
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json)
Hash identifier: P3vXe0oaDaivU5SNr4FtOkkECX7ty+pNWcMtQyCTyvw=
Subject key identifier: 06:0F:C3:7F:8F:74:38:87:41:3E:78:53:84:9B:4B:21:36:4B:95:B8
Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B
Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
Manifest number: 01C8
Signing time: Sat 13 Jun 2026 03:46:34 +0000
Manifest this update: Sat 13 Jun 2026 03:46:33 +0000
Manifest next update: Sat 20 Jun 2026 03:46:33 +0000
Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: jl8poq6E46/2gav0tZpEBxDRzChC4ppgcLGcPjzSWL0=)
2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: oYkxtXccfNzhupGam+/pGKaAabTu5hknTCz4hIdu2D0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl
rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B
Validity
Not Before: Jun 13 03:46:33 2026 GMT
Not After : Jun 20 03:46:33 2026 GMT
Subject: CN=6a2cd299-7768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:c6:46:fc:f9:c8:21:b6:94:26:f4:c5:8e:
b4:9d:8b:13:07:f9:54:7d:a0:84:7f:b3:52:52:69:
8e:0b:85:58:df:4c:98:d2:63:a8:08:07:9b:e4:3b:
4e:2d:36:77:ac:98:d9:f3:47:94:45:21:31:ec:ac:
69:38:5b:6a:7b:b1:5b:5d:07:36:58:3d:f8:3c:c8:
cd:27:71:2f:36:de:3f:37:e1:c8:a2:6f:cd:61:76:
16:65:d8:e6:03:b6:26:05:24:e9:99:34:3a:53:c6:
a5:6b:46:31:68:18:8e:db:4b:cb:8a:7a:0a:ae:56:
72:81:7e:8c:4a:61:50:aa:cd:a3:c4:87:90:88:7b:
a2:c5:bc:c9:06:5f:6a:4f:89:b8:a7:83:75:92:5c:
e4:2e:f5:73:28:13:77:c6:b3:ed:47:9c:e8:e7:11:
1c:0d:2b:f6:c7:96:cd:05:51:02:f8:d4:77:69:f6:
e1:c3:2d:57:17:05:c7:6f:66:47:22:cf:df:3c:43:
70:55:3f:7b:84:95:66:86:6a:ad:80:e1:7d:2f:2a:
2f:21:c1:95:a7:c7:ff:3c:1f:0b:e5:88:be:1d:be:
65:75:ae:97:02:24:ca:46:8c:3c:ee:f1:bd:7b:23:
93:a4:34:f1:86:fa:7b:53:83:9b:bb:54:ba:d0:74:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:C3:7F:8F:74:38:87:41:3E:78:53:84:9B:4B:21:36:4B:95:B8
X509v3 Authority Key Identifier:
keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:19:f6:26:1e:19:07:f6:53:b6:70:6f:b5:df:86:cc:0d:
6d:78:4c:cd:7f:2c:17:db:a6:0c:85:e0:a5:15:fb:81:5f:92:
10:0e:be:bb:c4:8c:67:69:9d:5d:69:22:1e:bc:a0:15:e9:d2:
5b:47:40:db:24:0f:1e:89:6f:a9:78:2c:df:0b:7d:6c:b3:cc:
a1:ea:d3:16:9f:73:20:ee:1c:14:63:55:82:08:48:2c:14:70:
16:96:7b:94:d4:8d:36:9e:f6:b0:ad:d0:bb:f4:4e:47:82:2c:
13:46:34:dd:ff:44:3d:b6:da:a7:3f:26:de:dd:61:35:c7:55:
14:bf:7b:8a:d2:50:4d:f8:5f:31:a2:d5:aa:80:d0:61:66:b9:
24:56:6e:43:ef:c1:c8:43:13:c1:1b:cc:20:05:fd:be:0f:ab:
f0:8e:34:3c:45:fa:e5:f3:a9:c3:9d:5c:71:c1:fd:36:ab:23:
aa:fd:31:51:b3:78:54:31:29:0c:6e:37:9e:26:80:bd:35:d9:
8f:5a:f1:af:a7:0a:2d:98:c3:d5:10:7d:ce:99:dd:18:d1:d4:
02:c6:e3:3a:d4:37:f1:0b:00:ed:ba:de:a1:1f:1d:81:3d:df:
ab:1a:bd:7c:1f:ee:0a:1f:f8:23:d0:6f:d0:8c:43:bf:3d:35:
75:57:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:01 2026 by rpki-client