
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier: mjG8nkg7ryib39iEk8lVtacdV4xNnhoXZvjIrHML6ec=
Subject key identifier: 1A:39:A8:AD:34:B8:F3:4B:01:8F:68:F7:5E:70:87:C2:AE:CC:94:8F
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number: 01DF
Signing time: Mon 27 Jul 2026 05:20:34 +0000
Manifest this update: Mon 27 Jul 2026 05:20:33 +0000
Manifest next update: Mon 03 Aug 2026 05:20:33 +0000
Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: Owqf/g6pgHEQyUPPlrpSEO0wrGuBuZMebd83o7kWxqU=)
2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Jul 27 05:20:33 2026 GMT
Not After : Aug 3 05:20:33 2026 GMT
Subject: CN=6a66eaa2-5f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:13:06:9f:d8:61:a5:6c:6e:4c:10:5a:71:
52:e8:d9:17:1d:63:e8:ae:0b:53:9d:02:a7:72:da:
52:7e:a3:80:33:67:0b:4c:bb:f0:1a:2b:78:30:ad:
ca:6d:1c:52:39:98:34:2c:1f:e5:d1:c2:60:7f:df:
a6:e7:8b:31:06:49:c4:47:d7:ca:3f:af:81:08:9a:
00:1f:62:02:a4:1b:cc:6f:58:2f:16:24:16:65:23:
b4:13:51:b2:b2:1f:14:fb:7a:54:7d:07:87:40:ab:
72:05:20:71:7f:b7:70:f5:5a:3e:37:0a:05:b1:20:
10:83:95:62:68:e1:66:dd:4e:7e:ae:15:5f:74:63:
bb:6f:d4:ad:b2:57:26:93:04:6a:20:cc:44:08:27:
7d:54:1f:c5:ca:b8:cf:98:48:c8:99:2f:b1:e0:34:
1b:da:01:6d:b4:0c:56:a8:45:1d:6c:9e:64:95:29:
67:8a:fe:52:a4:d2:38:6a:f5:bb:a7:ef:4c:14:7b:
bc:66:5d:3d:05:12:9e:fe:f8:63:e2:9d:32:53:14:
21:da:de:92:44:5d:8f:8f:93:e1:8a:13:21:50:13:
0f:55:83:f9:41:bf:03:d4:03:59:1e:a9:27:79:3c:
35:3b:20:c0:f1:6c:b9:38:6b:1d:4c:06:e3:e8:89:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:A8:AD:34:B8:F3:4B:01:8F:68:F7:5E:70:87:C2:AE:CC:94:8F
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:57:6b:d6:34:05:e9:1f:a8:e1:1a:3d:01:fb:22:58:5a:fb:
0c:c7:7c:6e:84:9e:ae:e6:e2:36:0c:d8:11:b6:de:11:51:93:
96:ad:95:8b:39:02:b4:48:bb:e8:59:d5:5d:ad:d0:5d:fb:44:
28:68:46:91:45:1f:1c:c9:aa:fe:b7:4f:33:7a:5b:61:1d:37:
84:a6:bb:b3:65:0e:79:99:f7:e6:a9:42:73:0b:6f:1c:f0:87:
2a:7f:71:2d:94:e3:19:bd:b4:8b:44:ac:9c:17:18:89:5c:b5:
be:20:94:bb:b5:68:84:5a:af:6d:5f:e1:09:4a:77:69:a3:58:
76:df:43:a0:57:69:c3:e0:5f:8f:32:75:1c:af:55:7e:76:7c:
6d:a7:d8:47:0e:c6:3e:e1:ef:e2:b9:48:06:08:b2:f3:19:78:
91:c4:74:cc:aa:32:37:4c:40:4d:ad:a3:2d:86:20:2c:85:02:
36:2a:54:be:95:14:a1:fd:7d:39:7b:fb:9c:ec:56:68:eb:28:
01:4e:25:1f:1a:3f:c4:c6:72:40:bd:3f:39:70:6d:82:0c:8b:
95:72:ae:e6:dd:b1:40:20:8c:9d:0e:99:43:ca:02:8f:e7:30:
ba:7f:23:b9:a5:ce:c3:13:c3:3a:5a:71:96:36:ad:e8:a7:b0:
aa:f4:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:28 2026 by rpki-client