
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: WIBH3FaNATy0iMk/wXXMvbrDl3FnfzBlpxPt654y9X8=
Subject key identifier: 3E:35:C7:19:0B:B4:C1:C0:8E:96:EF:55:06:72:AC:74:E7:3D:FC:4A
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: 01C9
Signing time: Sat 13 Jun 2026 03:54:55 +0000
Manifest this update: Sat 13 Jun 2026 03:54:54 +0000
Manifest next update: Sat 20 Jun 2026 03:54:54 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: 64pTZVkVE4fNWwdI7d/pL+FNlma7ky6h4XM/H/AwXYs=)
2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Jun 13 03:54:54 2026 GMT
Not After : Jun 20 03:54:54 2026 GMT
Subject: CN=6a2cd48f-1cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:e9:71:5d:ac:f5:31:d3:0c:49:7d:72:59:
e6:8e:ed:65:71:f4:ac:ad:69:4c:c1:6b:21:38:d2:
9c:29:41:bf:8d:48:e4:fc:14:2e:a5:2e:57:57:ff:
2c:48:82:a1:7f:78:f8:aa:2a:80:83:80:2b:05:bc:
fa:38:4b:c4:ed:54:8b:a7:cd:be:65:4c:ca:22:f8:
29:04:fe:ca:2c:3f:a0:ef:32:63:a8:db:d4:fd:1d:
b4:ec:33:46:5f:be:e6:bf:2b:45:f9:f8:bf:86:2f:
7a:25:fd:df:b4:c3:c7:2f:f4:f5:44:33:7d:34:2f:
57:b8:3f:75:9d:e8:9e:2f:a8:8a:a9:4d:1b:7b:7a:
ea:e8:ea:4e:f4:1c:39:e3:45:1d:1b:b0:a3:42:55:
f5:54:15:bd:ac:0f:55:e7:b8:d1:df:66:36:5d:36:
dd:a3:f4:28:19:a7:e2:3f:4e:b4:e3:8e:d6:f1:07:
b9:80:3c:db:3f:50:9d:86:f9:8a:26:07:77:7f:6b:
c7:c5:27:8b:e1:f5:d2:10:f6:69:eb:a6:55:e8:ef:
cd:67:3d:76:5a:89:33:9e:9e:44:4d:f0:2d:10:2a:
02:4a:6c:2d:26:4f:63:5a:52:e0:1d:e2:9d:17:21:
39:d0:79:a6:54:30:ed:58:81:c9:2c:a5:7e:7c:c9:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:C7:19:0B:B4:C1:C0:8E:96:EF:55:06:72:AC:74:E7:3D:FC:4A
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:07:8c:5c:7d:25:e0:ba:67:57:de:44:74:11:e8:0a:26:
77:df:0a:39:85:da:8d:2a:ef:6a:11:28:49:78:ea:63:2c:54:
44:25:36:0c:ec:47:82:6c:b0:b3:0a:27:4e:28:fb:1f:1e:0e:
ed:ec:68:c4:e0:a5:17:40:d2:f0:c9:2f:a0:20:5d:e2:ac:31:
e8:d2:9e:9c:b9:22:a1:d8:20:9b:0a:1b:29:2c:42:67:24:05:
c0:12:b5:df:81:5a:ab:c4:8b:e5:49:d0:39:6f:eb:75:48:0b:
a3:bc:7f:d9:f2:94:07:72:ab:95:a4:72:44:9c:06:a9:0a:69:
1e:0d:01:7a:dc:69:1c:0f:c4:6c:7f:39:f6:b7:54:e0:10:26:
2c:00:65:19:26:71:38:c8:e4:09:ad:de:55:1b:b1:1f:95:85:
dc:49:ec:24:41:c9:a3:6d:8d:0f:d3:97:b7:46:4d:b6:83:eb:
37:7b:3c:a9:fc:63:5c:15:2a:5b:08:50:f8:2e:43:87:45:81:
3f:e8:1c:de:2f:59:55:12:3c:33:e1:23:b8:8a:c9:c3:0f:46:
40:9e:db:f7:28:a7:2a:b0:14:65:e1:a7:e7:9e:b9:39:05:f7:
52:3a:8d:17:69:a0:44:8c:21:19:98:e8:d7:82:33:e6:1b:7c:
2e:bb:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:39 2026 by rpki-client