
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json)
Hash identifier: pn+XS3sTJ9Pkp7mJnnbHiO3dpn4masATx9gQHwNU5M4=
Subject key identifier: D2:62:C7:48:75:54:2E:DB:7F:A2:FE:73:1F:76:2D:66:BC:AD:36:3E
Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F
Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
Manifest number: 0160
Signing time: Sat 13 Jun 2026 05:01:24 +0000
Manifest this update: Sat 13 Jun 2026 05:01:24 +0000
Manifest next update: Sat 20 Jun 2026 05:01:24 +0000
Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: rkPX3ZCMNRqazXKK3PJCMDNypR5H4yEd0u6pLAlLLME=)
2: F0FCC9ECABF411F0B9E4F837C4F9AE02.roa (hash: yjLxdwzIuckVEpvjPtBFZMr56OhqZEN8C8fQw3Xhxos=)
3: D956F03AAB0211F083CD7E11C4F9AE02.roa (hash: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl
rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F
Validity
Not Before: Jun 13 05:01:24 2026 GMT
Not After : Jun 20 05:01:24 2026 GMT
Subject: CN=6a2ce424-af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:72:e7:cf:36:48:45:a4:40:65:d3:a6:be:
80:ca:9f:98:9d:9d:1b:3a:8d:15:b4:dd:0e:81:38:
10:db:e4:44:08:4e:19:9b:51:24:a7:40:af:d4:bc:
8f:74:12:de:42:e4:7c:54:66:ea:da:76:ff:67:80:
92:77:bd:f5:f6:c0:e3:43:55:a7:66:6c:ab:3e:3f:
99:c4:4a:88:8e:4e:e5:06:a5:b0:44:3b:d5:c7:ef:
e0:11:f5:28:40:32:1e:68:cd:15:f6:88:f6:b3:0d:
fa:22:ec:31:04:a1:3b:c5:65:e8:7d:95:06:99:04:
94:d2:da:10:71:cd:fb:f1:32:b2:48:ec:76:36:e4:
b5:f5:97:dd:5c:d9:b9:97:2b:d1:e6:fd:b4:ed:37:
27:ce:48:4d:f4:ec:d5:5c:e4:2e:e6:d9:8e:92:ec:
4b:76:2a:59:67:70:e1:80:97:4a:27:df:39:50:4d:
fe:e0:de:bb:eb:9a:d4:86:54:46:c9:b4:1f:4e:f3:
12:c3:3e:54:d5:b3:5b:d3:3a:22:76:bc:58:6f:80:
73:e0:1b:e2:8f:28:a4:77:4f:99:92:50:6d:be:82:
39:16:49:24:d4:0f:50:f3:0b:0c:ec:e0:22:f0:14:
f8:3c:3a:ce:be:be:2f:ce:67:0a:06:84:ec:51:5e:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:C7:48:75:54:2E:DB:7F:A2:FE:73:1F:76:2D:66:BC:AD:36:3E
X509v3 Authority Key Identifier:
keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:37:b0:50:1e:dd:72:66:f9:bb:1b:5b:ad:88:86:5a:3c:20:
7f:4a:8d:e9:aa:58:83:6d:51:00:28:77:f7:43:2e:2f:80:bc:
58:57:80:52:83:41:7e:de:6b:b4:61:d9:b0:c6:8b:8e:df:6d:
60:a4:11:41:29:ad:74:32:a4:c8:6e:00:7c:23:a7:03:fe:8f:
4d:d2:cb:e8:25:ad:77:02:91:7f:3d:52:57:67:3f:cb:ed:33:
35:66:e2:11:f4:b7:00:a8:e0:64:b9:97:f0:be:58:fb:52:41:
15:eb:ba:dc:9b:7a:7d:63:4d:3b:fb:24:13:54:e8:ae:e0:30:
0e:f0:b1:cd:19:31:22:31:3b:a6:82:e4:97:80:4b:ad:ce:4a:
08:1b:3c:c2:a6:b3:04:05:92:ce:30:0a:72:84:a1:99:ce:a4:
23:18:fe:0c:e9:19:57:19:2b:f5:ea:9e:9a:26:e3:8f:47:9e:
8f:da:41:51:0a:4b:99:3e:17:3e:2b:ae:f2:b0:59:fd:a0:6c:
6a:ec:42:c5:a9:3c:d5:a3:cd:09:64:06:0a:b6:8f:c5:22:81:
f0:61:66:01:04:1c:ac:8a:81:cc:b4:29:2e:58:50:b6:b9:20:
e8:da:d9:35:b5:07:de:bc:96:c1:4d:08:aa:21:e2:43:fe:64:
fc:a7:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:49 2026 by rpki-client