
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
File: XAq0JfK0I14cgVaDvWyOi3uAtyc.mft (raw, json)
Hash identifier: EN8k2nTdouisQlthgX9uz5bwrlMSmXjQc7U/KGaFv4M=
Subject key identifier: DB:AD:46:FA:11:C2:AD:04:DC:D1:53:F4:CB:BE:B2:51:D7:19:F2:0E
Authority key identifier: 5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
Certificate issuer: /CN=A917F8A9/serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Certificate serial: 0A4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
Manifest number: 0A33
Signing time: Fri 12 Jun 2026 19:47:16 +0000
Manifest this update: Fri 12 Jun 2026 19:47:15 +0000
Manifest next update: Fri 19 Jun 2026 19:47:15 +0000
Files and hashes: 1: XAq0JfK0I14cgVaDvWyOi3uAtyc.crl (hash: r3PjKd947+R+hIZQKmlbnoICoWqeXJxNJNdVngkqCrg=)
2: 83DC30E0D0DB11EA9336962FC4F9AE02.roa (hash: V4TtDHDwWfSTPDtmdJxLiYpQrBPMzCI9Mup9QQhSTOc=)
3: 0774A2C894F211EAB30E7682C4F9AE02.roa (hash: phoNlFrzl7WYjyRvdppnlSL/FBRV8iS5x5iyLwB+dTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2638 (0xa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F8A9, serialNumber=5C0AB425F2B4235E1C815683BD6C8E8B7B80B727
Validity
Not Before: Jun 12 19:47:15 2026 GMT
Not After : Jun 19 19:47:15 2026 GMT
Subject: CN=6a2c6243-495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:d5:45:68:22:35:00:3e:7f:da:6c:69:e9:
3b:88:b8:70:ce:f5:b6:3f:79:9c:0f:6f:95:a6:ce:
ab:c5:2e:a8:2b:0a:bd:de:24:cf:99:1d:34:f7:c0:
be:c1:cb:94:83:5d:3a:f6:ff:e4:29:d7:f4:70:b8:
14:a9:ed:87:1c:54:0a:6d:9f:83:8a:f5:7e:87:b2:
a3:95:9b:af:5b:1c:01:d7:d7:ec:e8:bf:c8:09:37:
e4:c8:b0:b6:7d:9c:45:c3:15:a6:08:da:ec:7e:c4:
8e:ae:68:d8:60:6f:52:3c:1e:dc:b2:34:e1:af:87:
b1:73:85:4f:ce:23:c1:5e:61:42:51:53:6a:ec:57:
2b:62:98:6e:d3:39:cd:fd:7f:46:ce:8f:5b:ac:e5:
af:15:71:14:03:95:8a:ea:46:3a:e0:4d:06:f6:da:
d1:1e:92:73:2d:a4:79:76:c9:e2:cd:2c:15:21:4d:
30:01:c4:eb:74:be:6d:a1:d3:78:1e:66:b5:da:89:
6c:8d:44:fe:be:92:48:0f:ae:cc:e2:26:37:3b:4b:
5e:04:d9:3f:e5:cc:dd:38:97:8e:cf:b4:14:20:4b:
1a:e4:3c:a2:46:f2:da:bb:10:57:b8:08:29:26:48:
ef:9c:cb:2e:fa:4b:89:7c:17:b5:8f:6e:b7:02:f2:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AD:46:FA:11:C2:AD:04:DC:D1:53:F4:CB:BE:B2:51:D7:19:F2:0E
X509v3 Authority Key Identifier:
keyid:5C:0A:B4:25:F2:B4:23:5E:1C:81:56:83:BD:6C:8E:8B:7B:80:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAq0JfK0I14cgVaDvWyOi3uAtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8A9/2AA0433094F011EA83EF1E7DC4F9AE02/XAq0JfK0I14cgVaDvWyOi3uAtyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:fc:07:dd:c4:ef:35:d2:26:18:c4:7f:df:3a:4d:e8:ad:
a0:97:ca:cd:ca:c3:c6:7f:b8:82:f8:40:d2:7c:c3:dd:90:a2:
ad:8a:ed:90:6a:61:9a:d1:12:ec:9b:a8:00:5e:7c:c3:14:68:
9f:14:ae:1a:2d:51:05:29:6c:49:56:2c:5a:62:ce:ce:e1:f8:
d4:14:06:ba:db:b2:df:5a:b7:8e:b7:1a:ab:1a:29:d1:bd:f6:
41:89:a5:35:39:d9:29:5b:60:bc:10:b8:f9:cd:d7:25:f6:74:
c2:d1:84:ea:75:5b:4e:9b:59:11:ae:c4:df:0a:5e:a4:6f:a0:
18:71:d7:4c:86:ae:72:0e:a0:4e:d0:ed:be:5e:2e:17:d2:de:
bd:30:b3:cd:65:56:c8:d0:f5:20:8d:b2:d6:22:ca:3b:cc:ef:
8d:04:7c:b8:9d:43:6b:00:06:59:f3:44:14:9b:b3:01:c3:ff:
ae:3d:fd:a1:98:8e:15:30:9b:03:7f:c9:a8:ec:c0:5d:75:e7:
e9:73:3a:53:82:6a:07:b1:df:0d:f6:5b:0e:fa:f5:36:01:b0:
1e:8d:e7:78:7e:d4:45:df:28:73:4b:ba:61:57:10:ff:64:ca:
90:c6:52:15:21:40:06:07:f0:b1:cc:5c:21:e4:c9:c5:01:67:
4f:aa:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:35 2026 by rpki-client