
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: IypYQ5y0HF9McTvspd7oQYYgPvS15oR8cIuqy9WMwBk=
Subject key identifier: 2C:76:EE:40:BD:EB:62:57:C7:BB:4F:E7:C9:F3:58:DD:A1:01:BF:D9
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 038D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 0374
Signing time: Wed 29 Jul 2026 01:38:21 +0000
Manifest this update: Wed 29 Jul 2026 01:38:20 +0000
Manifest next update: Wed 05 Aug 2026 01:38:20 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: WRD6I8b/mVxo1yj/zKHSfYyVlA9PI6SH3n6MlPD2WGE=)
2: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: MTaNxaw7PtCNbXESI8RoAJTf60c11P2nE6sDF8sb2DQ=)
3: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: 2lKHlrM+cqHGlUvl56hkW387P065E+umXHXOgejxyiQ=)
4: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OCvPEGQvB1CysAAIU7OkJHE4iNozCgl1veWjbuwvrhA=)
5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: Mcnw9cU8VxSTIzbCnuuHLM/p/44XqAFiwLx0phruJEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Jul 29 01:38:20 2026 GMT
Not After : Aug 5 01:38:20 2026 GMT
Subject: CN=6a69598d-a4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:aa:e7:48:21:5d:34:1c:08:14:d3:c7:00:
62:d5:cd:ff:c9:35:84:8b:01:a0:10:39:df:0f:8f:
ec:6a:3a:37:09:a9:21:92:b3:0c:7e:7e:39:10:0a:
b9:2c:f6:4f:b5:27:0c:92:ef:9d:42:bd:36:57:8f:
20:41:14:80:c3:9e:9a:97:64:d4:87:9e:5c:c6:a1:
6b:7a:66:b8:0e:74:df:3f:e8:db:1e:53:e4:86:30:
fe:46:9a:28:2e:ff:92:71:af:96:65:c6:8e:2b:fd:
70:96:6f:34:51:29:fd:b9:98:fc:f8:57:50:18:e6:
44:3e:86:2e:f7:5c:5b:b1:27:e9:c6:ca:ae:af:d0:
93:5a:3c:49:c4:94:60:6f:68:34:6c:52:2d:52:c4:
3f:10:0d:2b:a3:b3:37:dd:bc:9c:e4:6e:fe:97:b7:
9d:4d:db:dc:8d:95:9e:c5:05:c1:0a:8b:0f:6e:9e:
c8:5a:67:56:00:02:f4:e0:89:d7:e9:8c:86:00:9a:
95:d3:7f:f0:31:b5:32:b1:63:0a:99:2e:13:08:ca:
c1:85:77:75:e1:1f:95:6b:ab:3f:e8:2a:52:94:09:
88:53:60:d0:1b:86:de:b7:62:4d:15:28:24:52:4d:
59:40:ec:05:b5:d2:b3:50:15:83:59:03:e0:27:0f:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:EE:40:BD:EB:62:57:C7:BB:4F:E7:C9:F3:58:DD:A1:01:BF:D9
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:4a:5b:43:ca:a3:9b:58:e6:7a:c2:43:ef:6d:f2:27:76:
1b:01:91:f0:6f:88:3d:4f:40:45:93:77:ba:09:4f:8f:62:a0:
6a:aa:ec:cf:23:ff:04:eb:ac:12:31:61:db:06:0f:8d:7d:dc:
be:84:09:af:0a:ca:08:a4:69:f7:2e:56:4b:82:01:37:f1:5e:
56:78:68:42:55:9b:7f:5e:ec:7f:87:a6:26:a1:4c:80:90:60:
5c:f7:9d:ad:e3:b4:fc:f5:eb:13:06:18:a1:5d:cd:fa:21:45:
18:60:7a:37:32:ee:96:88:c5:7b:32:3a:05:3b:f8:cb:0e:af:
ba:ad:7e:fa:a0:de:cd:0b:7d:94:c6:78:10:11:b2:56:e0:ed:
9a:0e:f6:d7:ae:b5:b6:ed:9e:c2:46:a5:cc:26:5e:72:2f:7b:
8c:ec:79:96:8f:c8:6e:fc:c7:63:c6:23:77:b3:8e:c4:6c:1b:
7a:20:86:e1:85:d8:a7:3e:e0:57:9f:38:76:d7:24:d2:60:0a:
74:90:55:d4:69:5a:27:6f:05:d5:64:e6:af:a4:d7:e2:48:c5:
b8:3d:93:56:fa:f9:1b:83:9e:bb:75:f9:c8:b6:2b:50:a6:07:
2f:ec:a9:f0:a0:f0:6e:45:a7:a0:77:24:9d:3a:20:b6:75:27:
0f:48:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:00:04 2026 by rpki-client