
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json)
Hash identifier: tAljHGz5RiiqSEttwKTURJD9OqvKOgeIj3Y47lP+kdY=
Subject key identifier: 6A:73:5A:42:DF:F3:33:66:64:82:49:67:79:3D:5E:54:93:5F:E2:AE
Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Certificate serial: 0669
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
Manifest number: 064C
Signing time: Fri 12 Jun 2026 22:46:35 +0000
Manifest this update: Fri 12 Jun 2026 22:46:35 +0000
Manifest next update: Fri 19 Jun 2026 22:46:35 +0000
Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: 44zKG13h0j5mgmccYfIvKlJbQCRiVaxNXbzGHMMPryE=)
2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: 7YGEH26/VxaZx42ktq8JCfF1YkYo6OxRUmmxiiA6G3g=)
3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU=)
4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: rD15pka7RGN6Dr3Q8e78ui79TCm39qYtp73M6ru8354=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED
Validity
Not Before: Jun 12 22:46:35 2026 GMT
Not After : Jun 19 22:46:35 2026 GMT
Subject: CN=6a2c8c4b-7307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:e4:c8:83:93:3b:f5:d4:27:77:e6:49:e5:
3d:8c:9e:af:f0:eb:bf:7c:1c:70:60:0c:00:48:7c:
ff:a4:56:99:bf:60:1c:47:ce:3f:2d:bb:90:3f:f7:
4b:f6:6f:7d:02:95:2a:22:59:b1:89:de:e8:16:d7:
cf:2b:56:b7:5a:47:fa:e5:3a:d8:e9:11:d2:ba:5d:
e3:d2:48:de:56:f1:73:34:28:b4:00:3f:99:ee:8b:
65:b4:57:83:08:81:20:f4:fa:d2:b0:8d:04:86:fc:
c0:7e:17:95:de:a2:b9:50:94:88:63:d5:c6:ad:46:
13:64:ec:20:33:12:86:e5:4e:5f:82:1d:58:0d:3e:
72:b1:7c:3b:17:6e:13:04:5f:39:1f:1e:13:4e:d0:
67:36:8b:84:c7:2a:b4:45:75:a6:0b:28:da:3e:9a:
b2:ac:c9:35:8a:4d:02:f5:a0:0b:a7:5c:2a:88:6a:
1c:5b:f0:fd:d1:6d:5a:49:f4:6d:bc:cf:b3:b4:6a:
ee:98:18:0c:6f:65:19:c1:9f:e8:da:98:7a:ac:84:
ea:15:ae:ed:8a:59:d4:05:ee:a0:27:b0:f3:d4:58:
e5:a9:48:79:f1:fb:7c:40:e9:6c:1a:ed:fb:00:56:
21:75:d2:a1:0f:70:53:d2:65:68:fa:a3:8f:9b:6d:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:5A:42:DF:F3:33:66:64:82:49:67:79:3D:5E:54:93:5F:E2:AE
X509v3 Authority Key Identifier:
keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:5f:4b:a5:c0:08:71:fb:f9:79:77:ac:af:ac:ad:70:e6:2a:
9a:25:f7:ae:22:2e:23:ac:62:80:32:a6:ed:9d:fe:e5:76:cd:
e5:5a:ed:5f:ab:43:c2:a3:81:f3:8b:e0:4c:fe:a9:d4:f0:35:
b5:1c:68:b1:05:af:06:84:81:62:34:99:ed:3c:f8:4f:77:6b:
bb:44:c8:bc:99:13:fc:2d:2a:12:3d:11:c2:af:2b:d8:24:2c:
8f:20:f9:6e:9b:1e:6f:cc:ea:63:e9:1b:e8:43:ab:d9:10:43:
fe:9f:cd:f5:1d:07:ac:e4:0e:2c:6e:05:c0:d9:05:e2:8f:12:
ce:09:27:08:19:11:04:da:05:2b:05:00:ab:0c:c9:d1:0d:1d:
f3:9d:d5:4e:5a:6a:20:23:ea:36:ee:a0:1a:8c:72:c2:ed:06:
68:74:ef:63:d7:a6:68:61:89:f1:b1:9f:5c:03:84:02:5b:c8:
fc:98:d8:8f:ac:0d:b9:14:29:51:7d:29:7d:12:29:0c:07:6d:
4c:9b:7e:4f:8b:69:49:93:09:9c:d4:7f:31:89:b8:b7:94:2c:
93:d9:b4:33:06:f6:ae:99:cb:ce:dc:c5:f5:0c:cb:4b:f8:fb:
9d:72:e3:cf:05:63:97:35:47:8b:07:f3:54:6c:8c:82:2a:5c:
e2:d9:37:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz
MzcxNzcyRUQwHhcNMjYwNjEyMjI0NjM1WhcNMjYwNjE5MjI0NjM1WjAYMRYwFAYD
VQQDEw02YTJjOGM0Yi03MzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzfkyIOTO/XUJ3fmSeU9jJ6v8Ou/fBxwYAwASHz/pFaZv2AcR84/LbuQP/dL
9m99ApUqIlmxid7oFtfPK1a3Wkf65TrY6RHSul3j0kjeVvFzNCi0AD+Z7otltFeD
CIEg9PrSsI0EhvzAfheV3qK5UJSIY9XGrUYTZOwgMxKG5U5fgh1YDT5ysXw7F24T
BF85Hx4TTtBnNouExyq0RXWmCyjaPpqyrMk1ik0C9aALp1wqiGocW/D90W1aSfRt
vM+ztGrumBgMb2UZwZ/o2ph6rITqFa7tilnUBe6gJ7Dz1FjlqUh58ft8QOlsGu37
AFYhddKhD3BT0mVo+qOPm20v4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpzWkLf
8zNmZIJJZ3k9XlSTX+KuMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF
ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB
T3drMEdUOWhfRzR6Y1hjdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU19LpcAIcfv5eXesr6ytcOYqmiX3riIuI6xigDKm7Z3+5XbN5VrtX6tDwqOB
84vgTP6p1PA1tRxosQWvBoSBYjSZ7Tz4T3dru0TIvJkT/C0qEj0Rwq8r2CQsjyD5
bpseb8zqY+kb6EOr2RBD/p/N9R0HrOQOLG4FwNkF4o8SzgknCBkRBNoFKwUAqwzJ
0Q0d853VTlpqICPqNu6gGoxywu0GaHTvY9emaGGJ8bGfXAOEAlvI/JjYj6wNuRQp
UX0pfRIpDAdtTJt+T4tpSZMJnNR/MYm4t5Qsk9m0Mwb2rpnLztzF9QzLS/j7nXLj
zwVjlzVHiwfzVGyMgipc4tk3mw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:55 2026 by rpki-client