
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier: 3Fx/6Teaz5E0PbWLObKPvcol72tU9e9YYkwPvNWn9HU=
Subject key identifier: 83:31:75:51:2B:6C:A6:8E:34:F3:38:C9:47:FB:29:07:FA:F5:49:7A
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial: 0663
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number: 064F
Signing time: Sun 26 Jul 2026 23:32:57 +0000
Manifest this update: Sun 26 Jul 2026 23:32:57 +0000
Manifest next update: Sun 02 Aug 2026 23:32:57 +0000
Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: JLvaq8ETxmi6JNbysLyRDLQNyo4gpWBB943BSCqFS9c=)
2: F50A884C5DDF11F197B40288B8833773.roa (hash: 9rUDU6NmwXNmelpt6cYq2BCwimYK9ztmiUJ8y08WBM4=)
3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: uYxDc2s73H33RAjSESYgkRg+fhVzlnP0WIWOn/2ko/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Validity
Not Before: Jul 26 23:32:57 2026 GMT
Not After : Aug 2 23:32:57 2026 GMT
Subject: CN=6a669929-cd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:10:92:5c:c0:e9:b3:17:cf:61:7e:3d:1a:
05:14:cf:91:ff:4a:3b:88:29:a0:d5:0d:55:e4:63:
32:a3:0c:f7:05:c5:ef:cf:3c:b0:c0:22:4f:09:bc:
95:bf:df:a8:aa:f7:cd:55:c3:3d:e2:54:95:58:5f:
05:14:50:3c:0c:b2:52:84:13:f3:f0:ae:c7:1f:d0:
12:e3:1c:44:5d:cc:ce:42:50:20:69:3e:63:1e:6c:
2c:c4:91:55:f3:09:58:2c:c9:46:57:aa:8b:fa:b2:
b2:31:35:0e:85:7c:b2:99:dd:0f:78:f5:c7:11:c6:
95:5e:66:0a:3b:8c:07:16:28:f0:ec:f5:18:bd:3e:
b6:90:ad:bc:89:38:ce:1d:34:11:fd:57:e3:8c:64:
62:fb:13:36:e4:fc:78:b4:7b:c1:a8:ab:84:6b:b0:
bd:33:3d:b1:4b:a5:d2:fd:31:7c:49:46:37:f4:9e:
07:60:67:e5:4c:d9:8b:e8:06:83:5b:4c:0e:35:36:
93:2a:79:d7:03:65:15:e7:5d:f3:57:08:7f:00:fd:
87:2d:35:bb:ea:93:8f:bc:0c:ad:b5:94:0d:62:b5:
3f:32:d2:29:21:2f:e3:9c:56:e2:27:1a:91:ff:1f:
83:ee:0b:5c:72:32:80:c7:b1:96:05:d4:c2:32:5d:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:75:51:2B:6C:A6:8E:34:F3:38:C9:47:FB:29:07:FA:F5:49:7A
X509v3 Authority Key Identifier:
keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:12:8d:58:b1:da:29:e5:67:ec:e5:b2:39:48:72:c3:e8:54:
f2:df:a8:a2:c0:3e:12:96:c6:a1:14:10:c2:85:dc:82:ca:30:
85:4e:65:6b:76:96:e1:c4:bb:fd:82:71:e8:04:72:5b:42:f0:
21:99:26:93:05:3d:8d:55:cd:36:d2:58:e7:ac:7b:f6:72:46:
d8:9b:e9:47:05:6a:8f:7a:b4:82:d0:da:9e:f8:c6:2e:ae:15:
0c:16:78:05:d8:15:12:2e:55:59:d9:8f:11:fe:60:0d:6a:80:
12:40:38:04:37:68:ed:ee:7f:6d:a2:f3:9e:b2:1d:89:e8:37:
49:fe:2f:da:8f:9e:a1:58:08:9c:7e:c6:dc:df:3d:ac:ae:b8:
ba:a8:6a:97:36:c5:eb:bf:fa:93:21:1f:09:31:13:75:53:1b:
ae:64:cf:c6:6a:1e:c1:8f:6b:93:c7:55:1e:14:91:61:bd:6a:
08:ff:a2:70:b6:e0:f7:76:79:86:b7:4b:55:da:77:46:c5:6b:
85:6a:82:d2:9f:3f:34:2c:a3:6a:e1:e0:05:8e:a9:16:52:03:
3a:ab:5b:3c:64:af:77:6d:74:c2:ee:30:f6:8d:4a:11:55:dc:
32:68:c0:84:5f:9a:ce:8d:cb:7f:87:0c:e0:57:12:b5:7d:65:
df:72:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:05 2026 by rpki-client