
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: QMRO1niwD7tRhMO8POn2YDJhBdS3OSPQgj42V0zv4vY=
Subject key identifier: 92:2F:A4:8C:D9:A5:2A:C3:D2:44:40:08:C3:33:F8:C6:21:2D:38:C8
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0D76
Signing time: Fri 12 Jun 2026 19:04:15 +0000
Manifest this update: Fri 12 Jun 2026 19:04:14 +0000
Manifest next update: Fri 19 Jun 2026 19:04:14 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: 23HqH0lCsvPC4VC7Mk7p/IWkn5gjOEb5Sejclh+tQRs=)
2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=)
3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Jun 12 19:04:14 2026 GMT
Not After : Jun 19 19:04:14 2026 GMT
Subject: CN=6a2c582f-7030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:21:04:0d:dc:2c:a2:83:78:9a:cb:c5:6c:
d2:2d:59:48:60:40:d0:c6:38:a0:c2:ac:54:a2:ca:
e8:26:7f:f8:36:8c:63:2f:63:53:0b:fa:cd:45:8b:
26:63:18:aa:84:c0:1a:a4:32:53:1b:66:cc:a8:82:
dc:0d:1f:a3:94:aa:26:15:92:6c:4b:1e:be:8d:c1:
31:53:5a:c9:fa:27:1a:ef:48:8a:af:59:0b:2d:69:
2b:8c:c2:ef:cf:28:5c:fc:4c:4f:46:6f:3d:64:9e:
09:18:6d:52:e1:c2:80:23:7d:7c:cc:97:38:2c:7b:
3a:08:e9:61:94:4c:d5:83:6c:c8:a4:a0:6a:a9:72:
05:69:f8:80:eb:2d:44:ae:4e:e6:25:4e:d1:fb:b6:
79:0f:1b:bc:3a:ca:1d:b0:4f:1c:d0:39:64:4d:9c:
16:2c:76:82:31:7a:a6:39:68:24:c1:13:e7:a7:1e:
1e:a5:47:16:0a:c4:2e:04:81:2e:b9:87:f6:24:ba:
71:3d:74:05:e5:00:86:05:a7:fa:7c:c9:43:82:8b:
f4:e4:8f:e6:6c:50:c0:55:e8:4c:c7:9e:83:42:01:
a7:cc:7b:6c:68:3a:46:9d:da:9f:87:67:97:ea:4c:
41:f5:01:65:af:8f:ec:41:ca:91:da:16:19:a3:93:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2F:A4:8C:D9:A5:2A:C3:D2:44:40:08:C3:33:F8:C6:21:2D:38:C8
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:09:5f:bf:7c:47:3e:6a:63:9e:16:05:9a:9b:de:89:58:
02:bc:39:d1:a5:01:e1:e0:82:01:0b:1e:d3:cc:ba:0d:15:6a:
b0:1c:f2:83:b5:bb:e3:d9:ee:cb:e1:71:8a:db:e8:9a:c4:b9:
3e:57:d9:db:d5:27:21:dc:0a:06:58:7d:be:97:4d:b8:b5:ec:
cf:28:d3:ce:03:a4:f5:07:11:03:d1:ef:e9:72:2b:22:29:0f:
3a:e7:0d:03:ca:b5:5c:b6:24:14:63:d5:b5:99:6c:f9:9d:3a:
8e:64:7f:54:99:1b:d5:46:83:38:14:71:e5:51:c0:4b:5e:b9:
73:38:77:8f:cf:28:15:d9:3e:6c:64:8f:eb:c5:b6:86:74:e5:
19:8b:83:a3:bb:55:ab:60:5b:f1:97:85:d6:63:cb:2d:d1:81:
df:4a:26:43:f7:e4:49:ea:2e:e3:95:04:4a:f5:53:c5:88:18:
ec:0c:32:2b:dc:33:a2:1e:ef:1e:6e:8b:9e:63:f3:c5:a5:19:
9f:26:e3:b5:f9:cb:43:88:b3:2b:18:69:3a:f4:05:e6:96:af:
f4:01:91:40:36:ae:76:f5:23:8f:68:fb:63:9c:82:64:91:68:
20:6c:5a:73:db:24:a0:1f:da:90:00:74:85:01:0b:e5:b9:73:
18:f1:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:11 2026 by rpki-client