
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier: YD9kaL1iYEyM+iLjI+t2322gVE8orNySDmlXet7QMIU=
Subject key identifier: BA:A3:B8:F4:FE:BF:C4:AD:E6:72:2F:08:EF:C8:63:40:74:7F:B4:40
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number: 0341
Signing time: Sat 13 Jun 2026 01:01:46 +0000
Manifest this update: Sat 13 Jun 2026 01:01:45 +0000
Manifest next update: Sat 20 Jun 2026 01:01:45 +0000
Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: Enfv7QFGbVQTZwG3u0822UZsXOVYymaQlhs0wGj1mI0=)
2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: J2PApqr+PhuIOFT4jmSyae2c/UdsfNvMzE8JRIfQl+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Validity
Not Before: Jun 13 01:01:45 2026 GMT
Not After : Jun 20 01:01:45 2026 GMT
Subject: CN=6a2cabfa-4f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:e6:d1:f7:64:a6:ea:1f:77:f2:9d:a4:60:
9d:52:36:80:0c:45:fe:9d:e6:0c:2c:79:a7:5b:07:
29:f4:51:d3:ea:c8:05:e9:bd:f0:64:76:7b:7a:e0:
98:9e:1a:ea:70:3f:d5:ac:19:c3:6c:6f:7e:e2:7a:
7f:84:a8:74:1b:91:57:2c:10:1f:d2:2a:20:5f:f4:
3c:e4:10:81:ba:13:a1:57:77:a8:6d:f6:c5:53:e4:
37:9b:56:52:41:60:17:53:d9:00:f2:37:81:60:41:
9f:17:d5:f3:a5:55:4a:e9:3f:0d:4e:67:e0:51:a0:
c7:88:3d:95:4f:cc:e0:c6:d0:d2:fc:12:22:ab:e2:
41:56:50:0b:9b:2c:0f:6b:af:9e:a6:09:41:bf:3b:
39:ba:4a:4f:9e:4e:59:1f:71:01:f3:ec:34:02:04:
6b:9d:ea:6c:a0:28:c5:22:ff:0a:2f:5a:a1:f4:49:
b1:68:7e:0a:9e:84:e1:78:10:1e:5a:a1:79:b1:b4:
b7:85:eb:0e:ea:ef:61:e7:df:2c:96:20:9f:12:83:
87:e4:d4:ed:87:63:5a:cd:d5:42:85:ee:b1:ca:e8:
87:2c:1f:ed:93:8e:77:46:fd:96:11:77:c6:70:ef:
9d:02:c9:88:ae:29:1b:4f:f0:87:a3:08:b1:90:6d:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:B8:F4:FE:BF:C4:AD:E6:72:2F:08:EF:C8:63:40:74:7F:B4:40
X509v3 Authority Key Identifier:
keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a6:9e:a8:06:1b:7c:97:f7:c4:fb:3c:d1:f9:67:53:38:81:
fe:fd:28:e6:86:41:76:a0:48:23:57:86:15:47:a0:e3:27:c8:
31:1e:6c:78:c3:72:02:b2:09:6d:8c:91:22:3e:e6:c1:91:4f:
30:59:bc:25:5d:fa:ab:d8:a4:a8:39:0d:d2:68:34:ec:5c:a4:
c7:92:6c:1a:54:68:4e:9e:b6:fd:f1:de:55:d3:01:ec:73:07:
f3:3e:8f:dd:31:41:e2:5e:9d:d8:dd:f4:98:02:6b:35:48:2f:
02:79:22:11:46:50:25:cf:0f:1e:29:87:a9:fe:91:d3:21:76:
64:20:fd:c2:35:d5:54:88:44:3e:4e:95:95:ba:de:d1:d6:2a:
88:db:3d:17:ae:14:72:95:c9:90:16:87:c6:47:45:e9:17:0a:
8b:0a:d7:a8:60:7b:6a:48:d2:14:2e:29:bf:49:79:d5:f6:93:
98:8b:5f:b1:cb:84:aa:2e:06:d5:af:2a:66:74:94:26:10:50:
8b:43:c8:97:1c:73:eb:b1:42:a1:e4:6e:d9:0a:30:b0:7a:db:
d5:b1:4a:fb:de:2b:39:3f:d2:b4:15:13:ca:15:31:3b:4a:52:
b9:bb:cd:9a:63:30:6b:8f:61:74:3d:fd:4d:12:04:d0:f1:e4:
18:24:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:25 2026 by rpki-client