
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json)
Hash identifier: 3GyDF48qGYEf5ZtEN6jJkgcdz9EWOcSJ8t0VSEHHKWA=
Subject key identifier: 6A:0A:F2:F2:51:47:C3:4E:1D:33:DC:94:9A:EF:82:87:55:32:1A:E4
Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Certificate serial: 05A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
Manifest number: 05A0
Signing time: Mon 27 Jul 2026 00:04:39 +0000
Manifest this update: Mon 27 Jul 2026 00:04:38 +0000
Manifest next update: Mon 03 Aug 2026 00:04:38 +0000
Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: IJb0VH+L9Z42QZ7FYcOUDyPZeKDr42aJ1u8+XzlqK3A=)
2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: CMK57h7d3VJ8Y5Z6L2ancbIus6PT121u0oU6HX7o5tQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1448 (0x5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Validity
Not Before: Jul 27 00:04:38 2026 GMT
Not After : Aug 3 00:04:38 2026 GMT
Subject: CN=6a66a097-f55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:86:5d:4d:82:7a:c6:ba:3e:c3:58:4c:13:
63:8f:7b:5b:a2:aa:23:df:49:2c:41:87:6b:02:40:
75:b0:6c:6f:57:2e:83:4c:43:9a:9a:f3:e2:f1:52:
78:b6:d0:85:a8:77:f0:f7:6d:a0:96:52:5d:cf:90:
e1:55:12:6f:75:ab:46:bc:cb:dd:83:22:79:68:24:
f2:5e:cb:e7:20:7f:57:4f:32:e8:a2:8f:77:89:5c:
c5:89:75:6f:9f:a3:25:e1:9f:5c:25:6c:66:aa:a0:
07:46:74:f6:43:79:c0:dd:73:c0:86:71:28:7f:91:
b6:d2:1f:80:c4:f3:fa:8c:26:45:b4:48:03:a2:09:
0d:92:c4:60:3c:57:f9:f7:5e:e6:58:91:e3:c2:ab:
9b:6e:2f:b5:ff:97:bb:24:50:6a:fe:32:a6:55:8d:
73:2c:a7:25:30:9f:ba:f1:2e:84:ea:0b:fd:29:eb:
b9:23:15:24:e3:c6:09:c5:e3:f1:54:ec:5b:2f:aa:
76:57:69:2c:4f:ee:39:f4:d0:34:d0:eb:d2:f8:95:
67:69:1d:92:36:86:5d:58:69:b5:c2:0e:95:50:2f:
4d:6a:dc:55:87:31:8a:7a:be:42:88:58:8c:2a:d3:
21:f6:8e:ea:95:e1:23:11:b5:2c:3e:dc:f1:24:71:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:F2:F2:51:47:C3:4E:1D:33:DC:94:9A:EF:82:87:55:32:1A:E4
X509v3 Authority Key Identifier:
keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:49:e0:a5:96:33:1f:19:24:d1:dd:b6:64:ed:8e:af:cd:
3e:c0:22:c8:be:36:60:e1:f4:c7:7b:1b:51:16:d8:e1:11:3e:
70:55:75:6c:55:be:2d:26:56:5f:49:ed:cf:ed:07:2e:87:2d:
cf:65:3e:b4:95:73:fe:80:2b:17:f7:38:d6:d5:99:c0:a0:ca:
d7:73:63:7d:ea:18:0a:2f:8f:50:ab:0b:00:87:75:4d:21:a9:
9c:91:ce:6a:0b:9c:fb:8d:e3:09:ec:51:6e:89:48:a6:cd:72:
27:65:1e:bd:ba:d0:33:25:80:14:bf:c4:25:36:ac:51:32:2b:
b4:dc:5a:2c:0e:0f:fb:c4:dd:26:00:28:71:0f:aa:f6:8b:5f:
0d:6c:42:5a:47:7e:b2:97:d6:d7:19:29:c2:1e:df:ca:1f:71:
7a:7d:2b:b4:17:f2:0b:a2:fb:29:75:a6:2a:08:f4:d8:45:0e:
e1:df:d3:5e:f8:09:66:0e:6d:f5:4d:7b:ad:c3:bb:03:d2:70:
84:8d:9a:5b:8d:c5:07:b1:55:10:6a:8d:5e:72:d0:6c:1e:fb:
23:db:6f:65:17:e9:d2:d6:f1:4c:3e:cc:9a:40:d5:23:52:c4:
95:1a:3b:fb:01:01:41:5a:b5:a0:6a:15:7a:a9:12:1a:8d:3c:
ee:41:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:25 2026 by rpki-client