
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier: 17I3RDa8cEkDC/viL3HJN1DLGMaX0tCofd7yv0Cqjvg=
Subject key identifier: 15:01:5E:1D:CC:65:92:2B:10:E0:78:B5:09:93:E9:6F:E4:BE:EA:C4
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number: 0702
Signing time: Fri 12 Jun 2026 22:09:00 +0000
Manifest this update: Fri 12 Jun 2026 22:09:00 +0000
Manifest next update: Fri 19 Jun 2026 22:09:00 +0000
Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: jiRfnkwjpI9CUPdQOQXY8rlUXvKW1FTJppUTYjoq/GY=)
2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Validity
Not Before: Jun 12 22:09:00 2026 GMT
Not After : Jun 19 22:09:00 2026 GMT
Subject: CN=6a2c837c-537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b9:1c:0a:97:7a:10:77:f2:60:5f:9c:97:c7:
1e:62:e8:50:ba:16:8a:4c:80:48:cc:73:90:64:d8:
84:dd:54:81:af:77:75:3e:5d:78:3e:97:84:b9:a5:
67:1f:59:be:66:b7:41:c9:d5:63:4f:4e:8c:63:83:
c3:d8:ad:44:b4:c5:17:c8:d7:65:98:9d:ec:d3:bf:
3a:3f:4c:71:25:7c:fe:c2:ed:82:cc:b7:f7:e0:2f:
25:57:1c:cf:08:6d:05:7c:ba:58:9c:46:0f:cf:43:
b6:1c:d8:a9:7c:cd:e1:4d:2c:37:8c:ad:31:d8:ba:
49:92:a0:a7:db:68:e7:ed:7c:d0:16:e5:8c:61:a0:
d8:81:57:c5:a0:bc:07:44:b9:e5:7d:dd:97:54:da:
63:77:47:db:0d:7c:cc:2e:86:ad:e4:b0:5e:ef:a2:
fc:b0:6d:d8:e1:8d:05:69:d5:2b:bd:13:7f:c5:8a:
70:03:75:3e:30:50:54:ae:3b:f8:0f:9a:54:0b:ca:
25:4a:0b:e6:7b:40:fd:0b:9e:cc:71:f2:84:17:83:
9b:3e:2c:01:2a:83:df:20:f7:11:04:5f:8e:da:2d:
1f:50:16:8a:af:18:ac:dd:b6:2a:be:43:42:92:7c:
86:48:6a:4a:67:e7:a1:22:ee:13:54:f2:7f:66:f9:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:01:5E:1D:CC:65:92:2B:10:E0:78:B5:09:93:E9:6F:E4:BE:EA:C4
X509v3 Authority Key Identifier:
keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:83:54:fa:e8:49:b3:c0:d8:05:68:ad:f3:f1:87:91:39:
6d:11:52:64:da:a2:26:0d:b4:8f:18:ee:3b:7e:83:28:9d:ff:
07:85:0f:1a:8a:75:cb:51:02:89:3f:45:6a:63:3d:07:cd:64:
a1:39:fe:eb:3f:dd:80:0d:a0:b5:70:32:0d:cd:ef:a0:2d:ca:
f5:2a:25:ad:20:3c:6f:f5:f8:68:7c:ec:d2:41:d0:2b:63:5a:
d2:62:7c:54:e1:95:0e:7b:a1:fb:76:7f:c2:ff:05:bd:29:85:
bc:70:75:38:99:8d:e4:b3:c0:26:06:fe:61:4d:b6:9a:c3:2e:
90:19:7c:6e:cb:18:4b:50:92:46:36:58:13:61:0c:d2:84:ba:
06:4e:92:cc:87:de:21:94:09:3a:9f:bb:78:30:6e:f8:74:63:
ca:79:8f:c6:99:a2:9a:6c:4d:0f:17:dc:c6:b9:42:48:53:4d:
61:5c:42:63:a4:e7:cc:f6:41:1e:a1:0c:5d:ef:93:76:2f:41:
c7:93:74:a6:7f:23:66:5b:bb:f3:ee:c1:e2:92:00:60:f2:6d:
0b:1b:53:67:96:63:9f:f5:f7:2c:50:23:1d:74:1f:b5:3b:74:
41:67:99:f1:c3:8e:45:db:c3:5c:da:25:d9:2b:91:3d:b4:6a:
88:87:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:40 2026 by rpki-client