
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier: A2sqSw5phrDdiA+JmgWGIgk9J9MyU1CHrUn2XN6bAWw=
Subject key identifier: E0:86:9F:33:7C:5D:0D:D9:F2:D2:74:35:47:E7:8A:72:7B:AF:5A:61
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial: 0390
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number: 0388
Signing time: Sat 13 Jun 2026 00:48:33 +0000
Manifest this update: Sat 13 Jun 2026 00:48:32 +0000
Manifest next update: Sat 20 Jun 2026 00:48:32 +0000
Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: RdfiwOxiSDHjV+vtYGP8xjHAy5dvaHkKHryg0cx36cQ=)
2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 2U6xmhzv0fOgJj7RZr6nEhhX0Za/2a3PlEUXvRGOzUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Validity
Not Before: Jun 13 00:48:32 2026 GMT
Not After : Jun 20 00:48:32 2026 GMT
Subject: CN=6a2ca8e0-1dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:21:74:56:d1:69:54:20:56:c6:90:78:a4:
1a:f0:a9:d3:6c:68:4a:a5:42:27:f0:77:04:d1:d6:
03:31:14:eb:02:e0:46:19:f4:73:2d:cd:89:a8:df:
b9:be:ba:d2:c1:f4:f5:42:84:97:d3:b5:cc:67:dc:
91:74:41:bd:c4:c7:93:1d:f5:e0:df:31:c8:27:af:
7d:fc:7e:be:0d:77:18:af:69:64:8a:0b:6c:53:f5:
4c:36:fd:b9:33:f1:24:d7:75:36:6b:a2:55:1e:1d:
cf:5f:7b:93:26:70:00:8e:22:34:f9:3e:f9:71:58:
f0:72:c2:bc:b0:98:96:31:3e:7f:d3:c6:be:48:69:
21:05:4c:fb:41:6d:80:90:56:e2:00:84:d2:b5:59:
0b:fa:81:74:4c:ff:42:dc:bd:c9:dd:a8:f7:0a:eb:
65:be:c7:29:eb:ac:6b:d1:9c:71:50:eb:68:25:dc:
30:d2:c2:30:7c:40:17:57:f7:42:97:5c:ba:c2:b7:
d0:a9:db:a7:4b:58:74:48:69:73:3d:e8:99:01:80:
70:28:17:fa:35:ec:d3:6e:1b:0b:75:01:af:3e:70:
1a:5b:be:b7:27:e5:ab:31:f0:dc:b1:c9:ea:2d:90:
de:9c:a7:b0:1f:30:28:01:66:75:13:40:13:3e:a4:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:9F:33:7C:5D:0D:D9:F2:D2:74:35:47:E7:8A:72:7B:AF:5A:61
X509v3 Authority Key Identifier:
keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:ca:8b:b1:94:54:0f:a2:0c:b3:8e:e8:17:81:91:8e:65:04:
21:08:db:0b:76:02:e5:f6:fb:e8:41:26:56:0a:90:ae:62:c7:
59:f6:b3:01:f7:3b:e4:df:3d:c9:50:18:8a:99:22:4c:f2:dc:
bb:fd:c8:7b:5c:fd:95:29:97:7a:7e:c0:de:b9:d1:ca:26:7d:
cb:3d:ed:4c:95:e0:9b:17:9c:bd:ac:75:2a:9b:63:a6:cb:c8:
86:a7:bc:ff:0d:5d:11:1d:f5:ef:71:35:ff:a9:ad:7f:68:b5:
8e:8f:37:bc:c3:8f:bc:2b:48:65:05:f0:89:ea:13:f9:92:8c:
26:8b:5d:b5:8c:04:56:e6:c2:08:1f:c5:7f:32:4d:bc:5f:09:
83:d6:30:0c:ad:8f:7c:fd:b0:d6:bf:f6:a8:c6:cb:99:36:ec:
d6:fd:61:46:c4:71:6a:0c:ee:9a:04:ff:7f:b7:5d:19:0e:0b:
89:02:45:96:34:86:59:fd:8f:d5:ff:e5:df:28:a9:e5:1a:bc:
61:ab:57:26:f9:ee:3d:7d:d8:f2:35:de:4b:7d:f3:b5:6b:93:
04:c4:96:cc:15:c2:83:c1:e4:13:7c:40:b0:10:f8:35:33:ee:
99:ee:40:6e:51:85:c7:19:48:37:72:be:97:c2:cb:f1:c0:30:
94:53:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:54 2026 by rpki-client