
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json)
Hash identifier: cXJu1r0/u1J0nEPGPjZqXnvD8309xY3uyjWFIF45OwU=
Subject key identifier: 25:81:A2:DE:94:9A:7B:01:9B:9D:64:95:91:5D:16:45:1F:3C:39:1E
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 04BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
Manifest number: 0476
Signing time: Sat 13 Jun 2026 00:18:39 +0000
Manifest this update: Sat 13 Jun 2026 00:18:39 +0000
Manifest next update: Sat 20 Jun 2026 00:18:39 +0000
Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: eqCUiP07r3cLCPs5lqiJU+uCKiZiAWiddGE0f9B3uTo=)
2: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=)
3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=)
4: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=)
5: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=)
6: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=)
7: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=)
8: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=)
9: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Jun 13 00:18:39 2026 GMT
Not After : Jun 20 00:18:39 2026 GMT
Subject: CN=6a2ca1df-66cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:3f:7b:46:99:d7:35:77:da:c8:fb:dc:65:
cd:c3:fc:d0:05:24:b8:b1:f4:bf:8b:09:e7:64:c8:
dc:7c:31:29:00:f2:22:e1:3b:d7:40:01:d8:29:0f:
87:60:20:1f:ec:19:12:73:04:08:14:2d:9a:1e:4f:
01:8b:36:3f:9b:a8:70:18:30:96:c4:ac:c8:7f:be:
27:98:3a:c4:f0:bf:4b:19:f0:6c:03:d6:34:96:47:
a9:8f:72:de:d8:f3:98:0b:0b:0a:b8:3d:af:90:3b:
08:26:96:19:c4:36:81:7e:73:38:ac:89:26:77:dc:
2a:54:3b:d8:89:47:1e:cd:0e:99:68:54:16:ff:31:
3f:fc:f2:12:1b:84:2d:01:46:06:ac:6f:fe:9d:87:
27:f4:fc:42:ee:ec:85:c5:45:af:ba:b2:87:a3:2b:
48:f4:d3:f1:05:7c:09:85:69:75:14:a2:de:40:a1:
b9:7b:31:20:79:d5:23:2d:0a:c5:d2:77:0a:f2:c3:
d8:9e:44:c7:5b:62:8d:2c:b5:cc:cf:3f:c2:69:47:
4a:26:65:bf:62:20:e3:62:bc:37:42:4d:50:3d:f3:
2f:1d:ca:0f:a9:9b:8f:2d:50:b1:01:5d:f1:c5:88:
52:61:2b:d4:93:8c:00:84:6c:3f:48:44:36:7b:a8:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:A2:DE:94:9A:7B:01:9B:9D:64:95:91:5D:16:45:1F:3C:39:1E
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:0a:3b:e5:96:80:a2:aa:1e:ed:54:dc:40:04:e0:de:8f:
46:cf:85:b9:51:6b:02:af:b1:57:ad:7e:47:d5:c7:f4:7f:87:
36:6a:a5:11:8c:f6:3a:91:0e:4b:8d:cc:ea:58:a0:d4:ef:e7:
87:f0:d1:a9:86:1d:e7:a9:33:c4:db:e1:96:8f:f2:fa:6e:a6:
3c:04:e4:32:fd:3d:49:e7:e9:2e:ab:8a:6c:da:57:88:d2:c4:
fb:72:bc:6e:a2:b4:b8:3d:29:d8:6d:8d:24:9e:9f:da:49:88:
79:8d:76:d3:4f:68:22:13:52:16:00:e1:f4:95:d0:1e:14:ac:
03:85:5c:36:a9:a4:bb:5c:23:22:55:bc:cb:e2:0a:a3:ce:b9:
35:5d:ac:ed:f6:e2:4c:e7:39:ec:d2:41:09:e8:ca:6d:99:4a:
c3:54:9c:aa:8a:ae:c4:bb:25:d3:d9:d8:aa:7c:6c:24:e6:10:
7a:c2:1d:99:01:6f:19:ed:43:17:0d:01:67:c8:b3:8a:02:73:
4c:92:a4:3c:e8:2d:f0:14:93:0b:1c:3d:4e:68:5e:f2:b1:90:
29:e2:76:11:bd:f0:a3:0c:40:36:81:14:b0:b2:8b:09:5b:93:
53:61:a4:9e:ee:4f:0e:63:5d:1a:c3:6a:0e:fc:fc:00:99:89:
6a:e0:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:43 2026 by rpki-client