
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
File: XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json)
Hash identifier: anhNJ+jDboPAZMBAj/0wftZWOc57kCpzZLD+Tbfxj+k=
Subject key identifier: 24:74:59:BD:A3:E1:3A:25:B5:CA:13:2E:9F:CB:70:93:2B:19:6F:4E
Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53
Certificate issuer: /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
Manifest number: 24
Signing time: Sat 13 Jun 2026 08:54:59 +0000
Manifest this update: Sat 13 Jun 2026 08:54:58 +0000
Manifest next update: Sat 20 Jun 2026 08:54:58 +0000
Files and hashes: 1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: +EnXSql3c6d4yyYkSegC8gDkEWYlG9yXp4MYLV83FRk=)
2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=)
3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl
rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
Validity
Not Before: Jun 13 08:54:58 2026 GMT
Not After : Jun 20 08:54:58 2026 GMT
Subject: CN=6a2d1ae3-2b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:70:f4:f2:2e:a9:ef:ba:80:53:98:fb:a8:
96:4c:7a:bd:ec:e9:5b:87:39:c4:1c:ee:b1:f9:df:
7c:47:75:b0:c9:52:c6:58:3b:6d:5d:74:f1:e2:36:
a9:cd:fe:7f:9c:69:0a:91:54:61:c6:d5:6a:c9:c6:
fc:52:6c:99:e8:93:76:29:5c:a0:0a:db:7b:1d:30:
f5:31:f7:17:7e:14:bf:c2:f3:4b:a6:61:68:9f:37:
fa:28:e8:5b:50:be:46:4f:c6:c0:ec:6a:59:b5:4a:
aa:41:01:06:4f:2a:11:0c:2b:58:4b:0b:ea:a6:97:
ea:a5:33:78:09:d8:29:6c:7e:e8:a5:39:5b:a3:eb:
5c:a3:42:a4:92:b0:92:0c:cc:68:b3:24:74:98:9a:
c6:9f:45:76:9c:6c:7f:1f:2f:72:d5:29:ca:c3:bd:
40:36:1b:03:b6:f7:52:43:39:a3:a2:ca:3d:df:bb:
82:c7:78:69:03:9b:a8:ae:70:98:f2:68:1e:b6:0e:
92:80:78:7d:1b:e1:a7:16:93:f9:a0:e2:d0:8a:0f:
3b:e7:a5:3a:dd:e3:33:5f:08:4a:1d:08:d1:2e:3f:
ee:29:d7:2c:02:9f:cf:a2:3f:a6:d1:19:90:2d:1b:
8e:47:2e:c5:47:c3:b1:f0:43:1c:e8:14:74:0e:e6:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:59:BD:A3:E1:3A:25:B5:CA:13:2E:9F:CB:70:93:2B:19:6F:4E
X509v3 Authority Key Identifier:
keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7c:81:06:22:09:21:3a:d2:ef:6f:4c:c9:de:d4:dc:1c:ac:
6c:b8:f7:60:1b:de:e2:e8:ae:7d:a1:fe:4a:e8:76:ac:b7:c4:
34:cd:59:6b:68:73:ae:ac:d4:55:60:c3:84:8d:8c:2c:d9:fc:
6d:06:74:76:7f:d3:60:08:1b:24:73:fb:21:b1:00:8a:69:55:
30:96:9b:3d:b4:75:c6:a9:b3:0f:b2:b0:7f:cf:f6:9f:12:64:
7f:f4:81:53:32:77:2a:6d:3d:99:a0:b2:36:0c:b5:3f:4c:59:
74:9b:ee:ca:82:92:c6:67:43:f7:bf:2f:57:0d:13:e8:c4:c1:
a8:ee:89:7b:35:1c:b1:d9:f5:b4:db:ba:80:9f:d2:f3:7c:a2:
fa:85:b6:53:6c:1f:5f:aa:c6:e4:2d:83:22:ef:01:ea:ed:01:
de:19:a2:9b:f3:61:cf:32:68:c8:cf:2d:a0:6b:92:66:f3:4c:
b2:4f:e5:2f:dc:1c:79:7a:16:7e:65:0d:95:f1:69:15:7f:5c:
8f:af:5f:cb:48:95:5b:3f:5d:b8:6e:c8:f5:32:e3:50:d4:d6:
a0:b1:cc:a6:0d:96:e7:4f:3d:df:ba:d4:9a:b3:a3:a2:36:5b:
7d:51:bc:5b:da:8b:66:33:39:44:7b:e7:8f:26:02:9b:8b:40:
f5:42:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:12 2026 by rpki-client