
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier: yyQYaJfQimVDyWVIr9qdxF/kh1RbsdsSCmF0lLo9Mdc=
Subject key identifier: C0:18:B3:64:92:98:88:BE:AD:23:74:84:86:4C:2D:0F:E2:D9:92:52
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 1122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number: 1112
Signing time: Fri 12 Jun 2026 17:14:41 +0000
Manifest this update: Fri 12 Jun 2026 17:14:41 +0000
Manifest next update: Fri 19 Jun 2026 17:14:41 +0000
Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: o9s2WRaGCS9LRuucQjAP6yeyLhdiG8WHAtfx1fpS3gY=)
2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=)
3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4386 (0x1122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: Jun 12 17:14:41 2026 GMT
Not After : Jun 19 17:14:41 2026 GMT
Subject: CN=6a2c3e81-f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:72:66:80:ac:d1:cf:ea:41:84:6f:17:ca:
ba:0b:59:ed:be:b9:b6:b4:b7:4f:e6:7c:09:ba:fe:
71:15:5a:27:e4:6f:bb:24:ec:49:da:96:1c:20:fa:
d6:a0:6d:e6:6b:92:d3:c2:f2:4b:2c:b1:49:91:af:
e0:cb:16:d5:b8:b0:cf:59:cc:a8:f2:c0:40:df:e3:
bd:49:50:f8:46:b2:21:14:31:52:e9:7b:90:59:e4:
07:cd:cf:f5:25:53:2c:2a:6a:1c:49:c0:cf:27:2b:
a8:1a:5a:28:23:e7:1a:21:43:7f:e0:ba:cd:5a:48:
8f:db:dc:75:78:33:68:2e:d7:76:0e:5d:1f:d9:d5:
57:ed:0d:c8:8e:c6:ed:f2:17:6f:1f:15:3e:a7:67:
dd:de:ff:ce:ae:ae:0d:73:91:9b:ef:0d:22:9c:48:
b3:51:c8:6a:75:85:71:87:45:2d:4c:c1:f0:84:d6:
ee:95:18:43:38:e8:12:95:b8:d8:86:21:28:42:c8:
f0:65:1b:19:2b:40:2d:46:e9:14:1a:10:e8:76:c7:
8f:b8:0b:44:57:b0:63:65:79:c1:0e:25:2d:e2:17:
b1:ed:d9:0d:b8:2c:8e:8f:37:81:35:ad:af:de:38:
80:39:f3:b0:ae:20:a9:46:dc:1e:4b:85:8e:e7:d1:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:B3:64:92:98:88:BE:AD:23:74:84:86:4C:2D:0F:E2:D9:92:52
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:6c:0d:80:f2:91:e2:c4:dd:01:70:7b:90:ab:ad:6c:ac:
63:08:e5:ef:63:d9:e5:a9:df:57:4c:87:d8:9a:9d:83:b7:29:
2c:c2:9d:01:22:35:4f:68:b5:ce:63:17:ed:ab:47:a2:68:aa:
a5:90:0c:5f:b4:a9:92:74:c7:fe:ab:a2:16:35:70:3f:d9:e3:
a6:97:6b:84:ea:1c:3d:ca:09:e1:ea:a5:c9:00:6f:38:02:59:
63:2e:d9:57:f7:07:b1:4c:90:85:72:5c:0d:41:01:e9:87:2c:
a5:18:db:37:dd:3c:2d:8f:59:b1:8b:62:f5:f8:2d:6d:20:f3:
e2:0f:7c:0b:53:11:cd:d8:f4:dc:dd:ec:ae:2a:83:69:35:6b:
d9:98:c4:e4:f6:64:45:21:3f:3c:e6:61:77:1c:f6:50:97:f4:
4d:87:e9:24:d7:b8:f6:2e:e5:b3:02:7e:87:c9:c1:13:82:fa:
99:d2:81:20:f9:ab:b7:f6:58:9e:01:b0:94:1e:45:17:04:f6:
7c:c4:3c:4c:a8:f9:ad:8d:ae:c4:fd:51:f5:74:1d:47:dc:c3:
40:54:0a:4d:15:bf:3d:83:0f:3e:75:9b:43:52:b3:92:94:fc:
fd:46:96:b7:e9:97:0d:28:d5:b7:2d:96:6c:c1:86:d8:08:c2:
0f:88:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:41 2026 by rpki-client