHhcNMjYwNjEyMjMzNzIzWhcNMjYwNjE5MjMzNzIzWjAYMRYwFAYD
VQQDEw02YTJjOTgzNC02YjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJhY5syMRfmVNm4WU/y9FV1ub2O8vsgsf2EuQTK9P0TqsBpJZVYkEwk/ORTZ
8PmQg1KNAdXgBjGIHG7jYZPp0j7ODCVjAQ9Ocf3KsqAmayDUSJJPb1jIbeNqqEXm
TAlSq1lKZcHdsZHaPovBqRoUnwH5l2zbNujYdaN2NnuWLLjze9z7e2Qc8PFGXQAq
rRFWaGbWtns1hT5Dc/BcWqSC/VHvRIRmZxZAnUO8ZeKptPF5oG4ltlipkzgWrAAZ
W8tXkQ8vUwTEKmJARY0AGqTO9ieEWFmGslkCvOP7y6Da2KnPx0QXgPimfmPrXu2O
WKqsWvRi+SaVNOUxglsdO5by5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4WUUXG
YcxoPZ20BzMw5yH8SnrCMB8GA1UdIwQYMBaAFFwxXa/FOoL91ixyAFx2RDM7wCl6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjRBRi83NkM3RjBGNDUx
RjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2M1dMSElBWEhaRU16dkFL
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hERmRyOFU2Z3YzV0xISUFYSFpFTXp2QUtYby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjRBRi83NkM3RjBGNDUxRjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhVNmd2
M1dMSElBWEhaRU16dkFLWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOLhESABaNoWwCMf8bBBsIWDCEKUlDExBzLcuiXcFDsJBdUFEeJT940iQik7K
JR0tJl+LZaFa/nH7xlTg3a5oe1kN557sQOacnlARtJXcP8INsSQyOwEpjh4ktj1y
A6QYwDhkg3FKG+A+WhE6eR9CpU4pf/h+lsHFqlFv5HiYlrbAv4f0GCREpKcbAI53
DU2eD3Tb2d4VwE5xmrS7G3NKX/szOZl/TG/3FftQrJs+aG2OU28k1RcNWvgqbl5E
hBBSuDPygZ21iXxSnJGHvF8+ocVgt3Q06nNPkm6Zh4yY0DaU30njJQDZRWmpouAH
hVFiA1Z1l6afKdPZgp2bOBCqew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:22 2026 by rpki-client