
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
File: X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft (raw, json)
Hash identifier: lDVyTHjEABbj92qIqk6rITFoqo0MzxVDgIBqEwzAlCg=
Subject key identifier: 7F:EE:EA:BA:6A:92:7E:28:82:44:F7:2F:EF:F0:4F:3A:8D:C0:93:92
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 08:41:04 +0000
Manifest this update: Sat 13 Jun 2026 08:41:03 +0000
Manifest next update: Sat 20 Jun 2026 08:41:03 +0000
Files and hashes: 1: X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl (hash: FvmKNaNdWAPE0pIw9itIFIhaVTBoId6nIldpgLuX4BE=)
2: B1AC59CA17B911F18117E782383D8C67.roa (hash: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=)
3: 58EB7FEA17BA11F192FEB12A393D8C67.roa (hash: 5nbX1XIJNdumuOJIpAiDvH+g4m9L4W7smTojDdZZ4A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Jun 13 08:41:03 2026 GMT
Not After : Jun 20 08:41:03 2026 GMT
Subject: CN=6a2d179f-1961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:16:43:71:2e:f0:af:3f:51:ac:7b:ee:88:
fb:29:1f:fb:c9:44:6d:0e:23:4c:41:99:17:2e:b0:
55:21:12:25:e5:3d:99:05:25:e5:f1:af:31:72:16:
5d:77:f7:62:d4:8f:41:ed:09:fa:88:7f:3a:ae:92:
4e:8d:7c:9d:65:2a:ac:b0:af:a5:4c:b4:f9:5a:be:
dc:02:fd:18:69:a1:53:3a:34:3c:f9:d2:52:38:67:
94:7f:f9:d1:1e:7a:76:90:d8:3f:6f:3b:7e:bf:4b:
6c:64:6c:99:8d:a7:82:b1:f0:74:19:8c:51:d3:8b:
2f:b9:0d:06:41:d2:67:e1:78:c5:a9:a8:8f:29:07:
d5:35:76:21:d7:9b:dc:d4:e4:b7:57:e8:42:81:5d:
24:11:76:2e:88:99:4e:bf:54:0e:e3:eb:53:cf:00:
70:0e:64:05:c0:6b:61:67:10:05:02:22:17:03:28:
08:8a:6d:91:bd:8d:d0:4a:5e:f3:a3:f0:8a:77:e9:
f1:36:93:40:bb:98:ec:1c:5c:29:9e:fc:57:16:4c:
08:00:59:f1:11:62:da:99:02:c3:0a:82:d0:4f:2a:
c1:ca:ec:6c:da:b4:cc:72:71:18:43:4e:1c:86:5d:
5f:0c:ae:cf:b7:15:80:5f:cf:cc:39:c9:cf:45:cc:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:EA:BA:6A:92:7E:28:82:44:F7:2F:EF:F0:4F:3A:8D:C0:93:92
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:69:5e:9c:82:6a:fa:6d:3c:94:ca:a9:d7:2b:cc:c6:49:74:
ab:f3:1f:77:c3:0a:0d:4c:85:8b:72:6d:5c:2d:cf:b0:76:47:
e0:3b:9d:e2:fb:73:36:37:21:6d:dd:b1:7b:83:f9:fb:96:0b:
11:52:d3:75:7c:62:a2:c6:5a:e2:ee:f4:72:fe:61:9d:ee:68:
c6:4a:d6:d2:ce:5c:75:c5:53:c5:6e:76:7c:ee:fc:31:9d:32:
0f:11:d4:77:63:55:0c:6c:55:b6:d7:28:39:7b:a3:25:a5:b4:
3e:c0:b3:a1:de:4b:33:5e:62:72:a1:0f:9a:44:c1:67:c8:c2:
36:1e:d8:b9:b1:90:42:4b:55:1a:4b:28:c9:41:a3:8a:3b:43:
f5:23:23:33:20:6b:19:cb:80:90:15:ab:af:9b:e2:59:fa:dc:
78:b8:e6:da:9e:0d:31:a6:90:bb:41:dd:63:b9:95:cc:c5:a5:
20:3e:4c:dd:bf:c3:06:2c:dd:aa:0c:56:0f:e0:56:d4:84:05:
78:cc:e3:42:e9:5e:51:25:f0:44:32:50:21:98:ac:d2:50:e3:
1d:42:5b:78:a3:00:ef:ac:80:5e:ec:98:69:81:a9:a3:68:7d:
a3:9a:71:7d:62:26:2d:87:5f:16:fb:03:a7:68:21:71:83:da:
c8:89:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:11 2026 by rpki-client