
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: f32zZjmxuLT5FTmFmKf62P7HvmdMjrqnSdoXIzKqNdQ=
Subject key identifier: C4:11:63:02:6F:97:25:9D:69:9E:F2:4A:84:CD:1E:2A:50:96:99:9C
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 2416
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 23E2
Signing time: Tue 28 Jul 2026 15:54:03 +0000
Manifest this update: Tue 28 Jul 2026 15:54:03 +0000
Manifest next update: Tue 04 Aug 2026 15:54:03 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: PwBvnzp/y8I5VvEsbOI18/eYb8srlZXEyh6S6ZZzs7Y=)
2: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=)
3: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9238 (0x2416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Jul 28 15:54:03 2026 GMT
Not After : Aug 4 15:54:03 2026 GMT
Subject: CN=6a68d09b-b9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:cf:d6:c2:79:e5:27:a8:41:09:f1:ce:61:
bb:7f:1b:98:75:fa:67:f3:a2:86:6a:dd:ba:2d:9e:
41:9f:e2:d9:c8:03:d0:d1:6b:e4:93:de:05:79:70:
e6:12:2d:71:ff:88:a4:14:54:0d:70:bc:89:fa:ca:
e6:47:20:5d:f2:f3:75:7f:10:5b:b8:e1:ed:82:ea:
a9:1d:b8:e6:ff:e1:ce:89:48:25:b0:3f:4a:99:79:
e4:03:8f:48:01:ca:52:8a:88:d8:0a:88:0e:0c:c9:
a7:77:49:7f:c1:d4:c2:27:e5:f5:3a:e2:dc:57:47:
d2:bf:98:59:ba:34:23:7d:8f:0b:16:db:dd:c1:d4:
84:71:50:5c:27:bc:3f:b2:e3:93:66:eb:8d:ed:d1:
6b:96:67:61:46:b5:3d:17:02:26:13:e0:18:72:fe:
75:01:00:00:28:1a:3b:b1:4a:75:5b:a0:c7:60:b4:
bc:6c:cd:aa:bd:21:1f:98:54:12:b4:b9:40:d8:b9:
11:89:eb:76:3b:d5:61:ba:80:21:47:ef:3f:d7:b5:
77:ae:4e:c5:8b:dc:c9:2a:51:13:6e:69:f6:85:59:
1e:ef:56:ec:3c:df:98:90:0e:0a:61:ed:4c:e5:2b:
ee:24:91:19:85:1c:52:6b:c0:f6:1d:42:92:d7:b5:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:63:02:6F:97:25:9D:69:9E:F2:4A:84:CD:1E:2A:50:96:99:9C
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:ae:d4:e9:09:98:c7:51:eb:1f:4e:c3:9a:50:8e:5f:53:
04:3a:20:93:00:5f:47:7f:e7:f9:85:d3:b3:05:3f:fe:72:e4:
a5:60:09:ce:a8:02:d3:25:df:b7:30:0b:57:b2:77:91:77:72:
a9:66:8c:b0:21:ed:44:f9:50:ac:da:db:4c:41:57:01:6e:1a:
1b:db:32:c9:1e:94:d2:be:93:09:e9:02:6b:6a:bd:01:2b:17:
a2:28:e5:a9:f9:45:06:70:9c:2a:52:4a:7c:58:2a:f2:4f:4c:
35:23:49:2f:cd:17:4f:a5:61:3a:fe:46:46:f0:eb:ca:53:2d:
85:1d:26:8f:f6:21:73:0a:ec:c1:d7:4f:39:19:4e:f2:c7:a3:
be:d0:ab:b1:88:f1:ed:8d:d5:df:d0:ca:bc:c6:61:09:36:93:
b7:5b:44:07:0b:48:a5:69:6f:b8:a4:ac:29:08:43:4a:eb:ac:
6f:54:bf:98:1f:d0:3d:ac:6f:2c:ec:27:cc:fc:7b:d2:54:99:
91:b5:7d:b8:aa:21:7a:8f:46:ec:2d:c7:be:2f:c3:e8:c6:09:
79:3c:74:b2:0d:16:3b:d3:92:54:d6:ac:98:1f:b2:9b:5f:a1:
8c:71:7c:fb:2a:2b:a2:a0:92:ed:14:b2:a9:a3:02:c3:b1:39:
7c:ae:56:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1
QkQ5NDFFNDAwHhcNMjYwNzI4MTU1NDAzWhcNMjYwODA0MTU1NDAzWjAYMRYwFAYD
VQQDEw02YTY4ZDA5Yi1iOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ZXP1sJ55SeoQQnxzmG7fxuYdfpn86KGat26LZ5Bn+LZyAPQ0Wvkk94FeXDm
Ei1x/4ikFFQNcLyJ+srmRyBd8vN1fxBbuOHtguqpHbjm/+HOiUglsD9KmXnkA49I
AcpSiojYCogODMmnd0l/wdTCJ+X1OuLcV0fSv5hZujQjfY8LFtvdwdSEcVBcJ7w/
suOTZuuN7dFrlmdhRrU9FwImE+AYcv51AQAAKBo7sUp1W6DHYLS8bM2qvSEfmFQS
tLlA2LkRiet2O9VhuoAhR+8/17V3rk7Fi9zJKlETbmn2hVke71bsPN+YkA4KYe1M
5SvuJJEZhRxSa8D2HUKS17XysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQRYwJv
lyWdaZ7ySoTNHipQlpmcMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0
ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz
OWs1RUpKcG91VjFiMlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX1+u1OkJmMdR6x9Ow5pQjl9TBDogkwBfR3/n+YXTswU//nLkpWAJzqgC0yXf
tzALV7J3kXdyqWaMsCHtRPlQrNrbTEFXAW4aG9syyR6U0r6TCekCa2q9ASsXoijl
qflFBnCcKlJKfFgq8k9MNSNJL80XT6VhOv5GRvDrylMthR0mj/YhcwrswddPORlO
8sejvtCrsYjx7Y3V39DKvMZhCTaTt1tEBwtIpWlvuKSsKQhDSuusb1S/mB/QPaxv
LOwnzPx70lSZkbV9uKoheo9G7C3Hvi/D6MYJeTx0sg0WO9OSVNasmB+ym1+hjHF8
+yoroqCS7RSyqaMCw7E5fK5W/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:31 2026 by rpki-client