
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: muu8cmKUIUgp++QDzzCLUdeaXiMzp//VAJceMYD6tqE=
Subject key identifier: 99:11:54:12:74:D3:FB:25:AC:18:C3:1C:33:8A:12:D3:78:11:31:23
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0155
Signing time: Sat 13 Jun 2026 01:28:46 +0000
Manifest this update: Sat 13 Jun 2026 01:28:45 +0000
Manifest next update: Sat 20 Jun 2026 01:28:45 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: OUu/e18d4WKE3+JWwPpxlv28o0EEpnI7OK+/IDQVnvU=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: 6lO6h2G77UVb/TYYp/IKbTb/elPRTlBLimPdGpXo2iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Jun 13 01:28:45 2026 GMT
Not After : Jun 20 01:28:45 2026 GMT
Subject: CN=6a2cb24e-6c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:92:41:cc:38:96:11:54:54:c9:a9:04:37:
bf:d6:45:51:b2:89:67:30:75:a1:52:b3:77:2e:51:
d4:ea:66:2b:e2:5d:6f:ae:4d:65:1b:04:a0:ee:68:
0f:d3:c6:39:fe:7e:a8:95:bd:9c:cf:36:09:8f:82:
58:fc:ea:90:81:15:ff:98:80:3b:93:a0:6a:64:97:
3f:35:83:72:94:53:b6:8e:d8:2e:62:4d:64:6e:c6:
c3:fc:a1:89:f5:46:73:16:88:75:5a:05:21:45:95:
86:f7:70:23:e6:f2:b2:6e:f3:b6:3e:b9:24:20:bc:
c2:c1:8b:cf:0a:c7:c6:e9:d9:d4:b6:ed:6c:eb:3f:
76:a9:1d:9d:7f:b2:93:a6:a0:ba:db:c8:cd:8b:8f:
e3:82:a8:b7:be:18:0c:97:cb:36:91:14:5f:11:40:
b7:5b:a4:e1:6a:e6:5f:3a:1c:b3:66:cf:9c:b1:b4:
0f:4f:a2:02:32:79:7d:a3:d0:bb:30:25:74:96:fb:
18:db:90:a3:4f:f1:88:9c:61:69:52:3a:d0:66:1b:
39:6a:2a:63:79:f8:6f:cc:91:5a:76:09:b6:7b:6a:
1e:61:ba:c8:51:ce:72:fd:25:aa:b3:62:04:ea:7c:
1c:05:4b:5c:fc:c1:56:27:86:1d:23:2a:a0:da:5e:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:54:12:74:D3:FB:25:AC:18:C3:1C:33:8A:12:D3:78:11:31:23
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:94:61:f6:76:5b:7d:8b:b8:8d:2e:6b:53:b2:0f:c4:32:
8e:74:82:fb:8e:a2:d8:80:59:30:3a:05:37:2a:9a:ac:48:4f:
74:b6:e6:b8:ed:ad:5d:40:7f:b7:df:f7:ed:b2:78:c9:11:3d:
55:60:9c:eb:2b:7f:04:34:2a:1e:05:4a:41:c1:34:f6:7b:92:
9a:94:72:f6:85:d5:d0:c7:00:f5:8b:62:c3:d8:43:72:ac:ab:
f9:fb:10:03:b4:ee:6e:c2:03:fb:70:75:b8:cf:50:de:de:0a:
e9:20:d7:8f:f6:80:e4:29:38:97:4f:c6:9c:dd:01:6c:7e:f6:
6a:5e:3d:89:10:58:e9:82:a4:d3:56:e4:37:c6:c0:25:c4:a1:
2d:7b:59:86:c5:93:c3:a6:ee:0b:22:3c:11:f2:61:7e:36:ee:
7d:c6:d0:7c:90:e1:53:c3:f7:cd:b7:26:83:69:f4:a8:aa:7b:
8c:b3:62:f6:b9:d4:ef:3e:c2:14:b1:43:44:1b:90:4b:fe:e1:
c8:0a:1f:50:57:42:a8:82:c4:a1:dd:5f:f5:cf:83:43:b4:84:
a9:22:4f:a0:69:82:f1:7f:ae:57:60:e7:da:de:6a:b2:c8:11:
f3:c8:ec:43:03:6b:49:e9:61:fc:9e:94:e9:68:f9:8d:88:95:
a2:00:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:11 2026 by rpki-client