
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json)
Hash identifier: sVXy2gMcoWZ1srlnqXOYubmP/TQMgd/P5y6DWFx/qQs=
Subject key identifier: 8F:44:F6:DD:E7:B1:59:AE:2F:BB:36:2F:51:E6:1B:46:50:AB:BE:92
Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Certificate serial: 3555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
Manifest number: 354E
Signing time: Fri 12 Jun 2026 15:02:38 +0000
Manifest this update: Fri 12 Jun 2026 15:02:37 +0000
Manifest next update: Fri 19 Jun 2026 15:02:37 +0000
Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: IP6TF2GInmHRES0eqvqWHqkGd2RzqPwUvFVKA4Z61C8=)
2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: 2kB+l6pOb5zT/KlsA2xEtLzgFrgfMDCnlHiA1i2V1lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13653 (0x3555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410
Validity
Not Before: Jun 12 15:02:37 2026 GMT
Not After : Jun 19 15:02:37 2026 GMT
Subject: CN=6a2c1f8d-9988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:d6:34:a4:74:a7:55:93:1b:21:ed:80:b9:
42:fc:9b:fc:d6:2b:39:53:e2:d9:18:ce:f2:1b:7c:
1d:fd:ec:5f:40:54:aa:fa:98:41:0a:7a:ac:bc:8b:
1a:01:7f:ba:05:23:b6:7e:04:a9:5b:b0:2b:04:e3:
44:be:9e:ba:db:41:fa:ec:04:cf:15:03:d8:00:b6:
2a:09:cd:1a:4c:37:13:ca:b8:55:f7:98:42:24:ae:
8d:50:87:b2:c8:4f:59:a0:33:46:8f:e0:ea:1d:80:
32:88:48:db:ba:a1:bc:97:69:bd:4e:7e:4c:9f:68:
20:fa:47:71:f1:78:53:db:3b:d0:9f:5d:6f:5a:7e:
3d:5a:7d:6a:74:c7:bf:0c:85:b0:95:25:30:e6:25:
a7:1c:f6:7b:a2:5d:42:bc:59:da:0f:e6:af:d0:f0:
cf:38:59:09:03:b5:4d:91:bf:5c:4d:62:f0:39:f5:
c7:d6:d5:d8:df:85:11:d8:6f:26:83:27:87:91:81:
36:b5:55:30:0a:c6:b4:36:83:6f:05:fb:f9:1e:f0:
2a:41:87:45:01:fa:b7:d0:0c:70:63:29:d3:0b:1b:
71:30:8d:6d:ed:e2:97:14:54:ed:f1:68:67:b0:19:
53:fa:fd:4c:20:3c:5a:68:ff:21:d4:a7:38:3a:1c:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:F6:DD:E7:B1:59:AE:2F:BB:36:2F:51:E6:1B:46:50:AB:BE:92
X509v3 Authority Key Identifier:
keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:9f:52:a0:b2:62:74:17:bf:b1:4f:96:f6:7a:9a:d6:d5:
f7:46:f7:36:22:6b:e9:4a:45:b0:37:20:16:35:a2:7f:ed:e8:
d3:7e:a8:d5:8c:98:87:76:b7:3b:1c:2f:36:a8:98:9f:dc:03:
36:02:b0:e6:7b:b2:52:55:ed:eb:93:18:01:a3:82:1a:d8:15:
d8:ac:22:9a:07:32:3c:8a:b1:a2:e4:70:1b:8a:25:5b:e5:b0:
90:ee:4a:df:70:8f:45:7e:72:db:89:83:d9:a1:20:78:58:13:
04:f5:b5:84:e4:3b:b3:dd:d9:e3:d0:25:89:fe:72:33:b6:7f:
43:6f:04:09:68:fe:9a:64:3d:08:76:68:77:dc:61:35:85:ab:
44:9b:54:ab:f4:03:74:10:73:60:32:8b:62:43:58:13:f9:a0:
8e:6b:8a:b0:15:b1:af:73:aa:65:c2:45:5d:d4:a4:42:73:88:
74:ac:c6:7c:92:ac:89:5d:bb:31:1e:98:53:8f:dd:1d:be:d6:
b1:3f:c1:b7:e4:a3:fb:b0:76:8f:8f:be:46:71:92:a6:cc:10:
f3:cf:ca:4e:27:31:ac:72:9e:9a:b5:ae:0c:2c:0c:3e:1c:c5:
be:81:1e:69:42:da:cd:9d:75:7e:2d:4d:e7:d7:23:c9:87:06:
b9:3f:16:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:51 2026 by rpki-client