
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
File: Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft (raw, json)
Hash identifier: PFWTHldSFfIN+EG6nXHawhTKo8HY1VDpsVegn+WDvz4=
Subject key identifier: 4E:9C:64:65:F7:C8:D7:3B:EB:FF:54:28:0B:71:B8:C6:EB:B5:46:68
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Certificate issuer: /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
Manifest number: 33
Signing time: Mon 27 Jul 2026 11:00:50 +0000
Manifest this update: Mon 27 Jul 2026 11:00:49 +0000
Manifest next update: Mon 03 Aug 2026 11:00:49 +0000
Files and hashes: 1: Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl (hash: BIWoUZU48drzsF8Hz5/F3ekzSwbW6R/g/mzkyCj037A=)
2: 8533A604448D11F19D9C22A9A7833773.roa (hash: ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Validity
Not Before: Jul 27 11:00:49 2026 GMT
Not After : Aug 3 11:00:49 2026 GMT
Subject: CN=6a673a61-bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:7f:c8:e2:4f:23:e8:e7:41:db:29:29:2c:
aa:ae:e4:62:66:5d:1a:10:e3:d6:51:aa:c3:2d:dc:
fc:91:0f:cc:f2:ed:3e:a0:50:10:6a:6a:98:46:b8:
19:97:a2:f5:cb:3d:74:31:75:01:38:c2:a0:6b:13:
11:c7:64:b7:e4:6f:a2:1d:a0:17:0c:0c:b1:87:75:
e9:dd:bf:3a:7b:a9:e3:55:1a:23:35:72:25:ae:c1:
ef:b2:47:9b:0c:16:35:be:5c:fe:f1:86:d6:e5:86:
bb:fe:0f:9c:9d:a8:c1:30:cc:38:5a:25:23:9c:40:
1f:43:ff:45:b0:5e:cb:bb:3e:2e:d2:86:a9:df:a6:
82:53:ce:96:dc:92:29:fb:36:ef:64:33:ed:f9:19:
b1:6a:2c:16:d1:da:43:f7:76:7b:08:01:f3:3d:28:
92:84:07:99:47:e3:f2:6d:f3:a1:41:ca:58:90:0a:
0a:50:10:41:e8:3b:17:ad:a0:9f:0d:96:11:e9:5c:
e1:81:9e:ff:db:cb:be:b5:15:8e:e6:7b:e7:8b:49:
56:74:de:59:51:93:db:c3:4b:b9:ba:a9:79:01:2a:
46:ac:d5:83:77:d9:ff:fd:7c:ee:40:f4:8f:0a:38:
73:b4:f2:16:5a:07:ab:82:65:3c:79:22:46:e5:84:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:64:65:F7:C8:D7:3B:EB:FF:54:28:0B:71:B8:C6:EB:B5:46:68
X509v3 Authority Key Identifier:
keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:e8:47:94:bc:bf:52:13:d1:f4:b9:28:b0:bb:69:48:00:
6d:fa:d0:60:d6:38:25:0b:a3:8f:2b:40:92:65:7a:34:f2:a2:
98:45:d1:2f:67:34:da:5a:4f:8a:8b:75:e8:e9:c2:57:55:c3:
1d:1c:19:c2:c2:ad:fe:9f:eb:a1:02:35:79:38:4b:21:db:26:
6c:0e:9b:51:71:57:65:e7:73:d9:11:91:24:96:59:e4:9f:55:
96:c7:81:4d:3b:5b:ea:fc:d3:82:fb:3a:65:b1:ce:90:94:ea:
1a:dd:bc:d8:6b:b6:d2:66:0d:a0:ea:9d:e5:e4:55:45:21:5e:
eb:be:98:2a:ac:84:ee:d3:4d:35:0f:d4:ec:f9:9f:ca:68:84:
cc:3d:18:04:6b:fe:9d:0f:03:96:96:92:8b:8f:8a:22:57:2b:
62:22:da:8a:9d:54:84:df:52:06:a5:ac:46:80:71:b1:07:3b:
37:e8:83:e3:33:c8:d0:0c:c8:e6:db:da:ce:99:3b:40:56:e7:
21:7e:ce:10:83:2d:bf:6c:31:33:c0:78:06:ef:24:58:f0:c4:
51:94:cc:a5:53:7d:61:86:d8:55:95:a1:76:6b:99:0e:90:34:
7c:ce:c0:6b:a7:ea:ea:be:7f:71:04:13:27:fa:7d:79:7d:c7:
0a:53:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:37:55 2026 by rpki-client