
$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: Thb35cVrvxUs75Q7hGI1BSpkXftEa30QWpojLv8kKDE=
Subject key identifier: 87:10:A9:91:65:61:95:DF:54:D6:A3:DA:78:2D:B9:55:47:35:AF:07
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 02D5
Signing time: Mon 27 Jul 2026 02:43:23 +0000
Manifest this update: Mon 27 Jul 2026 02:43:23 +0000
Manifest next update: Mon 03 Aug 2026 02:43:23 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: bCGNx5+G/hgYSfnwmRFA5YOc5PaXtnR6QJq6ttTfAyU=)
2: 403C37D454EE11F18BF3D50DA0833773.roa (hash: CqiZbfQsdSr5WOK24+P608ghGihUdoFddSIGup2XQa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Jul 27 02:43:23 2026 GMT
Not After : Aug 3 02:43:23 2026 GMT
Subject: CN=6a66c5cb-b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:2b:7a:81:2f:d9:0d:4c:fd:e1:f8:a8:d0:
51:b6:1c:f8:48:77:de:c6:e1:d9:1a:16:53:d0:79:
a1:5a:81:22:43:c5:96:a5:99:1c:37:be:ca:7d:04:
18:83:2a:e4:f5:77:df:0f:e1:f7:93:5b:51:e7:6b:
b1:df:2d:8c:fc:65:30:4b:26:9a:15:c2:b7:54:ad:
d8:7e:d5:3f:c5:49:7c:90:90:74:60:65:a2:f8:41:
1e:bf:c3:8c:42:1d:74:d8:3f:c7:44:ff:6d:87:5e:
74:41:b7:d2:88:b1:19:bd:8d:c9:d6:88:91:5b:31:
bb:87:2c:04:ea:fa:4c:81:4a:c3:de:15:00:be:65:
41:63:da:3a:a4:85:36:25:e0:c1:3e:50:2f:1c:8c:
47:75:05:5f:40:2c:69:55:43:87:5e:87:8d:d7:f2:
63:80:c8:e9:89:eb:35:20:23:a0:dd:27:5a:59:05:
78:70:2c:15:42:9e:bd:57:5d:38:29:4a:a9:17:ce:
ad:f7:ac:29:95:d3:4d:66:21:8c:a2:79:8a:f8:29:
55:de:1c:60:b6:cc:64:45:0e:3e:df:86:c2:4c:d4:
55:c8:82:0b:fb:53:88:b5:d0:7c:a7:0a:91:b3:33:
e1:fe:4c:39:87:77:14:d2:f4:83:dd:bc:2d:02:11:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:A9:91:65:61:95:DF:54:D6:A3:DA:78:2D:B9:55:47:35:AF:07
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:b8:76:a2:6d:79:8b:b5:f6:11:e1:b8:31:4f:e9:10:c7:
7d:f5:f8:ec:78:c6:d6:4e:bd:cf:38:8c:02:3e:18:91:df:6e:
73:bc:28:ec:19:7d:d7:9e:62:91:aa:33:2b:e6:6d:1a:02:b9:
63:22:f3:42:53:dc:30:8b:e4:b1:73:be:b9:4e:01:84:a7:57:
62:c7:96:53:c0:bd:40:9a:c8:12:b4:0a:25:8d:0a:55:f7:37:
12:48:31:33:54:ce:7b:2b:ee:48:6a:5e:cd:fb:8d:28:95:1b:
14:5d:b6:26:96:60:75:f3:19:97:9e:95:26:93:13:1f:2e:2a:
9b:9f:fe:37:f4:b3:20:71:d4:c2:67:f1:cb:9f:aa:12:f5:b7:
0c:ea:f1:10:9f:1b:fb:ca:4f:20:03:86:5f:00:17:98:c7:15:
d5:23:68:c6:52:ea:e6:4f:68:0b:17:54:dd:ad:af:e9:29:89:
1c:8f:fb:3b:77:ce:12:75:ea:e2:90:35:2a:d9:5d:3a:c7:9b:
89:5f:57:c6:41:ce:b0:fd:fd:5b:59:fc:c1:f7:17:f1:1b:b0:
b8:3a:6a:49:78:08:bd:a6:49:c5:8d:08:79:cd:d7:79:43:fe:
2e:74:0a:36:a6:1a:45:cd:fb:68:a3:37:46:b8:a2:61:72:dd:
bf:95:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:20 2026 by rpki-client