
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json)
Hash identifier: UXYKR0tQ87DmviiKftuvu3L0AqX7rg6Q1K/BtnNrqYI=
Subject key identifier: 1C:D8:03:1A:C0:9D:AD:BB:1D:64:B7:78:9B:EE:08:0C:B1:83:82:DE
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial: 0914
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
Manifest number: 0904
Signing time: Fri 12 Jun 2026 20:19:49 +0000
Manifest this update: Fri 12 Jun 2026 20:19:49 +0000
Manifest next update: Fri 19 Jun 2026 20:19:49 +0000
Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: imxkplP1tEaeEPkgL5hxIdLyO8gY6u6DhzePs0V5AKg=)
2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: x5+raeLBFBsuJLXzYfMJr0ORy85GDM9eQZw+pvlyKEo=)
3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Validity
Not Before: Jun 12 20:19:49 2026 GMT
Not After : Jun 19 20:19:49 2026 GMT
Subject: CN=6a2c69e5-be30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:ee:33:25:6a:28:ea:43:3e:fa:05:7b:f7:
df:d0:e5:d5:d4:b9:83:b2:f5:55:7f:bd:ba:d5:c7:
7b:6b:af:bb:fc:af:44:ef:4a:da:1f:e3:5f:6d:ce:
35:6a:59:2b:ab:0f:08:eb:25:78:34:fe:38:69:da:
1b:ae:fa:46:1c:4e:bb:db:71:1b:bb:c2:59:0a:0b:
f3:0d:79:85:ee:be:f9:b8:46:2c:8b:7a:16:09:26:
ac:2c:13:9a:c8:99:83:e2:f7:0e:14:f6:d2:85:0b:
b9:7a:35:5e:aa:2c:d2:3f:c1:01:f8:00:a2:2d:8b:
f9:59:46:d5:55:bb:65:c1:06:57:9c:cc:dd:7a:cf:
fb:22:c0:e1:2a:45:6e:ba:05:09:75:da:30:f0:ee:
47:90:52:28:a1:ee:d2:8e:f1:57:81:d4:e5:9d:c8:
b3:ba:72:dc:7c:ff:96:65:f0:6c:3d:c5:a8:1b:51:
4b:32:48:3b:a9:fa:0d:1e:36:c6:33:bf:be:7e:a8:
30:d1:81:15:df:38:38:55:cf:10:e7:d0:eb:5e:bb:
a2:bd:b2:a4:eb:6a:4f:ed:2a:82:ee:fb:2d:09:ec:
76:c3:60:68:27:bc:80:b4:5d:24:cd:eb:02:3d:d9:
26:a0:c2:02:8a:6c:22:b1:66:e5:82:b9:80:17:2c:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:03:1A:C0:9D:AD:BB:1D:64:B7:78:9B:EE:08:0C:B1:83:82:DE
X509v3 Authority Key Identifier:
keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4b:d8:c2:57:43:58:13:91:54:e9:02:37:50:cf:e1:13:e9:
70:ba:e3:13:23:f0:94:3b:95:14:e5:f3:51:e2:72:44:88:8b:
1a:69:b5:19:95:83:91:60:9c:0a:98:3f:1c:6f:7d:c0:79:2e:
23:54:b9:e2:dc:0d:89:13:bd:d7:34:c3:46:75:3e:6b:f3:94:
4a:2b:b8:9c:b4:f9:0e:a6:07:4b:54:8a:c4:89:88:73:db:73:
a3:9a:dd:bb:97:d0:7a:2d:ac:c6:2d:4b:ee:6b:90:16:6b:d5:
ec:97:29:01:f4:6e:72:8d:19:8d:9b:53:92:8f:62:a6:b4:02:
85:99:71:15:26:48:34:53:10:01:95:6c:67:50:50:90:3c:1b:
cf:e2:87:99:c5:1b:45:46:ea:61:0c:2a:77:97:97:51:f0:49:
35:c5:e5:99:fb:ed:8b:30:9a:c0:89:d1:04:68:b3:7e:f4:76:
1b:3a:29:cf:1a:e5:bd:ac:d1:01:2f:c5:36:9e:e9:0b:a2:f8:
ae:d4:6a:51:6f:c2:38:28:7e:7a:34:b5:03:49:de:f8:88:fa:
7e:b6:70:4e:96:f3:f6:2b:a5:a5:99:41:ba:2c:cc:d7:5b:0c:
10:a0:77:0b:34:de:49:4d:07:2f:a4:1c:1a:e9:1e:45:bf:e3:
c1:cc:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:18 2026 by rpki-client