
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier: KdQbAQ4fFcvO7LwwIqY8P9VpJ9kTus6sV3APBQmFkW0=
Subject key identifier: 71:D0:38:F3:29:08:A1:29:45:78:C8:29:1D:F8:34:82:7D:7F:2E:DC
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number: 63
Signing time: Thu 11 Jun 2026 10:22:47 +0000
Manifest this update: Thu 11 Jun 2026 10:22:46 +0000
Manifest next update: Thu 18 Jun 2026 10:22:46 +0000
Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: TyUgRpKtvHGzTNxPJsx8jEjhOZuIQEmal0ZyP1yVkOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 10:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Validity
Not Before: Jun 11 10:22:46 2026 GMT
Not After : Jun 18 10:22:46 2026 GMT
Subject: CN=6a2a8c77-691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:e1:70:b5:4e:74:1d:80:2e:fd:da:b1:cc:
d7:b3:63:5f:27:88:2e:37:6e:ad:ed:3f:73:85:f3:
60:f6:e1:c2:0e:29:0b:bd:74:27:23:63:97:1c:b1:
3e:27:be:36:f0:6a:6b:2d:31:c4:b1:4d:6a:c4:a1:
62:a5:73:36:49:f6:eb:3e:bf:d1:a1:57:04:8d:93:
f1:2d:6c:66:9d:df:c1:7a:e3:90:30:41:2d:84:95:
6e:4c:55:96:c3:9b:ea:57:e3:03:da:be:fa:21:df:
e8:58:e6:b0:b6:15:1b:a5:96:64:05:da:93:cc:5a:
b5:ad:d4:10:bb:23:45:a1:5e:91:8d:d9:ce:c2:8b:
ca:d5:0f:93:71:86:64:75:16:2a:78:69:84:1f:b9:
bf:be:b2:63:d5:eb:5d:fd:18:fd:12:8e:bd:10:3b:
6e:54:ae:b3:c7:88:31:c9:8e:ae:e7:16:ce:b0:23:
4a:21:c1:7b:a6:3a:93:84:48:ee:5f:f4:96:27:80:
f0:7c:7f:c6:3a:76:56:3d:a8:fa:03:d9:fb:ec:8f:
11:23:9c:e0:62:78:74:de:36:32:9d:c9:fc:b8:df:
90:72:4b:32:39:54:4c:2b:a5:d9:f1:ea:04:dd:0f:
c6:3a:3a:ca:a3:ab:9e:b6:a3:4b:22:f8:67:be:00:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:38:F3:29:08:A1:29:45:78:C8:29:1D:F8:34:82:7D:7F:2E:DC
X509v3 Authority Key Identifier:
keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:9c:79:32:25:eb:65:ad:46:c2:94:8c:47:7e:4b:44:e7:0f:
ce:f6:12:12:c0:20:bb:c5:83:7c:a0:38:b7:fc:95:5b:a9:58:
db:ab:2e:aa:54:69:67:0e:83:5e:70:b4:e4:a4:c9:17:c1:96:
84:05:e6:3d:51:8b:df:0f:f0:f7:dc:9e:ca:93:f2:36:4b:48:
2e:01:6d:23:6a:13:f0:f7:04:78:c5:d3:c9:d5:f1:9b:01:85:
5c:db:9d:2d:1d:46:29:04:24:73:90:eb:91:51:24:4e:8f:e0:
c3:f5:97:a2:58:09:a3:bd:e2:aa:9b:99:55:9e:67:f2:38:f9:
bf:d8:d5:79:96:fc:a3:65:21:46:9d:f5:57:b9:a8:9f:ce:b0:
d3:41:f8:01:ac:db:67:58:47:52:eb:7d:e6:4f:16:90:5f:aa:
0f:70:fe:dc:63:21:7c:33:80:43:a7:a2:bc:a5:cb:c5:b3:cf:
e3:f3:a4:0c:e0:90:0e:76:ab:27:aa:a3:c1:7b:cc:5c:42:a6:
a2:94:a8:28:67:9e:34:9f:b4:3b:1a:20:3d:f8:0d:b8:d9:32:
db:83:76:8e:b2:bf:ce:57:28:6f:a2:24:e9:f1:a3:bf:5b:30:
02:33:1c:e8:3c:55:2e:f0:55:b1:67:d9:d4:a8:3d:75:ee:2d:
71:8d:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:14 2026 by rpki-client