
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
File: XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft (raw, json)
Hash identifier: yGcqIYa5I+avsq/4DL4vmLpouS+Yq5TAHDvvCEEFvzw=
Subject key identifier: 22:D4:51:DF:5F:CE:9F:6A:D0:9F:E5:90:71:8D:CB:18:D8:98:C6:F1
Authority key identifier: 5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
Certificate issuer: /CN=A91C9561/serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Certificate serial: 03CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
Manifest number: 03CE
Signing time: Mon 27 Jul 2026 01:38:03 +0000
Manifest this update: Mon 27 Jul 2026 01:38:03 +0000
Manifest next update: Mon 03 Aug 2026 01:38:03 +0000
Files and hashes: 1: XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl (hash: CmohLyZaHd2eXr5KUh2ZbucPKIDcqqAhWO6TLvjr/Jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl
rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9561, serialNumber=5E3CF0251D8A6006B8285BD0949FCD9BA3F9EBB8
Validity
Not Before: Jul 27 01:38:03 2026 GMT
Not After : Aug 3 01:38:03 2026 GMT
Subject: CN=6a66b67b-1d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9f:63:57:63:bf:ba:82:80:98:82:9f:70:2f:
b7:14:2b:b3:b5:24:41:7e:99:59:f2:58:11:2d:81:
e0:87:15:c3:a5:78:9a:ab:5e:2b:9c:d2:43:3b:b7:
b2:87:a8:e9:be:c8:a6:18:bd:32:ed:51:a0:d4:fa:
43:1e:d4:b3:25:2c:49:d4:69:5b:f2:6e:d6:06:6c:
dd:24:4d:67:f1:4c:95:2e:c7:d2:ab:e6:69:ea:d2:
17:e8:b6:b9:99:c4:92:00:6b:e8:d4:3f:35:fa:a2:
16:42:13:86:29:15:ce:d0:a4:3c:b8:5c:87:79:fd:
86:98:d0:4b:a1:0f:4c:88:66:ea:af:2f:38:a5:b2:
31:21:92:2f:09:80:c5:ef:11:9e:37:d4:e4:32:61:
f3:8b:74:97:9c:84:4d:61:18:fe:80:b1:1f:17:8c:
9a:cd:ba:fa:0b:82:e0:c1:64:df:fc:63:51:e0:dc:
c6:5a:83:56:db:95:20:c2:fb:8e:54:5e:fa:de:02:
e9:55:17:6b:c8:42:fd:2e:7b:9f:16:16:02:52:27:
41:f3:63:69:63:72:8a:cc:80:96:5c:8b:32:56:08:
38:26:74:c6:1d:4d:ed:76:a3:dd:1e:90:32:0f:0b:
6a:5d:99:b9:54:1b:e6:97:65:45:06:84:87:69:b3:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:51:DF:5F:CE:9F:6A:D0:9F:E5:90:71:8D:CB:18:D8:98:C6:F1
X509v3 Authority Key Identifier:
keyid:5E:3C:F0:25:1D:8A:60:06:B8:28:5B:D0:94:9F:CD:9B:A3:F9:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XjzwJR2KYAa4KFvQlJ_Nm6P567g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9561/C9A8DFDADA6911EC9C815358C4F9AE02/XjzwJR2KYAa4KFvQlJ_Nm6P567g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:3d:27:f3:5f:34:a1:e4:0a:d6:2c:8f:86:2d:63:c9:ab:
3c:9f:05:fb:36:05:ef:9b:18:eb:ae:94:a8:b7:ca:81:04:a8:
25:59:5b:9c:23:23:ce:89:f3:8f:2d:29:9a:87:fd:1e:98:09:
36:f9:3a:6b:8d:ce:89:34:de:40:94:b2:6c:f6:ef:3f:31:9e:
7d:89:14:16:e0:45:c6:1f:ab:97:47:e0:2d:d6:6e:57:5b:99:
79:9e:f8:b8:48:74:ba:4d:c1:94:b3:d7:d5:44:28:31:12:24:
3c:67:d2:a4:13:4a:49:51:4d:d2:ac:a1:31:80:6a:fe:ab:07:
d6:b8:cd:1f:21:65:ac:c9:57:71:b4:02:b9:36:37:8c:95:3d:
8b:06:de:14:1d:61:5c:c7:78:1a:c1:2c:c2:d4:d5:87:b3:6f:
00:6f:fd:1d:88:f5:22:fc:9e:55:31:66:69:4a:08:f0:7f:88:
9c:b1:e3:ad:bd:18:94:d4:59:22:ef:59:b3:ac:f1:8b:c2:ed:
d2:a9:14:36:8f:6e:a6:3f:21:d5:be:30:b2:4d:52:41:b4:d7:
71:e9:bd:a0:d5:62:9f:48:74:03:cd:e4:62:e8:82:f0:03:98:
f8:9e:a2:69:cf:b8:42:0d:16:ef:8e:53:17:52:2b:a2:3c:ae:
26:cc:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:29 2026 by rpki-client