
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier: qlS681rei3MOb2ukhs5uzrTnJw2fvtkB7Df/mTYeKYY=
Subject key identifier: 0B:85:C1:56:0D:D5:9B:34:34:0D:BF:24:08:A3:EA:AD:09:AB:0C:57
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0ADB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number: 0A9B
Signing time: Fri 12 Jun 2026 19:37:08 +0000
Manifest this update: Fri 12 Jun 2026 19:37:07 +0000
Manifest next update: Fri 19 Jun 2026 19:37:07 +0000
Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: 7mEg8zT+9tpnDsBxE32+7PRi9tqLKu6fUFukwa0//IM=)
2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=)
3: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=)
4: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=)
5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=)
6: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2779 (0xadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Jun 12 19:37:07 2026 GMT
Not After : Jun 19 19:37:07 2026 GMT
Subject: CN=6a2c5fe3-2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:27:d4:8f:e4:2d:ed:ea:c5:4f:41:4b:97:
26:a9:4e:b7:42:7e:e5:f8:37:f6:1d:4f:87:93:48:
c1:45:76:4b:8f:47:88:51:52:8c:2e:66:c5:9a:47:
23:b2:72:98:5d:cb:f5:62:15:94:c8:78:11:b4:67:
44:18:0c:7a:78:33:af:fe:c9:b2:84:e2:46:3b:01:
8f:69:a8:6c:4f:ba:bf:d6:40:fa:2f:78:e8:c6:3a:
a1:fd:7a:fe:b8:90:48:65:b2:75:09:a8:a2:be:3e:
a1:a1:5d:dd:29:dc:20:e7:60:fe:6d:a1:77:59:d6:
c1:6c:52:68:bc:0b:ce:9d:55:0c:27:6a:d5:d8:4e:
2a:da:0b:73:fc:3f:3d:d6:0b:da:42:17:4c:58:c8:
1b:e2:b3:fc:07:c9:aa:f3:e2:15:70:d0:6b:44:9f:
9c:ad:66:e7:dc:aa:f7:f1:92:2c:58:10:75:1d:06:
f8:bb:9a:ca:09:92:de:c6:0d:9f:34:23:1a:c5:0b:
f7:7f:d3:09:54:fe:99:35:f9:44:5a:78:49:75:d1:
ee:07:a1:34:55:41:b2:93:ab:8f:b2:63:e3:86:a4:
7a:1e:98:16:32:37:57:94:10:99:9c:24:81:36:42:
1d:ec:98:c2:3c:0c:d5:5e:fc:4e:ea:77:5d:ae:3b:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:C1:56:0D:D5:9B:34:34:0D:BF:24:08:A3:EA:AD:09:AB:0C:57
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:84:26:df:86:60:fc:59:75:34:aa:44:b5:4f:96:0c:ee:c5:
5a:bc:3c:a2:84:fe:3f:12:26:97:ae:bc:62:e5:54:80:9a:5d:
e1:54:ed:d7:54:94:dc:d3:05:eb:af:99:0d:89:c6:b9:9a:4c:
3b:9a:c9:23:2c:21:c7:83:02:47:5b:76:58:68:26:a8:6b:44:
82:f1:7f:39:4d:d6:05:1d:54:cf:fb:3c:22:24:0f:47:5e:2e:
4e:5b:18:0b:3c:c7:d6:75:2a:b3:15:68:3c:81:a5:af:24:89:
de:d6:9b:cf:21:a0:f9:74:48:47:49:9c:94:ea:76:5e:99:22:
1e:0f:51:ee:78:03:79:a2:78:cc:c5:28:03:c7:52:f8:77:91:
f9:e5:8a:16:dd:7b:f9:80:29:c0:8f:7e:d8:bf:bc:90:c5:5a:
1c:1b:a6:0b:1b:45:df:4d:e7:9c:3c:da:7d:95:fd:2f:39:94:
93:19:29:64:c7:d4:8f:2e:0c:82:69:7e:e1:ca:52:21:4a:42:
f0:61:35:97:c3:0c:a2:7a:f3:31:22:84:2f:32:b6:cd:da:7c:
9f:93:5b:c5:42:4b:e1:d7:4c:9f:4d:6f:fe:b4:30:b4:e3:93:
35:75:40:4d:9e:9c:03:86:46:2b:bd:42:21:0f:49:ce:cf:78:
d3:ca:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:20 2026 by rpki-client