
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json)
Hash identifier: /xxqRYHn+2eCYX2dSReC4mBXHWvaCkJuqjYrWg/y0/4=
Subject key identifier: D3:D1:02:4C:9E:05:DF:19:20:74:1D:7B:DB:B7:CC:F7:FF:90:DD:6C
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0CCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
Manifest number: 0B7B
Signing time: Fri 12 Jun 2026 19:45:06 +0000
Manifest this update: Fri 12 Jun 2026 19:45:05 +0000
Manifest next update: Fri 19 Jun 2026 19:45:05 +0000
Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: yUbCm7g9nS88T+myrAsklTV/DAmwYkBuHZKtXqCwkko=)
2: 89135068FD2911F09BBA873E426F56BC.roa (hash: k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=)
3: 37778C1E130A11F18BFDFDDD163D8C67.roa (hash: Hx4jtOuJzXTTc5VHMURxCz4V4clqTWRLtCDPvPlgRLQ=)
4: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (hash: 70UT6YcmvBlzj1xKlGcaUiyXDKtBEdfDGecHQzUFaBA=)
5: F0DB98A21BA811F1919C26950A3D8C67.roa (hash: 6WjdsXo2+LZgxWiVDy4rRpY13i0Lx3BV3M/QLcdy5a8=)
6: C255F0921BA611F1A0C1BD34093D8C67.roa (hash: JJB1fRNMQNiQ7UphAqBCNRImICoAXfFr6cutkg5XqI4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jun 12 19:45:05 2026 GMT
Not After : Jun 19 19:45:05 2026 GMT
Subject: CN=6a2c61c2-8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:02:ac:ed:ba:da:33:64:ae:3c:9a:64:4f:
d6:1b:de:6d:fc:3f:b2:35:40:8d:dc:82:1c:a5:1b:
9f:8c:21:4f:7c:03:ae:e1:af:a8:c2:d8:d2:6b:26:
82:eb:a7:7d:12:7e:59:93:c4:3f:b6:0f:bb:d6:33:
01:a6:18:88:90:25:43:e5:bf:8c:43:1d:a5:9c:7a:
1d:9e:23:70:a7:1d:6c:da:93:bd:ed:61:a7:76:c0:
2c:5f:e4:0f:97:e8:8b:9e:2b:11:97:fa:b8:af:1e:
e3:16:88:cf:af:dc:df:12:f4:fd:14:b2:44:92:9f:
ab:2b:82:d2:c2:ee:4d:99:66:37:fa:37:e2:bf:23:
7b:38:e2:c4:94:6b:5d:e4:f4:fa:71:16:68:9f:be:
de:ad:6d:85:70:c5:ee:5b:ea:88:df:6f:3e:fb:b8:
78:a0:b2:c1:26:b8:a7:b6:aa:2f:f2:e9:7a:26:e5:
fa:f5:65:bd:79:97:bd:7e:32:7c:75:90:87:93:64:
d1:72:a5:46:36:72:d1:e3:58:c9:7b:eb:b8:89:a5:
6b:22:d5:f7:6a:ee:8a:12:11:f5:ad:73:08:cf:d8:
21:30:4c:4d:a4:04:fb:79:f3:ca:f5:46:18:19:16:
97:7d:41:fd:9f:e0:6f:69:f7:62:02:09:fe:28:4a:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:02:4C:9E:05:DF:19:20:74:1D:7B:DB:B7:CC:F7:FF:90:DD:6C
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:44:35:55:25:f8:06:7f:c5:26:f9:65:61:b7:fe:40:63:
49:69:43:2a:33:a0:5a:01:2d:5a:c2:e1:e7:2f:20:6e:94:65:
14:24:ff:fb:59:de:c2:d2:2d:91:9e:f9:53:a3:d0:79:12:c2:
32:eb:7e:81:8b:16:86:fe:13:ae:4b:34:d8:4d:06:a2:e5:6c:
82:1d:54:57:b6:a1:6d:9e:57:34:f5:23:c9:a4:46:8c:7e:5b:
81:43:7c:2f:15:81:18:0a:ce:26:93:c0:f6:8e:66:7f:eb:3e:
81:c7:95:26:2c:f9:1f:60:bc:38:35:3f:ad:3d:5f:5e:96:b5:
c3:23:f7:de:ed:52:32:52:fa:bb:57:e7:a6:f4:f3:91:db:19:
b6:d6:65:0b:41:b7:1e:d0:8f:6f:7b:56:9c:46:bc:18:45:95:
08:64:fe:31:67:5b:04:12:62:4f:64:6e:e7:dd:4b:a9:8c:98:
11:7e:be:ec:42:d9:2d:04:8a:1c:e8:c7:06:4a:dc:57:f2:3c:
23:31:b8:3e:d6:99:87:da:7c:25:0a:e9:e7:05:f7:05:7c:d6:
b5:c0:50:08:35:d9:fe:1e:d3:8f:ea:26:01:48:10:93:8d:7e:
26:f1:35:e7:ce:b4:c8:f7:d9:1e:70:58:5b:19:7f:78:89:4a:
e1:2c:83:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjYwNjEyMTk0NTA1WhcNMjYwNjE5MTk0NTA1WjAYMRYwFAYD
VQQDEw02YTJjNjFjMi04YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl98CrO262jNkrjyaZE/WG95t/D+yNUCN3IIcpRufjCFPfAOu4a+owtjSayaC
66d9En5Zk8Q/tg+71jMBphiIkCVD5b+MQx2lnHodniNwpx1s2pO97WGndsAsX+QP
l+iLnisRl/q4rx7jFojPr9zfEvT9FLJEkp+rK4LSwu5NmWY3+jfivyN7OOLElGtd
5PT6cRZon77erW2FcMXuW+qI328++7h4oLLBJrintqov8ul6JuX69WW9eZe9fjJ8
dZCHk2TRcqVGNnLR41jJe+u4iaVrItX3au6KEhH1rXMIz9ghMExNpAT7efPK9UYY
GRaXfUH9n+BvafdiAgn+KEqU0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPRAkye
Bd8ZIHQde9u3zPf/kN1sMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM
bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADZdENVUl+AZ/xSb5ZWG3/kBjSWlDKjOgWgEtWsLh5y8gbpRlFCT/+1newtIt
kZ75U6PQeRLCMut+gYsWhv4Trks02E0GouVsgh1UV7ahbZ5XNPUjyaRGjH5bgUN8
LxWBGArOJpPA9o5mf+s+gceVJiz5H2C8ODU/rT1fXpa1wyP33u1SMlL6u1fnpvTz
kdsZttZlC0G3HtCPb3tWnEa8GEWVCGT+MWdbBBJiT2Ru591LqYyYEX6+7ELZLQSK
HOjHBkrcV/I8IzG4PtaZh9p8JQrp5wX3BXzWtcBQCDXZ/h7Tj+omAUgQk41+JvE1
5860yPfZHnBYWxl/eIlK4SyDVg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:16 2026 by rpki-client