
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier: 3Zx8hgZVQ0Se4molDJty6/+ZRfKhYk4Xe+xIjLZWEKY=
Subject key identifier: 6F:70:7E:50:2B:78:A8:22:DF:27:47:DF:01:B7:AC:E1:CA:93:B6:C3
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial: 0564
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number: 055D
Signing time: Mon 27 Jul 2026 00:19:57 +0000
Manifest this update: Mon 27 Jul 2026 00:19:57 +0000
Manifest next update: Mon 03 Aug 2026 00:19:57 +0000
Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: iR2TVpSswwIUe5ygADsx6gKMWphPHwIsSiIb5Isrflc=)
2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: 7nE2sjWaqJwApCwjBQjwmTVTdgonybAUx01R5hVKq1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Validity
Not Before: Jul 27 00:19:57 2026 GMT
Not After : Aug 3 00:19:57 2026 GMT
Subject: CN=6a66a42d-e61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:bd:ad:f7:99:8a:78:dc:2b:7e:c6:1b:e5:
a0:04:0c:b1:d4:6e:37:e9:e3:5c:10:9f:b6:82:fe:
46:e2:f8:69:79:b1:48:5f:1f:df:35:8b:95:51:ec:
09:dd:a1:39:53:fd:94:48:69:43:54:d4:b4:4d:73:
a3:82:82:30:90:75:87:10:cc:07:18:4b:ab:78:65:
8a:58:fa:93:6a:56:91:bc:22:23:55:d4:b8:c9:c7:
44:82:59:04:4b:6b:8a:af:63:ec:9f:22:12:2e:13:
6a:7f:43:84:10:2c:3d:8f:54:9c:a2:fb:9b:a1:04:
6b:d4:28:ce:e0:98:36:12:09:ff:e5:78:f0:14:b4:
fd:a2:f5:66:f0:fb:48:bf:fe:0b:c0:7e:c3:a2:32:
9f:08:ae:a7:a8:6b:a2:be:d3:b3:61:22:57:29:3e:
23:51:16:3a:6a:a9:b0:f8:7a:80:e6:22:18:a7:91:
0e:d8:bb:3d:47:2d:b6:e8:2b:d5:1f:8e:dd:a4:63:
5a:57:87:48:a4:4f:94:85:04:1e:59:64:b7:5f:99:
3d:b7:e6:27:49:bf:d7:a4:3d:d5:d9:89:d6:8d:e7:
ab:5f:8e:a4:73:d6:f9:6e:ae:99:ee:d0:1f:84:a0:
5f:58:e9:37:3b:83:e3:73:ee:05:c5:29:ad:6f:e9:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:7E:50:2B:78:A8:22:DF:27:47:DF:01:B7:AC:E1:CA:93:B6:C3
X509v3 Authority Key Identifier:
keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:ea:7a:30:e7:0e:86:d3:1d:94:34:d1:9c:e6:23:ad:35:fc:
68:2e:29:bc:20:ca:ec:29:16:6d:17:c7:cb:d6:22:c2:92:bb:
4f:90:b1:3a:94:31:7a:f5:4f:b8:4c:e5:0c:99:5b:90:9a:0a:
d8:4d:47:c6:b6:3f:28:e0:6e:49:ee:c3:52:af:78:5f:bb:6e:
a5:b2:91:3f:15:15:1c:55:1c:fa:74:73:86:14:b5:f9:b0:d7:
86:94:17:f5:67:91:b7:d7:96:b2:6f:f8:cf:a6:ea:38:f5:5b:
c6:89:4d:3c:85:0d:40:3e:9d:40:d6:33:48:c0:29:04:88:bc:
23:97:76:e7:0c:9e:c6:bd:f9:7b:18:68:62:77:4a:ca:58:0e:
74:eb:ef:19:cc:e8:26:39:d0:17:4c:4e:71:0a:6e:0b:c8:68:
6b:e9:0a:b4:d6:47:74:4b:d3:8c:ab:61:4b:dc:77:c3:3d:90:
6c:9a:ee:ec:50:55:80:90:ba:af:bc:1b:cf:14:9d:63:53:bb:
59:b5:be:81:40:c7:73:6c:dc:0c:2b:cf:d2:a6:6a:d0:db:7f:
10:fa:0b:a0:d6:96:31:af:17:d4:11:00:cc:a7:60:c5:27:a1:
10:0a:a7:eb:ac:67:73:b1:f9:56:a1:9c:c5:70:85:73:15:3f:
9b:b0:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:29 2026 by rpki-client