
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json)
Hash identifier: KcZ5VR77foZYDKAXdZHDEOn2mGXZDyNHSSRaGJSCV0c=
Subject key identifier: 8C:F9:97:C0:79:5E:9D:F9:BE:A3:3E:88:2F:BC:DE:FF:FD:65:40:54
Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
Manifest number: 01BA
Signing time: Sat 13 Jun 2026 03:54:48 +0000
Manifest this update: Sat 13 Jun 2026 03:54:47 +0000
Manifest next update: Sat 20 Jun 2026 03:54:47 +0000
Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: o9sLO7In0Bz75Ibb6oCTMc6V8MZDp+4jsDFpNt7ZJJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl
rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B
Validity
Not Before: Jun 13 03:54:47 2026 GMT
Not After : Jun 20 03:54:47 2026 GMT
Subject: CN=6a2cd488-0e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:47:fa:7d:f2:b5:8f:da:4b:97:a2:fa:8b:
14:34:99:d7:6c:c6:a5:c6:0e:e2:5a:e3:eb:33:9a:
1b:d8:a6:1c:ab:55:08:0d:16:44:50:6d:e2:ae:3b:
6e:65:25:42:91:bc:6a:0d:58:28:c5:22:df:ef:d0:
04:50:aa:34:77:4d:c3:ec:98:46:bf:48:1f:cc:55:
38:62:b6:f3:c5:04:4a:c2:e1:0e:84:ea:ae:8e:0b:
1a:9e:b0:9f:83:4b:30:c3:0b:f7:f9:ec:61:d6:1a:
fa:b8:9a:6b:6c:48:80:1f:45:db:3a:20:b1:77:40:
49:94:08:d8:2b:4b:88:f9:0e:10:91:2e:16:52:f6:
ef:e1:a8:88:3a:6b:ea:e1:40:16:21:1f:03:95:49:
07:16:0c:80:c4:ad:b2:29:4c:13:e7:4c:f4:f6:9d:
ef:9f:c0:27:ad:b9:4f:08:89:83:1c:bc:8a:3a:9c:
36:0f:d8:2b:f4:91:b3:17:6e:a5:f7:7c:39:fe:aa:
45:04:21:76:d0:ec:31:e6:70:2d:01:5d:8e:4d:61:
b2:4d:fe:66:f4:f4:a8:6b:45:f6:0f:56:98:3d:c2:
ef:ca:87:b8:5c:d7:db:56:b9:96:10:aa:f4:e5:a0:
2a:d1:ee:54:7b:db:fe:a4:be:34:77:e8:bb:8c:8f:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:97:C0:79:5E:9D:F9:BE:A3:3E:88:2F:BC:DE:FF:FD:65:40:54
X509v3 Authority Key Identifier:
keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:df:7f:a0:d0:2a:bc:18:82:ef:aa:c6:25:a0:ce:e7:8c:
0c:6a:38:55:f6:a8:ec:5c:cb:2b:76:1d:ae:cb:fa:a6:f2:f7:
f2:5b:5b:e2:f1:9b:ac:c4:12:cb:d5:af:eb:51:e9:54:c9:57:
20:5a:c5:bb:2c:ae:e4:8b:7d:2d:ca:e7:e2:1e:83:33:19:8f:
21:d2:5b:44:5b:00:e8:4b:07:5f:1f:d9:b6:bc:73:9a:c0:27:
fd:d7:60:82:f6:d7:1a:b0:20:9f:1e:e0:d2:ee:c7:82:8f:ee:
55:a7:95:e9:ea:95:f0:d3:ef:8f:20:ec:86:30:a7:95:fe:5d:
5f:80:b8:d1:ec:cc:66:ea:de:b0:de:36:86:05:52:c9:90:c0:
99:a3:e6:ce:27:f0:82:98:9a:24:07:85:e0:ee:30:0a:48:82:
02:cb:7c:c4:0b:97:51:bb:00:a5:22:05:fc:77:c6:b3:62:32:
08:c2:e1:f9:73:ba:a2:14:10:0f:9a:bf:80:19:0e:d2:75:a2:
68:f0:ea:a0:72:b7:9b:d3:3b:fb:ab:e9:ae:f9:2b:fa:2e:12:
a9:2a:29:85:85:58:82:41:43:a0:b0:4e:0a:af:be:c9:4c:eb:
1f:7e:65:d7:2b:38:21:ec:22:ed:8f:df:25:82:53:42:3b:7e:
46:6d:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:49 2026 by rpki-client