
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier: /BbY5AO0bWyaq7wtNz96K/olwLsJOuEjfxc8JovQD1k=
Subject key identifier: EC:0E:97:8F:27:AE:2F:A4:39:35:F9:10:FD:CA:D3:73:BD:3C:AA:99
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial: 0894
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number: 0888
Signing time: Fri 12 Jun 2026 20:42:12 +0000
Manifest this update: Fri 12 Jun 2026 20:42:11 +0000
Manifest next update: Fri 19 Jun 2026 20:42:11 +0000
Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: lYm0fJx3xwHaDy65TVICMsuWSwariGlGTy/Z/CvrKaY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Validity
Not Before: Jun 12 20:42:11 2026 GMT
Not After : Jun 19 20:42:11 2026 GMT
Subject: CN=6a2c6f24-39d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:20:c4:dd:92:df:68:83:9f:2a:c4:0b:20:
28:f4:fb:76:8d:86:f1:1b:2b:85:94:a0:2e:2f:6c:
38:cc:e7:b8:01:49:cb:f0:60:40:f9:a4:e3:54:45:
f8:6d:8a:9b:a0:a0:7f:42:7d:96:77:72:92:78:5d:
a8:5b:85:d0:1f:55:3d:43:22:f2:00:38:bc:c5:16:
fa:3d:18:49:05:cc:95:61:af:94:42:ed:81:f8:e0:
de:05:36:ad:59:08:1d:22:d0:37:da:3b:ec:9a:e1:
2a:90:11:2a:93:fc:2e:f6:ca:b5:3b:a9:31:3f:e5:
85:30:4a:28:c5:4f:17:f1:9e:d4:4f:77:91:80:c0:
ff:f1:54:d6:79:46:69:8e:b8:9d:48:d3:fb:11:1c:
a6:0a:00:4b:54:1f:41:0a:a8:41:3b:11:37:29:d3:
ee:4e:bd:47:0c:81:c7:13:57:39:af:34:fa:a3:32:
ac:58:10:d0:9a:e6:41:10:fa:ea:2a:ea:75:78:34:
b9:6b:d3:aa:1e:14:a6:99:50:41:ae:a7:86:19:13:
aa:60:6d:1a:9c:70:d5:b8:c3:a9:f5:72:d0:36:6a:
28:72:ce:32:bb:78:ab:6c:dd:97:ec:79:3e:88:ae:
0a:1f:81:72:64:ec:bd:ea:db:c2:6e:98:61:9e:a6:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:97:8F:27:AE:2F:A4:39:35:F9:10:FD:CA:D3:73:BD:3C:AA:99
X509v3 Authority Key Identifier:
keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:91:e6:93:3d:a0:34:f3:4f:9e:37:04:94:9a:2d:78:14:
ca:a9:63:db:31:fe:58:e5:42:d7:9a:fb:93:c3:22:44:a9:0f:
f0:30:bd:ce:9d:d1:d7:39:db:66:75:88:9d:2f:35:7b:ba:d1:
07:28:67:bd:ad:dd:a3:2c:1e:0b:02:1b:72:ab:09:7b:c6:e7:
62:74:db:39:06:5b:f0:63:60:d1:03:cb:8b:57:24:ff:b7:5f:
d4:01:bc:50:8f:14:a4:3d:dc:72:81:7d:fd:7b:a6:06:51:33:
5d:be:60:fb:a7:f1:17:01:55:16:33:24:5a:0d:95:2a:89:ba:
c9:48:6f:f4:64:d9:74:fc:02:73:dd:c6:a5:ea:43:2d:c8:a9:
79:30:37:f5:d5:53:e5:5f:57:d8:70:34:ec:0a:02:d9:44:42:
af:77:56:80:89:22:e7:76:d3:52:43:51:a4:5b:55:ef:26:7e:
71:50:6f:f9:e2:d6:c0:97:38:7f:7f:a4:6b:95:fa:b1:69:b1:
3c:73:db:f5:dc:7f:65:8c:ae:fa:41:34:cd:c0:8a:1f:79:7f:
fd:cd:f5:d8:22:4c:00:77:18:c3:45:8b:e9:b5:90:b5:29:95:
96:ea:36:2b:2f:0f:20:09:d4:d2:8a:c4:53:c4:93:41:18:a5:
3d:69:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:03 2026 by rpki-client