
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier: fMVmh6Buo7/KMERzhECW7cBgm/7iQweOEG+yvJtkHOY=
Subject key identifier: 9F:BF:23:61:2D:93:9E:9F:E1:77:40:CD:A7:5E:D1:60:F3:44:57:4B
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 02B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number: 02AC
Signing time: Sat 13 Jun 2026 01:30:04 +0000
Manifest this update: Sat 13 Jun 2026 01:30:04 +0000
Manifest next update: Sat 20 Jun 2026 01:30:04 +0000
Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: YF0quoA9PE5QEy7Ly8gtmd0mB63hGgtUJtNPi3pH/aU=)
2: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=)
3: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Jun 13 01:30:04 2026 GMT
Not After : Jun 20 01:30:04 2026 GMT
Subject: CN=6a2cb29c-5aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c2:e3:12:86:0d:40:2c:57:6b:dd:ba:d7:e8:
06:eb:d7:7d:a0:c7:5e:28:44:3f:14:cc:ad:62:10:
65:ba:14:49:70:09:84:1e:31:3f:b4:b4:cb:c6:50:
9b:8e:a2:18:3d:b6:18:30:6f:16:6a:2e:66:09:4f:
65:f6:bd:f0:76:75:26:a2:6e:76:d3:e2:28:69:6d:
0d:fa:27:96:ee:da:b2:41:01:d4:81:2c:2d:f8:55:
3c:be:c1:ec:45:9f:00:c0:ac:31:e8:0e:e9:1a:4f:
32:e0:97:51:36:ae:67:d2:85:bd:5e:df:b9:0b:88:
12:1d:b9:e1:a7:9f:7b:85:96:fa:cd:f7:9c:b4:a9:
b1:eb:a2:7a:d4:a1:44:26:29:07:55:e1:e9:44:b5:
8e:2b:bd:b0:d9:77:38:8a:fa:74:9e:c6:a9:62:c7:
5c:9d:84:e1:d9:4a:37:ae:c3:49:0a:cf:31:57:45:
07:56:b2:2b:cb:71:ae:3f:0f:eb:75:75:b8:b0:1a:
b9:f0:86:00:70:52:7d:ed:d6:e4:32:97:4e:2e:b6:
17:63:14:84:0b:99:c9:32:cf:fc:8e:2b:68:b3:66:
f5:69:d1:d6:a1:b8:27:b6:52:32:3b:33:b6:e0:48:
87:50:1a:fa:da:82:7c:e1:d0:bc:db:01:6d:87:bb:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:23:61:2D:93:9E:9F:E1:77:40:CD:A7:5E:D1:60:F3:44:57:4B
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:41:4d:4f:67:6b:44:66:18:9b:57:b6:ba:d0:b8:40:ad:
11:f0:f5:2b:8a:ef:73:b7:ce:7a:5d:f6:0a:7e:ac:80:4e:61:
cd:69:8d:99:22:37:82:f6:b9:2a:94:b1:55:00:8d:64:f8:1a:
2f:cc:e4:82:90:49:3f:a8:43:04:b4:b7:37:95:a0:b8:fc:63:
4b:23:0d:db:65:3d:57:ba:e3:00:25:7b:bb:08:32:7b:5d:c0:
08:00:b6:29:8f:b2:e9:43:f5:44:96:d6:55:84:0f:f6:83:4c:
bc:bc:98:cd:c9:3c:62:0a:84:b5:34:23:da:f1:4a:9b:04:f0:
e3:ac:0b:d5:60:6f:70:bd:df:cd:03:6d:fb:d5:4d:fd:dc:df:
b5:70:40:da:83:c2:16:f0:09:4f:26:27:8f:73:c9:33:1c:d8:
c6:36:44:c4:ff:b3:9c:fb:4a:b2:10:ee:73:db:e0:f5:a5:15:
ff:9f:0d:63:d7:15:2a:7c:52:18:fe:8c:f9:06:df:71:7a:37:
43:27:89:48:43:41:d6:50:38:ff:5c:d0:6c:69:c5:62:e3:99:
cb:3f:54:d8:66:82:29:fd:bb:69:d6:b7:ed:26:f8:e8:bf:51:
08:b4:be:62:38:1f:3c:2f:04:39:ee:a4:7a:7b:bd:9a:64:a5:
39:63:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:15 2026 by rpki-client