
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft (raw, json)
Hash identifier: cUHsfDY+n0QXcNH9cf4V0J0hEeU8uRoAKd2PgNzfCEs=
Subject key identifier: 58:1C:A7:E5:BB:7A:DE:EF:42:CB:8F:48:8E:33:59:76:E4:9A:F4:38
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
Manifest number: 6C
Signing time: Sat 13 Jun 2026 07:59:16 +0000
Manifest this update: Sat 13 Jun 2026 07:59:16 +0000
Manifest next update: Sat 20 Jun 2026 07:59:16 +0000
Files and hashes: 1: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl (hash: FJfdJzqKLmr2Aelxc+xs3ctTiVo/zLwHFoWVlWvpw/U=)
2: 585ECA9EC6D111F095FA7F7AC4F9AE02.roa (hash: ZeWmCmeKG6YzJDVsPwaISvsGtpek246l3XjiF4Hx9xE=)
3: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (hash: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=)
4: E2F80382E56711F089CF515C3D6F56BC.roa (hash: jiyUxTwVRZsLVxG/BHfJuLNYZSHLDV9HZEQMtvvZ//4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Jun 13 07:59:16 2026 GMT
Not After : Jun 20 07:59:16 2026 GMT
Subject: CN=6a2d0dd4-c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:96:34:6f:bd:db:fa:62:94:2d:19:9f:02:
48:6d:33:8f:51:8d:a6:0c:46:64:25:c6:5e:9e:d2:
e0:da:ec:97:34:0f:f6:4f:0c:36:a5:6c:f2:93:bf:
30:d2:30:e0:90:f1:14:ff:bb:08:36:0e:47:bd:bd:
1c:e1:59:0b:fc:78:8e:a6:c5:34:a4:6f:99:63:f6:
da:9e:e9:6e:95:cb:8d:e1:24:fc:03:dc:97:15:09:
8e:db:d5:c6:8c:ce:45:93:68:11:da:91:54:24:d6:
8b:2e:3f:49:ac:b6:47:97:9a:f1:5d:16:7d:ec:fa:
a3:e2:a0:51:b1:df:5c:4a:65:7d:4b:06:e4:8a:32:
c9:d2:3f:fb:b0:c6:55:3e:d7:a1:89:a2:22:c9:af:
46:a2:d2:7b:10:2d:bb:4b:e4:12:13:f8:6a:4b:61:
0d:a8:5e:90:40:f8:01:60:93:b7:3b:69:5e:50:06:
7a:c9:90:43:1d:ef:46:ed:3d:92:dd:bc:f0:b4:bd:
34:32:cd:72:c4:7e:8a:6a:58:17:79:e2:df:c2:42:
9f:c9:07:4b:0e:3f:21:8d:fc:0c:b2:83:a2:04:ba:
b8:83:ad:8e:ef:c1:14:f6:cd:e5:f8:a2:9a:5c:94:
d0:1d:ef:0a:90:9d:d5:7a:d1:2d:d9:ef:0c:e6:89:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:A7:E5:BB:7A:DE:EF:42:CB:8F:48:8E:33:59:76:E4:9A:F4:38
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:d0:84:6f:f7:0d:ae:e7:92:85:d5:87:7d:bf:61:7b:e5:
58:57:20:3b:98:41:0a:1b:86:4a:8e:09:e1:db:ae:5a:5e:9c:
84:8f:f4:57:7f:c8:b5:c1:ab:46:64:d6:76:2f:77:af:8a:4a:
60:78:2f:7a:5c:ce:63:c1:78:b1:82:07:21:d7:2c:3d:34:8b:
70:bc:8c:7e:a3:ef:b6:83:cc:17:55:cb:08:75:ef:13:d1:0c:
a1:d7:2d:cc:ab:a1:c2:00:ae:8c:f1:06:2d:3f:fd:90:20:3d:
3f:46:65:d4:c4:ab:ea:88:43:93:22:93:52:7b:bb:2f:1a:fc:
3f:99:e7:58:cc:4f:51:b1:e7:3e:90:05:7b:e5:17:de:16:e8:
55:16:7e:80:2a:72:5c:88:aa:8e:e2:7b:a7:a0:fe:76:0a:b9:
c5:94:82:e2:bc:56:f2:8a:a3:25:3a:0e:c4:48:53:29:a6:17:
7f:5d:ee:ff:11:ba:6d:f8:1f:ad:73:14:a3:60:e9:ea:af:ba:
5e:62:bb:ba:54:f9:b5:78:8c:55:3f:d6:ba:23:75:a4:2f:71:
c2:25:e4:78:7a:04:6f:ea:70:37:7b:99:7f:87:cc:e5:a6:7e:
75:11:c0:48:71:29:48:99:bf:24:1b:6a:22:c5:e3:e1:a6:c5:
1a:df:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:23 2026 by rpki-client