
$ rpki-client -vvf rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
File: RXfmNryC40djCTad9uzHkOsrkUU.mft (raw, json)
Hash identifier: bvo37xylQG4hiqMvl7+FYYbcbJaARjAAhSAoMV3C3Mc=
Subject key identifier: B2:14:13:00:96:42:07:45:F7:F2:4B:9E:74:81:65:4E:2F:AC:72:4B
Authority key identifier: 45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
Certificate issuer: /CN=A91614E3/serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
Manifest number: 30
Signing time: Mon 27 Jul 2026 11:01:11 +0000
Manifest this update: Mon 27 Jul 2026 11:01:10 +0000
Manifest next update: Mon 03 Aug 2026 11:01:10 +0000
Files and hashes: 1: RXfmNryC40djCTad9uzHkOsrkUU.crl (hash: Wj04T0D1dixBo6XP7F+q1mf0ia78Yzn/kZgf9OrLOV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl
rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91614E3, serialNumber=4577E636BC82E3476309369DF6ECC790EB2B9145
Validity
Not Before: Jul 27 11:01:10 2026 GMT
Not After : Aug 3 11:01:10 2026 GMT
Subject: CN=6a673a76-5762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:83:b3:22:da:f0:8c:96:a1:4c:11:7e:db:
d3:8c:78:20:14:2f:61:19:9a:11:fc:cc:17:1a:80:
06:d6:40:07:f0:1c:43:6e:8e:e4:54:af:ee:e7:59:
dc:00:e7:16:9d:5a:b7:d1:ba:bb:0d:52:f9:7d:4e:
85:89:ba:fa:7c:2a:0a:19:5b:2c:e6:b3:08:ff:f8:
c7:5b:4f:2c:de:2f:58:36:15:5c:4c:eb:fb:d4:1f:
e1:9e:52:77:da:76:69:a2:c7:32:78:72:48:4d:6d:
42:0a:17:18:8f:58:df:1e:23:3f:31:02:8e:e3:ce:
3e:d9:f4:a7:be:ab:fb:96:43:a1:55:35:ab:33:15:
70:7d:7a:39:60:23:66:4b:30:64:25:39:70:25:21:
ed:5f:a9:41:d2:a1:bd:61:db:02:bc:30:88:2b:94:
0b:23:9d:0f:e8:fe:1a:8e:d2:ce:a6:f0:4e:6c:79:
1a:c8:79:0c:f5:62:54:3f:c3:53:ea:85:65:6a:ba:
7f:9a:4a:61:20:07:17:f4:2b:46:d4:bb:4c:60:5a:
1c:29:a5:f2:a3:2a:4b:46:fa:86:2a:25:f4:06:db:
db:c6:73:17:35:2c:9b:ad:da:de:60:5c:a3:25:57:
ca:58:bb:d0:71:47:70:32:c4:07:3e:10:c9:d9:0a:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:13:00:96:42:07:45:F7:F2:4B:9E:74:81:65:4E:2F:AC:72:4B
X509v3 Authority Key Identifier:
keyid:45:77:E6:36:BC:82:E3:47:63:09:36:9D:F6:EC:C7:90:EB:2B:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXfmNryC40djCTad9uzHkOsrkUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91614E3/FAFF99863ED111F1A3BC1149B0833773/RXfmNryC40djCTad9uzHkOsrkUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8a:a8:e8:c1:97:1e:9a:82:9a:c9:ca:ae:05:c7:6a:89:75:
64:18:61:3d:93:6d:c5:94:4e:5e:a7:1b:18:8f:94:ad:52:1e:
05:34:5d:fb:3b:05:34:77:52:d3:9c:26:7f:ac:20:1d:34:14:
24:b6:87:b6:11:55:de:05:3f:7c:24:e1:9c:c0:55:f1:6c:2e:
7a:85:0c:31:fb:bb:97:08:8b:76:2d:cb:16:47:9b:10:1c:57:
b4:50:6a:eb:3a:1f:f2:02:73:f1:20:c4:53:3d:07:a9:0d:6e:
b2:50:ef:33:e1:bb:47:13:54:ee:9d:f7:18:93:64:58:fe:6d:
c9:a2:ce:1e:23:b7:fc:bc:3c:da:fd:fb:f5:82:c4:6e:bd:5f:
ce:f8:cd:07:75:36:1d:fb:c0:27:04:de:ce:ee:c7:69:0e:2c:
d9:18:e2:5d:0b:d1:76:b5:96:bd:b6:f7:18:9f:c6:55:5a:cc:
f0:5f:83:58:c4:3e:cb:8e:f1:21:92:1b:44:35:bb:2e:53:8d:
d8:59:16:2b:33:27:a7:15:59:5c:53:e5:28:d1:9d:f4:1c:bf:
dd:58:43:61:b4:36:7f:6e:47:41:56:b2:a4:74:df:b8:53:c8:
2a:ce:fa:76:f9:21:92:de:22:c3:56:d2:22:25:28:8d:6b:b6:
47:ba:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:04 2026 by rpki-client