
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier: TXLFEi0PSGeSPeUpP9U2J32sq4OaT/idmjrglNwgcMo=
Subject key identifier: A0:C5:CF:D3:EF:28:C0:C9:A7:75:C7:89:E8:05:AE:0B:8A:86:85:BD
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number: 0240
Signing time: Sat 13 Jun 2026 02:31:12 +0000
Manifest this update: Sat 13 Jun 2026 02:31:12 +0000
Manifest next update: Sat 20 Jun 2026 02:31:12 +0000
Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: 289ltAe2e0q1kru/+XY9C+LnWN1aymIFN8KXNlxif94=)
2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: nWRLx+q0lfEoBWKjg9VIVBRs/nhFZ936B5rRLzukBEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Jun 13 02:31:12 2026 GMT
Not After : Jun 20 02:31:12 2026 GMT
Subject: CN=6a2cc0f0-14a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:a9:d4:4b:2f:b5:ba:49:b6:79:dc:f6:23:
c9:9b:c7:3c:72:28:bc:d0:63:32:94:5a:d3:84:d5:
78:5b:84:1a:15:ce:81:eb:e5:5e:f0:8f:a7:cf:34:
cf:19:0d:4e:8f:3c:63:52:6e:0a:ef:a4:df:2b:53:
4c:52:28:c8:26:ab:55:50:63:ff:fe:43:53:95:f2:
e7:28:2f:ac:2c:59:a9:c5:d8:5d:98:b0:c7:b4:f5:
76:6b:36:74:12:4a:85:e5:a8:0a:e1:b7:2e:24:5c:
a5:60:0c:19:70:6f:f9:b6:13:0f:27:10:c8:40:d4:
ac:8c:ce:64:b2:0d:ad:0e:e2:c5:cb:5c:2b:42:e9:
16:4a:9b:d1:5d:8d:05:de:ac:8b:cf:8f:0b:4d:3b:
14:4d:0b:a2:1c:52:70:33:e2:7e:56:c7:77:98:dd:
3e:73:23:6a:51:b4:2e:25:d5:54:ec:1f:1e:fd:b1:
d1:fc:93:0c:2e:9f:17:4e:96:f4:c6:6d:73:e4:f5:
e0:01:ac:27:83:e0:13:f3:ad:ab:94:c8:7a:8c:2e:
4e:4b:07:51:f3:d4:95:96:e1:49:c6:ed:e6:f7:07:
39:47:97:90:88:8a:19:0f:c4:15:4a:e6:2e:32:ea:
77:24:5a:65:ac:25:08:2a:ac:1d:76:b2:83:0a:d3:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C5:CF:D3:EF:28:C0:C9:A7:75:C7:89:E8:05:AE:0B:8A:86:85:BD
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:ca:d6:7e:17:3d:45:b7:85:f7:ab:8b:e7:cd:c0:2e:9b:
73:46:ce:62:6f:f6:31:d1:a0:19:72:c4:0f:34:39:62:48:c8:
d4:e7:c1:c6:20:7b:c4:83:56:8b:10:d6:c8:7b:93:9c:0e:45:
97:4d:42:02:a4:2c:48:12:ce:52:d2:5a:a6:7b:74:84:24:2e:
4e:78:f6:ea:eb:f4:8a:d2:cd:ad:1d:91:32:08:5d:05:2e:2c:
d6:59:0a:5e:48:8a:8c:79:42:4a:df:1a:cf:68:ba:48:76:5b:
f0:70:ff:7b:10:52:b6:ac:4b:fb:eb:7a:fe:c7:d0:99:22:dc:
00:2d:af:40:ad:57:3e:09:56:2a:9e:68:d0:63:c4:6f:4b:0f:
a4:ee:57:e0:35:5c:d1:d2:1e:28:0a:85:47:e3:c3:b0:84:df:
58:09:b5:08:20:35:6e:c3:cc:72:80:b8:84:c8:3b:d0:f1:56:
66:92:a1:6f:a9:2f:2a:fd:78:76:ce:fb:ed:d9:aa:6a:4f:b7:
43:9f:3f:bf:10:5b:c6:bb:01:9f:52:dd:9f:16:ba:99:c6:b4:
4d:2b:33:79:9f:88:2e:5b:c3:78:4c:00:72:60:c3:f5:c9:93:
fb:e1:e9:53:f9:b5:c6:50:7e:3b:16:0b:a5:2e:ed:dc:d6:30:
14:75:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:33 2026 by rpki-client