
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: B0voxlFZCY6hxBHdZK1rdS+zqkRZ/0gQWQxbbaEbb+Q=
Subject key identifier: 8D:B1:D3:BE:B4:2D:30:4D:BE:0F:8E:CB:5E:78:E3:62:FE:98:DA:E9
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 089A
Signing time: Fri 12 Jun 2026 20:35:39 +0000
Manifest this update: Fri 12 Jun 2026 20:35:38 +0000
Manifest next update: Fri 19 Jun 2026 20:35:38 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: BSSJEzpp+2WRG689zkE6MKkm/2knYfZPKYrIxxJlO9g=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 2KftQgjQucTB7mWe4Ghtn15fUs79qb57lhCbaWg6O8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Validity
Not Before: Jun 12 20:35:38 2026 GMT
Not After : Jun 19 20:35:38 2026 GMT
Subject: CN=6a2c6d9b-ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:76:96:fc:99:fc:fb:5d:50:b8:fc:b4:07:
d6:3f:64:33:5f:06:8b:39:38:46:32:04:82:00:ac:
63:7b:27:28:e2:dd:3f:14:64:01:7a:62:45:89:2b:
cd:da:24:b2:9f:70:9e:84:2d:2c:69:00:45:b6:b5:
29:48:3c:0c:f4:e0:82:a3:60:bb:c8:96:14:6a:4a:
3b:c8:40:dc:0f:37:dc:58:7b:c3:63:9f:61:c1:03:
fb:3e:e6:01:41:cd:c8:c5:96:1c:aa:3a:72:40:f5:
79:52:ba:4c:c1:5c:db:9a:a3:70:a6:27:90:63:8e:
f1:a8:bd:8c:01:a2:45:ae:da:53:8a:3b:64:f4:b7:
44:77:96:90:30:f6:2a:1f:e1:8f:80:43:49:c1:aa:
5b:07:65:48:2b:ea:b3:a6:01:8a:78:37:73:5c:7c:
e0:a7:bd:a3:1f:41:23:3a:26:c4:38:91:31:c3:35:
d1:21:3c:80:82:de:b9:d7:eb:f1:e2:e0:8f:a4:eb:
0a:da:50:0c:ae:9f:f3:50:d2:14:88:67:be:d4:92:
d1:97:d8:7f:b7:7e:e9:2b:7b:c3:b1:07:86:d4:21:
1a:9e:35:19:e6:b5:10:4b:19:60:a1:bd:27:d4:23:
5d:fe:90:42:5a:61:b9:18:8b:8f:4f:c4:d9:37:6d:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:D3:BE:B4:2D:30:4D:BE:0F:8E:CB:5E:78:E3:62:FE:98:DA:E9
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:65:4a:7e:86:e8:92:b8:75:24:81:37:29:ba:41:66:7b:
36:e6:43:3c:80:39:72:49:0c:b4:02:52:b4:2a:e8:ef:69:e9:
ee:da:2b:ba:08:0f:6c:d8:66:07:6e:77:be:05:cc:1e:88:56:
4a:db:51:81:5d:bd:4f:b9:7c:87:65:3a:fd:b1:d6:46:af:e4:
5a:5b:82:e1:77:73:f4:73:c3:c4:6d:0c:d4:99:96:42:0b:ca:
0c:50:79:71:ac:0c:c1:89:18:19:a3:45:a9:9a:3e:b8:db:d0:
fe:82:e3:b3:12:0c:4d:01:fe:43:02:e6:69:c2:d8:d8:16:eb:
95:53:33:01:51:5c:cb:c4:fc:66:0c:6b:40:cc:c2:5a:7f:60:
b4:90:d5:2f:57:a0:6b:6e:54:ed:c7:64:1b:f1:2f:94:a6:aa:
d9:21:3b:71:85:8b:e5:ae:67:f1:96:bd:83:33:02:61:01:4b:
72:4d:3d:d7:86:3b:c3:3e:9f:c5:a3:c0:52:52:f8:90:5f:91:
50:e3:38:0c:c9:f9:1b:5c:35:e9:f0:06:f6:b9:f7:96:99:a8:
90:53:dc:70:83:c9:d4:10:3b:54:ca:a6:22:b2:c0:ae:1e:2a:
ac:ad:cd:9b:04:f9:58:9e:7f:79:98:d7:67:2d:90:36:47:91:
74:f9:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:28 2026 by rpki-client