
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json)
Hash identifier: bvtYe33PYeiereluccdVrRKFEw06Dn16XWfMzJ5qhl8=
Subject key identifier: AD:85:76:8E:4F:01:A8:D8:5A:1D:88:5B:0F:D0:E6:B6:7F:CF:88:B5
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
Manifest number: 018B
Signing time: Mon 27 Jul 2026 06:17:06 +0000
Manifest this update: Mon 27 Jul 2026 06:17:06 +0000
Manifest next update: Mon 03 Aug 2026 06:17:06 +0000
Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: PGvtjdAH5Ic4LZ+17YZP8PMITmd7uSeqmMaZRw29WZQ=)
2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: qus/VWO/zFuK4o4owMyuzTPVboELwpYdKngfvhC2x7c=)
3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Jul 27 06:17:06 2026 GMT
Not After : Aug 3 06:17:06 2026 GMT
Subject: CN=6a66f7e2-fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:4e:fa:a8:cd:3a:0a:ac:79:a7:de:6a:78:
44:49:b3:55:ae:50:59:9c:f7:15:f2:78:ba:32:a1:
26:5f:f7:aa:d1:c3:a5:24:46:04:a6:9c:5a:b2:46:
6d:d3:b6:fa:d6:1b:e5:5f:91:cf:64:a0:2e:1f:6a:
2c:d8:44:b0:a9:9c:e5:15:6f:76:84:c5:ea:54:56:
38:92:fd:e0:fb:47:fa:ad:39:b0:af:59:6f:6c:78:
6f:c0:36:28:b7:34:b8:1d:6d:08:ef:fe:a7:66:c7:
79:a7:09:c4:77:05:c8:31:ea:fa:e4:bc:30:d1:e1:
53:3b:87:83:cc:cc:8e:96:f1:d8:85:a3:ff:01:e3:
34:2f:17:38:90:dc:17:02:4a:a4:f9:be:af:5c:2a:
f9:97:88:57:d5:65:3c:f2:d9:cb:6a:71:9f:64:de:
a2:a7:8b:de:9a:18:d1:a1:6b:ba:be:b1:9e:68:2d:
62:5a:ec:a7:86:45:f0:b2:18:b8:cf:e4:e6:ef:6d:
aa:c1:32:79:83:81:dd:5d:91:7a:86:02:7c:d6:20:
77:2c:7b:e9:7b:90:3a:3e:4c:80:de:15:37:8e:f0:
67:73:7b:d4:d5:6b:85:77:d9:82:2b:ef:fb:aa:8a:
ef:90:26:33:df:dd:db:0c:ea:b6:f0:96:e7:eb:ca:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:76:8E:4F:01:A8:D8:5A:1D:88:5B:0F:D0:E6:B6:7F:CF:88:B5
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:e2:69:a8:a9:ea:21:ee:93:28:24:29:00:1c:9c:d3:77:
00:7d:33:e5:d2:cd:f5:78:1d:53:6a:04:e7:69:b8:b4:e2:b1:
f0:3a:3d:8d:ce:b8:62:a9:81:0e:a2:8b:21:ff:0d:3d:3f:a9:
00:53:e2:82:b2:4b:e9:8f:40:95:d0:ed:32:58:d4:94:95:92:
5c:ae:de:23:3b:c5:49:87:17:55:17:9d:0b:84:f7:a4:07:b2:
ac:45:53:56:8c:c6:c1:c6:e2:b3:00:3f:52:2a:c0:65:bd:d0:
ca:c9:05:f2:3f:6b:a0:85:53:d6:5d:6d:60:cd:eb:66:52:8f:
71:e9:b8:c4:d4:15:9b:6e:a9:41:92:f3:0f:ca:95:29:06:4a:
6f:63:96:c9:04:ad:22:1a:ce:90:ec:2c:8c:79:d8:1e:cf:b9:
86:1d:05:0f:1b:da:92:0a:5c:15:6e:c3:df:e3:d1:cc:e5:76:
54:ea:92:32:cb:4d:a4:8a:0b:02:5c:48:57:29:19:e9:13:ab:
d6:6c:35:7b:a5:c8:bc:ae:ac:91:12:25:ad:c2:49:ee:50:08:
b1:22:0b:54:65:27:5c:fd:9f:60:c7:5f:3f:93:64:d5:60:b6:
c6:6b:4a:74:23:b1:0a:6f:48:e3:2f:40:5c:90:df:91:93:34:
5b:6b:58:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:37 2026 by rpki-client