
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
File: XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json)
Hash identifier: XYlShS4IzuzKiG0dxgBswWEYWsIlWgAhZdJiYbgwAmw=
Subject key identifier: F5:C3:16:A6:BB:F1:9B:A1:05:78:29:08:5B:E7:E1:E8:CC:F2:E0:25
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial: 0BB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
Manifest number: 0B92
Signing time: Fri 12 Jun 2026 19:10:10 +0000
Manifest this update: Fri 12 Jun 2026 19:10:10 +0000
Manifest next update: Fri 19 Jun 2026 19:10:10 +0000
Files and hashes: 1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: Vatr/E/iwdS0c0V3nl4aqTCzAHZsFxx+lY1MdTdt3C0=)
2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Validity
Not Before: Jun 12 19:10:10 2026 GMT
Not After : Jun 19 19:10:10 2026 GMT
Subject: CN=6a2c5992-32ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:ef:38:35:3b:d0:2a:a1:a0:02:5d:0a:c6:
0e:8f:b3:df:b5:1c:65:d2:c5:a8:95:f8:8f:f2:9a:
01:5f:35:7c:ee:07:2c:88:c2:40:c3:81:13:4d:6c:
08:2e:6e:89:62:16:14:15:46:ea:94:b3:04:52:95:
83:59:1b:b6:0e:02:82:b9:37:a8:23:2b:4b:cb:fe:
0c:5e:25:23:01:89:88:59:d2:dc:8d:e8:6b:98:2d:
03:84:c6:49:b1:6b:dd:5a:a8:6e:0f:71:45:90:e4:
30:e2:04:cc:5e:21:79:25:fa:36:c6:af:80:63:44:
0d:7d:16:9b:58:0d:3b:c3:27:04:f4:ea:a3:81:ed:
ab:4d:3f:84:23:d5:78:c3:03:56:44:f0:62:8c:86:
be:08:43:2a:38:4f:74:03:1b:98:24:e1:16:a6:17:
b8:ea:0e:50:5c:aa:1e:b3:9f:7d:2b:0f:74:b7:9f:
83:45:02:f3:8e:89:c5:da:49:20:c3:45:5e:b8:09:
ad:31:c7:92:44:c9:1a:27:ef:bc:64:c8:24:a2:95:
e2:7f:97:df:84:94:25:6c:4c:1a:a0:76:49:aa:e9:
29:db:79:27:2e:b8:ff:a4:75:7a:22:bd:99:80:27:
46:04:69:d2:50:a4:35:f0:8c:e0:de:08:c5:4c:a9:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:16:A6:BB:F1:9B:A1:05:78:29:08:5B:E7:E1:E8:CC:F2:E0:25
X509v3 Authority Key Identifier:
keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:e8:50:3b:58:a3:98:fc:b7:61:1b:25:e5:53:42:08:e5:81:
ed:b9:2d:13:03:ea:5c:08:e9:48:26:00:3d:63:18:9a:3c:1d:
85:18:20:8d:ba:fc:98:54:07:aa:ad:db:cb:a0:cc:f5:17:a8:
25:40:e7:12:e5:41:db:f9:32:6a:a7:ea:25:3e:cb:4f:d5:28:
05:1f:d2:f6:e5:52:af:01:8f:57:0c:e5:b9:7d:7b:e0:39:0f:
ea:7a:03:ce:db:90:9a:e0:7e:61:ed:dd:12:28:1f:89:d5:80:
e3:37:7c:aa:ae:f6:8c:5f:eb:76:6f:a6:d2:3e:b0:fa:9c:6b:
37:58:03:a6:d4:d4:26:92:1d:29:d1:3d:d3:61:f2:29:72:07:
e9:90:d0:1f:9d:93:4f:9b:34:49:3e:de:14:7e:78:ce:f4:35:
aa:f7:85:55:40:ae:1f:64:98:dc:e5:a6:d3:42:1e:46:ee:27:
fc:3b:77:83:41:57:d3:5a:0d:bb:c2:8f:59:70:62:65:e7:14:
23:a6:b8:3f:76:b2:d7:26:07:64:66:0e:db:e1:4d:63:52:14:
3f:51:a8:1b:04:10:f6:f8:01:9b:47:6d:35:49:7c:ec:88:83:
89:c2:8c:0d:4d:69:bd:31:86:4b:62:90:f7:f7:8c:1b:92:c7:
16:e9:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:06 2026 by rpki-client