
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json)
Hash identifier: 4pEc2a+VXhAOOc6mViljZRPd25oosZvJQNYMnx8tj60=
Subject key identifier: 3C:6F:A8:32:47:D9:3F:11:7A:9D:35:AF:66:8F:52:5C:53:72:4D:D4
Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
Manifest number: 0130
Signing time: Sat 13 Jun 2026 05:36:29 +0000
Manifest this update: Sat 13 Jun 2026 05:36:28 +0000
Manifest next update: Sat 20 Jun 2026 05:36:28 +0000
Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: hUmf9mnAKD7y12FWgdjQTSEuA2TtbKTJ3hjgM+gbyvg=)
2: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (hash: KKSESbqhU98WASzJOcVdGg55+wdN1l+Incegb07CJzg=)
3: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: uTJLxFWxmXVPmsyuMe7D4Y0DugrlFezuy8t+kMf4wQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B
Validity
Not Before: Jun 13 05:36:28 2026 GMT
Not After : Jun 20 05:36:28 2026 GMT
Subject: CN=6a2cec5c-cbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:fe:64:53:ed:4a:08:7c:9f:f3:03:98:ff:
bf:10:b1:73:16:0a:45:da:b6:dc:9d:03:3d:43:7d:
b5:57:14:f2:aa:fe:8a:f2:c7:67:3e:e9:61:25:01:
d5:26:10:e2:10:ea:d7:a9:2a:02:91:04:57:db:c2:
5f:c8:94:92:6a:36:c4:f2:f0:1e:43:cc:a5:30:90:
58:8d:a5:09:0e:a4:02:1c:a7:4e:1c:d6:7a:13:c1:
b8:cc:d4:54:b0:c9:bf:af:16:e2:ee:85:63:21:14:
fb:45:b2:ee:13:10:80:e7:90:b2:f8:38:3a:e7:11:
85:44:dc:36:a5:8f:db:55:da:e8:e2:94:28:db:fa:
43:11:dd:b6:83:4c:83:d9:72:f0:79:26:1a:5a:51:
78:f7:f5:ae:77:b5:0b:8f:52:4a:84:7a:4c:b5:7e:
66:39:42:82:0a:cc:f2:b9:d5:ae:76:be:aa:70:fd:
98:35:1a:84:a6:cb:5a:47:9e:09:14:28:71:49:0f:
7e:57:a2:c9:b7:47:b6:0a:7e:51:b2:f0:29:d4:2a:
28:93:f0:0d:c8:f4:56:fa:2f:3c:6c:07:8b:ff:1d:
79:5b:b1:a1:27:79:86:48:b1:de:fc:8c:c6:21:6f:
dc:d3:3d:7b:11:b6:10:14:55:c2:a7:c1:54:77:56:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:A8:32:47:D9:3F:11:7A:9D:35:AF:66:8F:52:5C:53:72:4D:D4
X509v3 Authority Key Identifier:
keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:5d:a0:4d:c9:df:76:68:61:3b:3c:7d:28:e6:10:cb:f4:
1f:27:d3:a5:8b:bb:f0:2f:76:1c:d9:74:b5:9c:b1:e9:16:93:
6b:41:16:89:bc:6c:d2:4d:c6:44:b5:c9:e1:f2:42:ff:36:9c:
47:4c:44:88:d7:c0:bd:3b:4d:b5:5f:02:96:36:f0:40:b0:e3:
f8:7c:33:e8:7c:11:e7:1b:12:30:23:25:1d:18:1c:4a:37:0c:
55:ae:d3:71:c9:48:00:25:c6:92:cf:bd:d6:cb:01:60:1f:8c:
e1:65:86:74:f2:99:34:9f:fb:e9:82:bc:7c:0e:49:06:4b:79:
40:5d:f9:63:ad:dc:cc:d5:16:ab:8c:41:ad:da:bf:a2:ec:b9:
71:f6:c0:36:a8:6a:66:30:87:21:64:21:d4:6b:f2:9b:ac:40:
86:70:eb:24:c4:e2:c3:4d:20:95:c9:c6:e8:7d:7c:11:41:e4:
da:12:97:7b:2f:85:ca:89:5e:6f:f7:2a:c3:04:d5:0d:3f:fb:
9a:5b:6f:64:9f:1a:36:68:08:9c:41:95:9c:0e:44:f7:66:30:
9e:e0:89:4e:16:00:51:50:07:bf:71:f0:ae:da:6d:30:e6:ee:
dd:c2:d9:ca:c1:9e:1c:66:c6:01:ae:f8:b6:9f:e9:05:46:de:
ea:2e:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:17 2026 by rpki-client