
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier: F4F488x9Yp4/8SMEngTTXS6j1ZjJae0yTrl4mofyq5s=
Subject key identifier: AC:F0:72:B8:1F:1A:F8:34:DE:8B:5F:22:4E:AC:27:8A:48:D0:01:54
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial: 3562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number: 3562
Signing time: Tue 28 Jul 2026 15:08:46 +0000
Manifest this update: Tue 28 Jul 2026 15:08:45 +0000
Manifest next update: Tue 04 Aug 2026 15:08:45 +0000
Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: usbF6tEOOAqGLCCKKRZEuW5fJQlvhOsoJrR7j8B6tcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Validity
Not Before: Jul 28 15:08:45 2026 GMT
Not After : Aug 4 15:08:45 2026 GMT
Subject: CN=6a68c5fe-0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:a8:9d:b3:d2:b5:ed:43:6a:1e:87:e9:a0:
e5:dc:6c:c3:54:82:e1:31:56:b8:da:df:47:66:ee:
66:61:e0:0c:56:09:fb:b8:c5:a4:75:3d:7b:91:4b:
90:01:14:9e:b3:9a:f9:63:80:e9:cc:3e:8a:24:c1:
09:2c:61:9f:81:28:59:39:65:a4:e3:bf:12:b2:b4:
34:83:54:3d:eb:5a:6c:05:4d:5a:d9:7f:53:ce:71:
3a:85:65:75:ab:9c:9f:1e:4c:1f:c6:d7:47:90:4a:
36:27:73:d7:f4:34:5e:9d:eb:0a:1d:e9:2b:58:1f:
20:00:bc:de:41:20:84:0a:c2:3f:a8:7f:72:6e:85:
57:7c:df:96:78:d1:b0:f4:41:20:8d:36:a7:5f:72:
77:fb:a5:b7:fd:03:e1:b2:8b:1d:df:e5:52:68:53:
5a:dd:7f:33:7a:1b:75:02:a4:cf:fb:ef:23:c3:3d:
56:b5:7a:71:69:3a:e2:81:3e:3b:34:d0:a4:62:20:
c0:77:96:c3:c4:5b:ec:12:75:3a:9b:f9:c4:2d:31:
1f:78:01:37:da:47:b2:f0:4c:e6:ca:f1:d1:64:7c:
18:04:fc:e6:e4:03:99:cd:f2:b1:10:b7:a0:3a:63:
3d:7e:08:8e:b0:d1:b4:8b:3f:8f:ed:41:c4:b4:3c:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:72:B8:1F:1A:F8:34:DE:8B:5F:22:4E:AC:27:8A:48:D0:01:54
X509v3 Authority Key Identifier:
keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:fa:28:6a:1e:3b:ca:da:77:8e:14:1b:d4:a2:c4:83:0b:
7c:2d:47:72:14:47:1d:9b:40:9d:8c:9c:da:55:80:9c:f5:2c:
e9:8c:91:ac:f1:ce:d3:6f:0b:6e:f2:59:b0:ed:a0:a6:88:fd:
2b:8d:d3:12:04:1a:7d:5a:42:40:c4:6a:38:21:ce:5e:92:a7:
5e:20:6f:92:a0:23:8e:48:f0:01:cd:82:bc:1c:28:eb:9d:4f:
ca:99:33:25:d9:44:4a:83:2f:f7:e6:49:ad:9f:38:20:5c:72:
d5:c8:72:43:05:23:f1:b7:07:a9:6e:ae:d6:51:91:d5:23:d0:
d7:5b:e5:e4:36:dd:18:7e:cd:8b:a7:eb:a0:f7:1f:79:86:48:
72:85:d3:e6:fb:1f:cc:de:78:03:81:8c:08:67:2e:5b:eb:d0:
b8:2e:35:32:c1:53:cb:9c:0e:1c:69:17:0e:24:dc:f8:ef:14:
49:5d:92:50:85:dd:2e:b4:74:10:68:d5:ef:eb:0f:a1:2d:75:
8b:9b:1f:1b:40:c3:c6:21:e2:e1:e6:22:ed:82:d4:d0:cc:37:
bf:8d:13:85:8b:85:29:dd:50:eb:73:9c:34:83:03:93:af:a3:
a9:ca:be:95:28:d5:78:10:0b:30:2c:60:e1:55:1d:8f:58:10:
76:eb:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:53 2026 by rpki-client