
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier: ezuVOaG8mBePOjX1k+1m+KikkhJT4zwwDnf4/CbUYWI=
Subject key identifier: 69:4C:F4:1D:0C:4F:9F:3E:56:30:B2:31:DC:B7:14:F5:49:36:E7:33
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number: 04E3
Signing time: Mon 27 Jul 2026 00:51:34 +0000
Manifest this update: Mon 27 Jul 2026 00:51:33 +0000
Manifest next update: Mon 03 Aug 2026 00:51:33 +0000
Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: eF5/SLzdiscwE+FsfoGKhvhdS0l9m6Iw5+gcUsVPwAg=)
2: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
3: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
4: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
5: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
7: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
8: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
9: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
11: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
12: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Validity
Not Before: Jul 27 00:51:33 2026 GMT
Not After : Aug 3 00:51:33 2026 GMT
Subject: CN=6a66ab95-8a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:0e:d0:da:d7:9b:7c:68:2f:97:a5:51:4d:
54:53:01:cb:79:15:9b:7c:5b:d9:f4:42:b0:8b:b2:
df:ed:59:a3:62:16:b2:73:e5:f9:25:ae:27:11:e5:
21:53:38:0d:3e:69:e2:75:52:7e:9f:51:80:33:93:
86:13:84:d4:cf:cb:d0:09:7e:63:5d:93:19:39:e7:
31:1f:79:fe:c2:79:51:98:75:42:c1:ea:88:81:cd:
ad:c2:17:37:e3:5c:3b:92:9f:c1:c1:f6:87:f6:bf:
e2:05:a2:75:3f:bd:27:d6:31:52:c6:a0:2f:89:0a:
7e:7a:38:6b:46:20:e5:68:e5:59:f2:b5:c8:b0:9a:
eb:6f:fb:7f:3a:1a:ce:6d:07:4b:7e:c9:66:f5:b5:
88:01:24:a6:23:48:51:89:fa:81:dc:39:0d:e7:bc:
84:b2:1e:7b:f8:9b:0d:a3:66:12:b0:42:02:db:b5:
61:cc:fe:df:4c:f8:09:88:66:e5:dc:83:cd:f2:74:
97:9d:81:03:5b:61:2d:b5:9c:8d:e5:d3:aa:0f:af:
4e:f7:3c:46:22:25:8a:6e:1a:f6:9a:58:fb:47:b7:
77:b7:b3:30:f6:88:85:0f:3a:5c:1e:14:3e:09:71:
09:db:d2:4b:cb:87:ad:5f:31:22:35:14:6e:ed:64:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:F4:1D:0C:4F:9F:3E:56:30:B2:31:DC:B7:14:F5:49:36:E7:33
X509v3 Authority Key Identifier:
keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:9a:27:8b:60:2a:48:4e:1d:72:50:d8:e9:15:4f:22:b1:
d6:44:0b:96:fa:3d:bd:2e:c6:e4:11:42:6a:85:19:ce:31:0d:
a8:05:36:95:a9:21:c5:4a:55:f4:00:85:64:0f:ae:53:8f:53:
4c:3a:ab:fc:c9:41:b0:58:e3:2c:df:6e:7b:7d:49:b4:d3:d7:
45:fd:44:fb:62:fd:60:95:9a:59:57:82:6f:a9:5a:a8:77:3d:
43:82:9c:4d:5a:3a:08:6b:7d:ca:d6:d1:eb:31:eb:4b:71:ec:
17:6c:90:b6:f2:27:0a:bd:47:bb:7b:16:f4:df:f4:3b:3b:cb:
42:86:03:f8:1d:df:0d:9e:d2:f8:51:16:f9:a6:01:c2:94:d5:
37:4e:c7:87:56:af:23:75:96:d0:25:be:4e:1c:65:09:0c:86:
ef:75:24:ae:ae:76:dc:d6:99:a5:9e:74:79:72:33:1a:15:4b:
db:3f:7f:57:6c:28:4f:ee:2c:e5:9b:97:23:ff:4f:60:f3:4b:
72:0b:48:dd:60:88:f2:03:f9:03:20:06:57:2f:0b:c4:48:31:
ef:d3:22:65:48:0b:4a:2f:7d:7d:46:b1:5a:75:05:59:4b:7a:
bf:84:9c:74:30:1b:fd:06:36:71:9b:07:0e:57:80:31:45:89:
dc:2d:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:49 2026 by rpki-client