
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File: xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier: 4Xxp0VmHdQl2NmN1aN5hppJlxQprXbzwgr+aTd2aYUI=
Subject key identifier: 91:01:F7:DA:9B:1F:27:D8:7D:F5:3E:92:59:86:8C:50:C5:94:2B:72
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number: 51
Signing time: Sat 13 Jun 2026 08:24:49 +0000
Manifest this update: Sat 13 Jun 2026 08:24:48 +0000
Manifest next update: Sat 20 Jun 2026 08:24:48 +0000
Files and hashes: 1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: fBbgGZHzjXgTy0sGw3EE8PS5sVP7jWL9O5447EX11wQ=)
2: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=)
3: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Validity
Not Before: Jun 13 08:24:48 2026 GMT
Not After : Jun 20 08:24:48 2026 GMT
Subject: CN=6a2d13d0-bc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:dd:a3:f7:cd:52:8d:c3:33:4d:e5:bb:34:
f0:85:5e:92:15:99:5f:d4:c0:20:a6:7b:df:23:97:
15:ac:28:ec:1c:36:77:01:d4:07:3b:ad:50:0a:06:
7e:d1:58:49:49:28:9b:49:58:f7:49:62:f6:80:77:
72:ed:25:c5:6b:1b:87:6d:a1:18:76:7f:6a:c2:b6:
fa:ed:f5:56:78:69:3e:ac:31:f4:ad:60:6c:60:65:
26:87:23:e7:6d:52:2a:a5:82:bb:0d:03:9f:16:be:
58:99:51:3b:cd:35:ac:8a:b3:34:39:0e:31:d7:79:
ff:c1:83:9d:d4:f5:15:c2:dc:82:3b:36:95:f1:3a:
05:33:dd:e5:e7:5e:33:08:9c:e1:ce:34:46:7b:88:
a7:c4:33:cf:d9:96:b8:02:91:ec:4a:cd:54:7a:a9:
8a:a5:17:9e:03:f4:ac:c2:3d:14:9e:c1:5b:71:5f:
ca:f1:47:fa:36:ed:9a:35:1a:45:59:80:f8:92:a3:
fe:05:5a:59:f9:25:4b:a0:3e:60:b1:fb:b0:d5:4d:
86:3c:4b:d3:4b:3e:c1:c5:cd:22:a5:5e:a5:84:e0:
01:43:fc:a5:c0:ea:f7:8d:e4:a3:90:ac:02:1f:65:
c8:7d:28:b1:9f:71:21:fa:9b:d6:f3:63:2c:48:2a:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:F7:DA:9B:1F:27:D8:7D:F5:3E:92:59:86:8C:50:C5:94:2B:72
X509v3 Authority Key Identifier:
keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:96:e1:56:c8:6e:63:2d:d7:cc:cc:b5:47:33:69:d6:b1:
9b:fa:9d:93:ef:a5:79:d8:4b:ff:5e:2b:23:5a:3b:b9:b5:ac:
e8:ea:27:79:fe:eb:39:cf:72:81:90:79:83:4a:09:11:8f:2b:
1c:01:79:19:52:e2:5f:06:47:c4:e9:3c:bf:81:40:a6:f5:16:
64:ff:10:86:ae:cc:ad:bc:60:39:b5:eb:0f:c0:6c:e0:91:e3:
d8:ff:55:2d:5a:cd:98:c0:8c:6d:aa:d6:79:ed:1b:8a:b7:77:
bf:2a:33:7c:08:cb:a8:76:bc:71:04:54:46:94:e6:23:a5:f1:
00:10:b5:96:c2:3c:d2:d3:ed:0c:b1:6c:e3:8a:27:11:83:1e:
eb:e9:f1:8c:bb:0d:1e:23:d7:6c:e0:1c:b6:68:de:e9:4c:89:
c4:b5:bd:83:7f:5d:f1:58:e6:66:ff:95:e9:f6:61:c6:d8:63:
15:06:2c:14:f3:36:f3:fd:95:ba:80:1a:f2:71:d9:90:1b:df:
65:a8:f3:da:49:c1:dd:82:1b:aa:b2:cf:6d:e9:37:0b:89:d6:
fd:32:be:11:ac:fb:14:f6:30:97:8c:36:f4:a6:74:c9:04:91:
dc:53:1b:91:c7:76:47:fb:cd:15:57:08:b9:4e:c9:47:9e:9d:
59:77:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:13:35 2026 by rpki-client