
$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json)
Hash identifier: 8u2rJupd62yg7Fx+gED6nO7DqlHRa94C0lA35u7U8kk=
Subject key identifier: 42:37:9C:F5:B0:04:52:F7:EB:E7:28:93:A3:CC:19:08:1C:69:DB:CD
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Certificate issuer: /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial: 05A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
Manifest number: 0551
Signing time: Mon 27 Jul 2026 00:28:50 +0000
Manifest this update: Mon 27 Jul 2026 00:28:49 +0000
Manifest next update: Mon 03 Aug 2026 00:28:49 +0000
Files and hashes: 1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: 8K84wTsrKvrqLgoqCQkOZEWNU8I02v42Ht9M9f7EG/s=)
2: 87840F3AFBD111EFB4804F27C4F9AE02.roa (hash: vIEtRSxvBa0Xc/IiKtnrGRDGvVh6iD/nJgJJDv2I0S0=)
3: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (hash: rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Validity
Not Before: Jul 27 00:28:49 2026 GMT
Not After : Aug 3 00:28:49 2026 GMT
Subject: CN=6a66a642-1ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:06:c1:31:6a:96:75:61:64:6e:db:e0:1f:
ec:dd:40:b3:5b:e5:0c:77:a6:a3:d1:76:e1:5d:de:
d3:9c:e8:39:d7:55:fb:4d:b3:52:53:8f:21:dc:98:
b4:8c:2b:f7:ad:29:e7:11:5a:bc:85:10:76:75:59:
01:0a:cf:40:6e:d1:32:2d:3a:bd:46:60:bf:ef:47:
04:54:ba:7c:a9:79:1a:84:89:4a:08:2f:7b:06:4d:
45:4c:b4:2b:52:9d:22:fd:28:01:9f:21:43:e6:4d:
1a:af:80:8b:5d:70:5e:71:45:99:3b:e8:84:ad:6e:
91:95:99:53:25:ff:35:12:30:de:95:e1:21:6d:d3:
27:dc:c1:da:70:66:f2:bb:4c:83:60:74:8d:e4:d3:
d5:92:dc:a8:5b:77:d5:8f:8a:ad:28:4c:e6:a9:a4:
ef:94:8b:04:ad:08:29:ae:b2:47:07:ad:da:9a:3d:
52:57:e4:d7:1b:ef:3d:92:3b:37:a3:46:26:f4:b0:
88:93:30:53:eb:01:d2:a1:79:a8:c2:a8:a2:bc:b8:
a9:dd:53:ad:11:fe:ae:e1:3b:b5:5b:e9:42:29:ed:
61:24:90:85:cc:51:b4:8e:55:67:a8:20:58:3e:f6:
37:40:23:fa:e1:e8:8a:62:b6:ab:d9:de:97:0e:ac:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:9C:F5:B0:04:52:F7:EB:E7:28:93:A3:CC:19:08:1C:69:DB:CD
X509v3 Authority Key Identifier:
keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:54:39:50:02:ab:01:ec:ad:29:d5:2c:18:d7:67:7f:71:b5:
88:1f:30:8d:25:05:ad:af:65:af:58:8a:b2:69:4c:40:6a:65:
06:ae:dd:b5:f8:71:b9:bd:75:d4:02:2b:ab:b4:b3:93:17:3a:
1f:bd:f9:3a:35:63:10:6e:08:0d:a0:15:75:ea:75:e0:37:30:
9c:0b:49:e0:b2:c8:d6:44:5c:97:86:a3:44:d5:d7:b7:99:8e:
74:30:28:87:59:07:9f:c7:13:5a:41:1e:50:71:39:f9:7b:93:
7f:8b:99:55:69:01:be:a3:bb:ca:13:fa:ca:21:6b:6f:54:9c:
65:5e:c6:df:9d:f2:d7:75:db:2f:5f:12:89:b0:f7:75:d7:63:
d9:70:71:8d:b5:d9:8b:07:4c:67:b6:7a:d5:27:f2:03:f3:bd:
25:01:61:f3:33:dd:de:fe:37:a3:80:b9:f6:d6:aa:66:2f:cb:
2b:25:f1:7f:eb:33:52:6b:06:4c:79:dd:55:a6:3e:6c:6d:c4:
25:a7:9f:38:ba:9d:8c:e3:36:28:3e:75:0b:62:93:8f:42:0f:
bc:08:46:19:d9:5a:9f:08:d8:ae:3f:8d:51:db:9f:73:94:e2:
bc:f8:68:2a:36:dd:7e:db:af:83:44:d5:10:42:ff:79:6f:da:
3f:2c:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:26 2026 by rpki-client