
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json)
Hash identifier: RBSlyx+UDflDSh25LXJ3LsnW8IuGAGoVaqyALnzQdao=
Subject key identifier: C5:D9:F6:F7:52:5C:DD:12:64:BE:D2:C7:CE:7F:0B:28:F9:36:A3:AE
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial: 0590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
Manifest number: 0587
Signing time: Mon 27 Jul 2026 00:13:24 +0000
Manifest this update: Mon 27 Jul 2026 00:13:24 +0000
Manifest next update: Mon 03 Aug 2026 00:13:24 +0000
Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: 7iIRxUXeEWPnjSFYo6HAsacdXPb8n2WKhQQc32qcApg=)
2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: B6CC/RNc0uDFwuWTWP/NiLZwPjDbRJsc4txXeS3lvW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Validity
Not Before: Jul 27 00:13:24 2026 GMT
Not After : Aug 3 00:13:24 2026 GMT
Subject: CN=6a66a2a4-423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:04:54:5c:b0:07:ba:9f:85:fd:14:2a:54:
c1:83:d3:66:53:20:c6:fb:24:ae:ab:3e:f7:f6:fd:
76:7d:ef:59:c8:14:86:02:27:0b:fb:fc:68:85:57:
2e:fa:c8:47:2c:ce:37:7f:7a:d1:3d:8f:f7:db:1d:
54:6d:4b:b0:f3:06:2f:a5:f9:07:a3:d5:aa:fe:a7:
cc:37:0a:ea:7a:1f:7f:6e:aa:33:c6:3d:bb:51:1c:
c7:ac:04:de:bb:60:e4:7e:75:38:7b:82:95:74:9d:
af:13:bb:a0:02:15:5e:73:63:5a:16:17:d2:96:ed:
8f:01:b1:39:05:46:bf:5d:51:67:ae:f6:35:0c:25:
08:03:ab:63:fa:cc:18:ce:19:c5:04:9c:b6:75:59:
74:a8:a4:7c:c3:46:52:f2:3b:72:ff:5c:37:e7:8a:
e3:71:9a:ab:19:dd:85:d9:e7:04:c3:fd:74:4b:95:
31:22:7e:a2:c8:a3:64:73:fe:bc:40:25:62:db:07:
d9:93:75:12:be:c9:7b:19:30:29:05:db:1e:a5:7d:
dd:68:12:5d:f6:c5:18:52:4e:ec:02:de:89:c4:6b:
3f:16:dd:47:9a:52:b2:6f:56:cc:ad:b7:81:7b:67:
bb:4f:ce:7a:21:a6:45:5b:67:10:f1:65:35:c5:3d:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:F6:F7:52:5C:DD:12:64:BE:D2:C7:CE:7F:0B:28:F9:36:A3:AE
X509v3 Authority Key Identifier:
keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c9:13:43:50:09:80:34:b9:76:de:3c:80:7b:12:10:76:5e:
fa:d1:1c:f5:b4:79:06:d7:33:12:13:5d:94:cb:6f:01:31:33:
35:77:aa:9b:37:cb:d6:5c:4f:81:cf:02:ff:d4:43:28:6c:fa:
f7:2c:49:74:5d:06:47:40:3f:1b:3f:35:c5:9e:ef:8f:d3:10:
49:76:30:93:7f:80:d1:f8:2f:de:28:0c:cb:be:45:96:de:31:
af:8c:5b:c8:1c:84:16:28:e6:b5:e1:5f:36:e6:da:93:e0:5d:
ff:7f:af:a4:ff:05:25:d6:aa:0f:cd:45:0b:d7:d0:fe:bb:7a:
95:24:ec:50:8b:f4:0d:aa:01:94:ce:24:6d:a2:c7:f4:fc:e0:
31:fd:7c:c9:f6:41:f4:e5:f5:d2:6d:ef:e5:a8:45:06:20:34:
9f:4d:83:41:62:d2:a7:63:c5:9f:a4:87:6b:75:63:fc:bd:3d:
b5:15:38:c2:a6:07:92:fa:39:f6:67:58:ef:68:7b:07:84:a9:
bb:df:9f:8e:ce:64:4f:a1:d0:d0:da:43:83:f3:60:14:b1:2f:
b0:d8:28:ab:d4:53:a0:92:3f:eb:2f:c4:6e:df:62:72:37:82:
10:28:e4:e8:81:a8:e6:04:f7:b1:73:59:31:2b:29:79:97:fc:
a7:e0:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:50 2026 by rpki-client