
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier: OkQCI4rQm5vOISR6N+OP5lrdJ+PdFgyOsm/Z8ex2zr4=
Subject key identifier: C6:70:8D:41:85:81:55:FB:1D:76:A8:A1:C1:FC:E6:13:F2:66:6C:06
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number: 0145
Signing time: Wed 29 Jul 2026 06:40:18 +0000
Manifest this update: Wed 29 Jul 2026 06:40:18 +0000
Manifest next update: Wed 05 Aug 2026 06:40:18 +0000
Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: 7SyoyYoRIHAL7f9W57EfG1KXLhYFasAB4W7GLw67b3o=)
2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Validity
Not Before: Jul 29 06:40:18 2026 GMT
Not After : Aug 5 06:40:18 2026 GMT
Subject: CN=6a69a052-62ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:69:0c:9d:36:46:29:ef:03:b9:02:39:82:
6c:3d:4a:2a:57:66:b1:41:e2:68:8f:ca:c3:6b:f9:
7e:7d:f2:d3:28:d5:a1:75:98:54:52:b2:6c:bc:7c:
1e:9c:03:39:59:85:f9:0a:b3:b7:1b:c3:e5:56:9c:
ef:4b:1d:45:b5:d5:18:a6:d2:70:91:6a:8d:aa:1e:
6c:2c:b7:99:14:27:a8:1b:b4:4f:16:52:02:da:b4:
11:15:33:bb:73:f4:83:fb:bc:86:f3:47:0b:94:fe:
4a:56:8e:41:17:88:91:3a:e1:97:a9:ff:09:42:52:
ad:5e:82:b1:b8:69:36:b1:70:1c:c0:71:03:44:0f:
85:4c:d2:f4:79:8f:b3:07:97:46:1b:27:a6:fa:4e:
1c:c1:58:17:66:2a:a3:7b:90:1b:93:8c:80:87:ac:
72:0e:de:f4:2a:07:f7:60:00:b0:1e:aa:d8:2e:af:
11:09:35:63:03:5f:69:82:1e:11:b2:c7:3c:69:1f:
36:09:f1:66:e9:97:bb:99:c2:9c:06:f8:5d:70:0c:
b4:07:8a:63:18:3e:59:0e:6c:0a:4e:60:06:23:62:
5d:df:31:d6:2d:fd:81:e0:5e:21:03:ff:ed:9a:26:
8f:b1:14:7f:fb:43:28:c3:72:22:d0:28:01:8b:44:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:8D:41:85:81:55:FB:1D:76:A8:A1:C1:FC:E6:13:F2:66:6C:06
X509v3 Authority Key Identifier:
keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:7b:6a:59:d2:b0:91:95:d0:2d:d7:21:7f:98:99:58:b2:
d6:08:81:ed:ae:e4:d8:7e:a3:9c:0f:fb:a3:6d:ed:2a:f1:49:
89:e6:a9:32:c1:14:cc:2b:00:78:bd:15:e9:65:98:8d:50:a4:
42:5f:30:cb:ee:5c:fb:30:5d:08:d2:38:b9:13:8f:48:df:e3:
d0:a3:00:de:34:96:f8:7e:d6:15:87:26:36:4c:a5:96:55:ab:
85:7b:65:14:b0:e0:1b:0f:4c:cd:64:39:ab:2c:7e:1c:13:f0:
06:1e:fd:aa:4e:3e:a6:ec:2a:ed:53:05:d5:2f:dd:17:d3:4d:
5b:10:f9:c4:97:4b:49:33:4f:d0:93:04:8c:3d:f2:d7:e4:dc:
b5:de:26:21:bf:8e:a9:d5:ef:82:bc:4c:23:cb:b4:1b:13:ad:
b3:7e:98:bd:dc:ec:83:75:b3:9e:be:91:91:71:99:35:4d:cb:
10:b1:c8:68:10:54:be:d4:17:23:b8:b7:f9:f4:b0:55:87:65:
cf:94:5a:15:62:b4:be:94:45:87:45:a3:b8:ca:52:8f:87:8a:
fc:3a:1d:60:fe:6b:96:18:2f:fb:63:a4:8e:a3:01:fd:01:36:
45:43:64:f3:46:79:ed:3e:bc:08:ec:c0:ba:31:13:7a:fb:cf:
c1:59:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:55 2026 by rpki-client