
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
File: xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft (raw, json)
Hash identifier: 3tljwKFVHgjJfNu0sOsv+f0+j91+bgp8eIiyKEakPJA=
Subject key identifier: 5B:87:9A:B0:C8:B4:86:33:01:20:CF:30:36:86:0F:AD:4D:06:E8:10
Authority key identifier: C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6
Certificate issuer: /CN=A91AAF73/serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
Manifest number: 01FA
Signing time: Sat 13 Jun 2026 03:11:28 +0000
Manifest this update: Sat 13 Jun 2026 03:11:27 +0000
Manifest next update: Sat 20 Jun 2026 03:11:27 +0000
Files and hashes: 1: xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl (hash: t6pXvptwB1ByxUbUIiiCx98vjMu/Sj9/av2btk4vke8=)
2: 4B2F1F725E7811EE9307D234C4F9AE02.roa (hash: EcFjmxSDjXYlszuf2oD+q8KIZL69XyX6Am534xbF5Os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl
rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAF73, serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
Validity
Not Before: Jun 13 03:11:27 2026 GMT
Not After : Jun 20 03:11:27 2026 GMT
Subject: CN=6a2cca5f-ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:62:5c:7e:8d:7e:c4:f6:d0:4a:75:75:18:
cc:d3:20:2a:26:5d:00:6c:09:7a:bb:9e:c4:b9:68:
72:b4:b5:eb:6e:e7:94:87:80:35:f5:1e:8c:e4:ae:
87:be:71:fb:53:a5:05:3d:37:c7:20:91:2f:2b:af:
05:47:bf:11:d4:db:52:4f:f4:45:3c:0a:0a:79:1f:
64:14:81:97:5d:a1:3c:62:74:a0:06:c5:fd:19:df:
ea:ba:bf:bd:27:ed:14:27:75:3a:c6:84:e1:36:ae:
7c:37:be:68:a1:a9:fd:d0:92:ca:7b:20:a8:df:67:
14:e7:ef:63:ed:bb:dd:d6:b3:c5:b1:8f:88:7d:37:
a4:c3:9f:f7:cc:38:dd:10:60:d7:1a:77:ff:b7:59:
7b:41:1b:a4:3d:b1:dc:06:b1:8f:aa:05:c9:dc:75:
82:c7:ab:d9:15:ec:60:e4:ef:77:7e:3e:b0:f3:d8:
b0:3b:b9:e9:86:38:e3:a0:96:35:87:0f:a8:ec:54:
11:69:54:dd:a3:08:10:97:32:87:ec:d2:9b:14:5b:
3a:a7:80:cd:c3:29:41:a8:27:a5:e9:0e:c9:02:08:
b7:45:37:da:8f:24:de:ab:91:81:09:2a:6c:ea:57:
f0:da:62:15:73:29:7f:79:58:20:5c:78:61:56:be:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:9A:B0:C8:B4:86:33:01:20:CF:30:36:86:0F:AD:4D:06:E8:10
X509v3 Authority Key Identifier:
keyid:C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:26:71:07:43:20:92:f9:aa:9b:9d:56:a2:b3:fa:72:08:05:
b4:9f:5f:f5:90:30:59:c1:b3:14:4a:d3:dc:06:5e:e8:b0:b3:
dc:1b:f8:18:e0:21:43:0a:41:2b:16:5e:14:f9:4e:36:24:6d:
79:42:91:0f:f1:1d:8a:cd:f2:ae:6f:34:bf:7e:b6:68:86:56:
9c:fd:9c:1a:a3:b6:f5:a3:ce:39:00:a5:4a:90:1a:86:49:b9:
9f:12:bb:26:b3:d4:2d:72:e9:d5:0d:a9:86:91:82:e8:a8:12:
7f:28:5b:74:d6:57:6b:cd:9d:7e:06:33:07:86:d6:e1:da:ee:
5b:10:41:62:1b:68:e4:42:9f:83:7a:d8:ae:ad:8a:57:b0:de:
4d:68:d1:b2:52:38:a0:f0:52:22:aa:a2:d7:98:0d:fc:15:cc:
20:78:17:bd:f1:ef:c3:ad:e6:2b:8a:ed:a3:a7:35:c2:37:19:
48:ac:85:aa:12:84:10:13:2f:f8:c6:23:27:ff:0f:6f:bc:fd:
22:fb:21:74:ad:41:3e:c9:69:2f:b0:53:cd:fc:96:7b:ce:08:
7a:9d:f6:a6:38:17:1e:3a:e4:b2:ae:62:6b:5b:03:d4:11:c6:
72:3e:c6:6c:df:71:cd:86:9a:34:ab:14:17:08:55:a6:9e:f0:
40:3f:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:05 2026 by rpki-client