
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json)
Hash identifier: IZEhpUP2uPb3ckAMOrm0Xu5+5RY7JkEAuzcJaJQ09Bc=
Subject key identifier: B6:C5:EA:2A:63:70:EF:CD:59:B1:83:C7:99:D4:31:F8:E6:C3:01:17
Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Certificate serial: 0413
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
Manifest number: 03F4
Signing time: Mon 27 Jul 2026 01:35:35 +0000
Manifest this update: Mon 27 Jul 2026 01:35:35 +0000
Manifest next update: Mon 03 Aug 2026 01:35:35 +0000
Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: FyMF5R8rgngVo+bfRigu7a6EWSMw0ZMPn5XiQ1t2Puw=)
2: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 4Abgy+X2ZW9Ha0ytPuEUdXVUheE/F+OPg09zPVRwTxg=)
3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: MYhon/bKVvfbESU7PH3/suSb5/+YVeHAdnZ0m09ZYpE=)
4: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: VLoma/afTmz4hnI0EdqXpLXgczEhizYxmaDG9CyhcCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Validity
Not Before: Jul 27 01:35:35 2026 GMT
Not After : Aug 3 01:35:35 2026 GMT
Subject: CN=6a66b5e7-9e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:bc:0e:6e:64:13:1d:c1:81:68:49:c0:1b:
72:97:34:f0:ac:90:d3:da:69:93:09:60:44:fe:7c:
02:7c:7e:a9:ab:46:f0:53:ec:ce:14:35:86:15:cd:
45:d8:02:89:f6:bc:dd:24:f1:67:bb:af:97:43:05:
5c:66:9f:7f:6f:d6:6f:e5:de:e8:09:b5:04:34:5b:
b0:e5:90:1f:ba:46:dd:f7:3e:ff:fa:6f:56:54:a1:
cf:9d:47:d2:6c:98:6f:05:58:e0:5c:68:1d:f4:69:
5f:f1:6e:4b:eb:d6:2a:54:93:29:a7:ab:22:55:c5:
49:e0:19:9f:45:3d:3c:81:6c:4a:db:f3:9f:ef:82:
14:a3:2d:4c:c9:05:90:75:aa:56:36:e3:b5:1b:ec:
58:09:ff:6f:4e:8f:39:64:22:1f:04:04:a2:c7:a9:
65:35:c5:b7:ce:dc:e6:b8:42:d5:0f:57:dc:28:c5:
7e:78:cd:cf:0b:58:14:5e:93:06:ee:ce:9b:d2:30:
06:39:d7:bc:71:95:43:f5:52:65:fd:d8:a4:aa:1a:
b6:85:03:26:31:dc:20:2f:81:e2:86:00:f5:b5:56:
11:38:55:1e:f8:2f:c7:e9:51:d7:f5:44:0e:33:65:
e8:2c:49:ec:bb:6d:5e:60:7d:0c:08:32:8f:66:07:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C5:EA:2A:63:70:EF:CD:59:B1:83:C7:99:D4:31:F8:E6:C3:01:17
X509v3 Authority Key Identifier:
keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:28:8a:2d:31:36:ef:9c:26:6d:50:ba:4a:6e:01:aa:81:
0f:0f:76:b4:74:5c:82:76:e0:b2:e5:00:96:32:da:ef:fe:82:
8c:e4:03:ad:53:92:c5:db:a4:80:b1:fd:aa:b2:58:05:11:5c:
2a:b1:04:cf:2d:25:40:1e:36:12:77:be:08:c5:c5:81:1c:d6:
cf:23:74:7d:dd:55:75:d7:61:d9:4b:86:9e:f5:c5:df:04:a6:
33:15:c2:12:d3:28:b7:22:bb:2a:ad:55:5e:e0:5f:92:5d:61:
a4:ed:4e:88:58:e8:f3:cb:a6:ea:1f:0a:12:c6:d9:bd:7f:a0:
d5:2e:03:a5:e4:f0:da:e1:63:02:c2:c1:56:03:4f:42:34:00:
d6:2c:bc:a5:ed:2d:02:c8:df:7d:56:35:04:cc:66:31:5c:28:
fc:e3:6d:b1:b4:ee:d1:bf:36:9b:f9:90:e1:e5:1b:59:c0:75:
67:82:03:34:c3:86:97:53:c0:6d:e5:04:90:13:e2:2e:64:f7:
c8:90:73:05:44:49:f2:34:88:8b:a9:d6:1f:7e:48:b5:03:eb:
a6:d7:19:d0:c0:be:01:33:19:2a:1f:45:bc:0d:e9:62:32:05:
71:b0:6a:54:0c:cc:2d:02:a8:0a:18:be:50:2c:4a:e9:db:fd:
31:37:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:00 2026 by rpki-client