
$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier: vGJdfnKp0m0yGbhQ4DorbjZvcEgnwmVXF8FkN5bA18s=
Subject key identifier: AE:BC:92:03:02:ED:C3:3B:51:74:25:1C:B3:1D:01:F4:CC:50:CA:24
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number: 0773
Signing time: Sun 26 Jul 2026 22:22:48 +0000
Manifest this update: Sun 26 Jul 2026 22:22:47 +0000
Manifest next update: Sun 02 Aug 2026 22:22:47 +0000
Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: F+a4eg1knMJ/I5bIzKwZTlgfTLvbBdnH+7P6wgTXWHc=)
2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: PPR6I7z3DbbmL+I131mljAThTVcJvZDWVc9EyKNvaNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Validity
Not Before: Jul 26 22:22:47 2026 GMT
Not After : Aug 2 22:22:47 2026 GMT
Subject: CN=6a6688b8-4646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:9b:3f:cc:44:30:7e:a4:0c:43:da:b2:05:
bf:b2:70:81:4b:d9:5f:e3:38:a1:7b:1e:3e:34:d0:
8e:44:a6:72:ae:7b:30:12:12:98:0b:bd:06:73:9d:
37:98:da:3c:49:fd:94:55:0a:90:34:30:e8:93:53:
4a:91:2d:59:4f:1f:ee:4c:fd:b6:74:d0:d6:e4:91:
b0:b4:5f:d7:36:6f:9d:11:73:1e:50:30:4b:4d:cd:
c0:9f:f4:dd:b1:87:b9:ea:8d:d2:fd:8e:d6:5c:67:
ea:c1:d2:51:d0:80:4b:42:a6:cd:c4:58:84:c5:c7:
2f:55:30:2e:f4:8d:55:c1:a8:59:a0:89:c2:07:81:
8a:52:c1:d0:8a:4c:d1:5c:e7:c2:31:b8:aa:f2:5f:
81:6c:8d:6f:1a:7d:03:57:74:d4:2f:1f:24:6d:d6:
a8:85:82:71:cf:0a:82:e6:d1:ad:8c:a0:85:46:de:
02:53:de:be:98:7b:34:02:4c:ce:3f:a3:62:76:77:
7b:7d:8f:3e:81:2c:33:ec:a9:9e:75:be:b3:b1:4d:
21:be:a9:db:29:a9:c5:2a:90:af:a9:ab:c7:b5:fb:
1a:a8:d2:b1:a4:31:c5:25:cd:f5:54:dc:48:d5:82:
e0:a6:be:72:aa:a3:88:78:1b:bd:63:ec:b3:e2:bf:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:92:03:02:ED:C3:3B:51:74:25:1C:B3:1D:01:F4:CC:50:CA:24
X509v3 Authority Key Identifier:
keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:96:e3:46:21:0d:2e:ed:e0:89:ec:08:19:55:c1:92:e0:
6d:b8:b0:e1:fd:ff:52:0b:da:2c:38:8b:1c:e3:16:8d:d7:fb:
c5:3f:96:a8:f6:89:4c:44:1e:f7:36:a1:e6:ce:d9:91:09:8f:
95:3a:9f:74:d0:20:8b:d9:4c:49:56:25:68:93:05:bc:ed:b5:
06:b1:35:f9:cb:2f:18:90:7e:7d:df:39:93:8a:d1:5e:d7:5d:
61:f2:4e:72:5a:eb:03:13:f0:f6:b5:1f:9e:a5:e3:be:65:60:
82:05:7b:40:2a:a5:ab:d2:32:a5:23:6c:8c:79:4d:6c:87:28:
ea:97:ad:1a:b2:3c:d6:97:32:8d:01:dc:ef:e7:3d:0a:8f:9f:
3a:9a:e6:17:87:99:fd:cd:9a:7f:cc:44:fa:c5:fa:fd:77:0e:
e1:2c:8a:5e:0a:5b:0a:d1:04:27:78:c1:96:a7:95:39:b8:b2:
48:2d:81:48:af:f5:74:f2:03:c4:29:40:26:4e:26:df:a5:e7:
3c:09:cf:31:c1:22:0e:8a:77:44:ed:a4:00:39:04:f5:a1:cd:
f6:7f:4a:d7:0f:92:21:f3:44:c5:dd:c8:ee:76:3a:fa:3d:07:
f1:6a:c1:47:0c:54:54:8d:ba:0a:09:b7:90:13:a9:33:85:22:
31:f1:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:50 2026 by rpki-client