
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier: kGydGcAimhpEo7SF73zVqKiOHVrOanVz/v5rZJLkyBU=
Subject key identifier: 39:23:07:00:5C:13:B6:8F:74:97:33:3A:38:9A:7F:F6:D3:EB:BE:96
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number: 0270
Signing time: Fri 12 Jun 2026 23:06:06 +0000
Manifest this update: Fri 12 Jun 2026 23:06:06 +0000
Manifest next update: Fri 19 Jun 2026 23:06:06 +0000
Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: aJd4jZsXQcIv8a05XO9ais4ACAX6T3sGJ0j+8DuKzbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Validity
Not Before: Jun 12 23:06:06 2026 GMT
Not After : Jun 19 23:06:06 2026 GMT
Subject: CN=6a2c90de-488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:0b:92:c1:38:1e:64:54:45:0a:58:ae:02:
c5:c1:1c:65:b9:25:dd:2a:c1:4e:d9:75:f8:17:93:
ac:ff:4f:19:15:5b:aa:24:7d:79:31:b1:7b:24:84:
9f:3f:0e:c8:4e:ef:30:09:94:c6:aa:ec:7b:93:5d:
9e:9d:34:a1:08:08:02:c3:1b:9b:0f:bf:aa:44:db:
b0:36:b1:d8:03:32:fe:0e:52:c5:4c:9b:79:46:6e:
d6:d7:90:39:b4:9c:2a:d0:70:72:d7:eb:ae:f7:ec:
5b:e0:9f:c7:5e:b1:5c:bb:96:3c:0b:53:15:98:61:
5a:91:42:e4:13:6b:6a:ce:b7:ec:ae:3f:00:10:f3:
06:ab:e4:91:86:8e:55:a6:30:d2:ec:f5:78:e2:d0:
33:6e:77:6d:6a:20:ad:b4:29:06:79:5a:3b:74:b9:
c5:c8:25:bb:2c:d0:78:c1:b3:33:04:dd:c4:6a:c4:
58:16:29:ff:86:38:d4:f4:4f:d6:13:dd:87:66:fd:
ed:59:1c:5d:36:0f:91:b2:33:9e:33:3d:3c:65:34:
44:b3:e4:96:87:5f:6c:8c:07:07:e1:7d:a5:33:33:
9c:ea:da:5b:14:ba:d5:34:26:4e:9a:c3:ef:0c:86:
13:1e:dd:3d:91:e8:ba:ae:d1:bf:ca:3b:a9:29:70:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:07:00:5C:13:B6:8F:74:97:33:3A:38:9A:7F:F6:D3:EB:BE:96
X509v3 Authority Key Identifier:
keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:56:6e:e4:48:fa:9d:ce:69:a3:48:a6:d0:1c:8f:ea:03:
9e:05:59:31:6c:bf:52:57:7f:ab:a4:3b:64:24:30:40:d9:e0:
38:1e:ef:86:fc:12:a3:65:e3:c4:51:58:4b:20:44:df:e4:7e:
af:32:f0:f4:66:1a:9c:18:46:c9:a1:55:70:7e:47:d2:b9:ac:
90:d8:53:ae:43:55:36:c7:a3:39:98:b6:48:26:d5:9f:5b:e1:
07:17:63:04:2a:73:3f:08:35:b5:f1:86:d1:a4:26:8b:f3:fe:
80:7e:bf:6a:32:09:ec:ea:9f:a7:69:91:10:ad:d1:c9:86:fb:
fd:89:0b:0c:7f:1f:c9:b1:26:6a:91:3e:a0:0f:32:ab:69:d9:
87:90:94:c7:77:ec:af:75:29:d9:82:a5:5c:4d:6a:95:4a:5a:
c9:9d:2a:ec:64:a3:f6:41:d5:19:e4:9c:a1:96:96:29:5f:f1:
75:ea:f1:00:b1:b9:9f:9d:51:0e:27:42:91:08:1c:82:3e:14:
0e:63:12:15:3a:f5:f5:53:da:8d:9e:51:52:0c:5d:98:68:1c:
a7:92:ad:6e:9a:c4:06:ea:38:7b:2c:d5:37:3f:74:0e:bb:ea:
ea:4e:fe:fa:8e:85:68:cd:e1:76:c5:49:1a:cb:84:91:b7:f6:
13:bd:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:55 2026 by rpki-client