
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
File: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft (raw, json)
Hash identifier: oZ4A3FysFPkGh5i/Aay2OEeZ63iapcqY0c9/c7tlJhA=
Subject key identifier: 7A:D8:03:54:F0:D0:29:A5:CB:55:BA:85:6F:28:5F:68:82:8A:CA:54
Authority key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
Certificate issuer: /CN=A91201F1/serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
Manifest number: 5B
Signing time: Mon 27 Jul 2026 10:28:01 +0000
Manifest this update: Mon 27 Jul 2026 10:28:01 +0000
Manifest next update: Mon 03 Aug 2026 10:28:01 +0000
Files and hashes: 1: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl (hash: bOistmP51GYalFfquGp2D8ClSB1jTxO0ILE07BY8IME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl
rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Validity
Not Before: Jul 27 10:28:01 2026 GMT
Not After : Aug 3 10:28:01 2026 GMT
Subject: CN=6a6732b1-680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:cb:e8:77:2c:32:43:16:4c:b0:75:86:ec:
0a:97:50:58:7d:ac:c6:c6:b5:da:b6:32:e0:cc:aa:
01:ed:e0:b8:58:1e:d6:53:56:20:e3:6a:92:ed:0c:
5d:94:4a:18:11:b7:fb:f4:2a:71:bb:b3:32:dc:d0:
5e:e2:4f:d0:75:44:71:42:10:70:24:64:8b:12:38:
9a:46:4b:f6:37:86:49:0d:cc:43:5a:10:41:e1:47:
96:d9:c6:c7:51:a6:d6:01:26:90:f7:a6:2b:13:28:
9a:02:b2:a9:11:66:df:02:99:98:56:08:ff:53:63:
61:04:0b:47:13:69:a7:5c:2d:79:39:88:43:85:51:
d0:f0:d6:a2:ba:11:68:3d:80:4b:df:54:83:21:ae:
fc:8b:12:6c:7d:09:72:62:ab:b1:64:ff:99:74:dd:
88:8a:9f:1e:48:42:19:27:e6:96:e7:28:f5:b3:48:
eb:71:bb:c5:39:9f:35:fd:a8:81:06:5f:f0:c0:36:
c3:f3:3f:df:88:69:f0:2b:e7:0c:e2:7c:2d:59:b2:
fc:93:68:1b:05:9a:18:f9:c1:8e:c5:d6:19:4e:1a:
86:18:fe:ad:49:f6:85:ab:c5:3f:53:04:6a:cb:9b:
d3:d5:d8:6c:f8:f6:74:da:7c:8a:95:ec:71:8a:88:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:03:54:F0:D0:29:A5:CB:55:BA:85:6F:28:5F:68:82:8A:CA:54
X509v3 Authority Key Identifier:
keyid:0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:cf:08:15:69:a7:08:e2:b6:c0:db:f7:91:5b:2e:f0:27:
c5:2c:4d:07:ea:57:b1:a2:6e:71:fc:d8:67:6a:e0:1d:89:12:
2e:25:f9:a1:72:3e:ad:29:24:92:d4:14:4f:61:26:62:2d:3b:
9b:e3:3b:ba:69:84:a8:99:7b:5c:0a:26:a5:77:fc:e6:f0:9a:
18:b1:b2:8f:bd:92:18:53:29:4a:43:e8:c3:f8:da:35:41:6d:
58:93:1b:e8:41:42:85:d7:2a:a0:25:a9:7a:8f:a7:fc:74:83:
a0:e3:e8:48:42:9f:88:03:48:bc:2d:76:41:ef:ed:ad:c9:63:
fd:70:1e:f4:86:90:f3:63:33:5a:68:5d:85:63:4d:e6:f2:36:
50:6e:60:45:06:18:27:e8:79:a8:a5:db:07:ea:f4:ad:73:b9:
6d:ea:23:3c:00:d6:73:0e:b9:11:08:b0:11:cc:18:93:22:db:
55:97:c7:07:d8:8f:d3:4c:ca:d3:96:b6:2a:15:5c:6c:32:e6:
17:a5:87:b5:0b:49:b4:3d:28:91:89:ee:8d:b9:b6:ff:7b:28:
f2:78:16:96:6e:7c:d3:b5:00:e1:b4:87:2d:f2:33:8e:53:52:
37:2a:21:9d:5c:74:02:11:9d:a2:8f:e3:1d:a9:ce:a2:18:b3:
23:8d:a7:d2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDFGMTExMC8GA1UEBRMoMEIxNDEyRUYxMjZCRkQ4RjA4RkQ4NEEyRjYwMjRDODA2
QURCMTc5MTAeFw0yNjA3MjcxMDI4MDFaFw0yNjA4MDMxMDI4MDFaMBgxFjAUBgNV
BAMTDTZhNjczMmIxLTY4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvbMvodywyQxZMsHWG7AqXUFh9rMbGtdq2MuDMqgHt4LhYHtZTViDjapLtDF2U
ShgRt/v0KnG7szLc0F7iT9B1RHFCEHAkZIsSOJpGS/Y3hkkNzENaEEHhR5bZxsdR
ptYBJpD3pisTKJoCsqkRZt8CmZhWCP9TY2EEC0cTaadcLXk5iEOFUdDw1qK6EWg9
gEvfVIMhrvyLEmx9CXJiq7Fk/5l03YiKnx5IQhkn5pbnKPWzSOtxu8U5nzX9qIEG
X/DANsPzP9+IafAr5wzifC1ZsvyTaBsFmhj5wY7F1hlOGoYY/q1J9oWrxT9TBGrL
m9PV2Gz49nTafIqV7HGKiJszAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUetgDVPDQ
KaXLVbqFbyhfaIKKylQwHwYDVR0jBBgwFoAUCxQS7xJr/Y8I/YSi9gJMgGrbF5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUYxLzU4MkFEOTgwMDBE
QTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4SV9ZU2k5Z0pNZ0dyYkY1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3hRUzd4SnJfWThJX1lTaTlnSk1nR3JiRjVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
MUYxLzU4MkFEOTgwMDBEQTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4
SV9ZU2k5Z0pNZ0dyYkY1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBEhs8IFWmnCOK2wNv3kVsu8CfFLE0H6lexom5x/NhnauAdiRIuJfmhcj6tKSSS
1BRPYSZiLTub4zu6aYSomXtcCiald/zm8JoYsbKPvZIYUylKQ+jD+No1QW1Ykxvo
QUKF1yqgJal6j6f8dIOg4+hIQp+IA0i8LXZB7+2tyWP9cB70hpDzYzNaaF2FY03m
8jZQbmBFBhgn6HmopdsH6vStc7lt6iM8ANZzDrkRCLARzBiTIttVl8cH2I/TTMrT
lrYqFVxsMuYXpYe1C0m0PSiRie6Nubb/eyjyeBaWbnzTtQDhtIct8jOOU1I3KiGd
XHQCEZ2ij+Mdqc6iGLMjjafS
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:07 2026 by rpki-client