
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: ZavkzCAjD/Kkws3FWB54WNh75aPV4pfFExpc/geSPg4=
Subject key identifier: 6B:84:45:39:9A:39:A6:45:BD:07:68:0A:9C:53:3F:56:B9:0B:D5:15
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 018E
Signing time: Mon 27 Jul 2026 06:22:48 +0000
Manifest this update: Mon 27 Jul 2026 06:22:48 +0000
Manifest next update: Mon 03 Aug 2026 06:22:48 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: VSWFHnc9LZFNDi0vsm6wnrKKezykcODWCQYsnYYxNMk=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Jul 27 06:22:48 2026 GMT
Not After : Aug 3 06:22:48 2026 GMT
Subject: CN=6a66f938-9ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:43:71:4c:67:95:7d:b1:f1:9c:e2:7a:82:
90:ab:cf:02:18:68:f5:f4:fa:bf:61:54:c1:43:fb:
e2:a3:49:c1:2e:b9:59:bd:38:89:87:f2:ea:5b:ec:
87:b7:d6:e6:e9:88:b5:f2:87:13:46:a9:c8:14:7e:
a0:3f:d2:5c:23:58:27:e0:02:27:18:a6:6d:d7:9f:
1b:2b:8a:e3:7f:e3:3f:ca:27:ff:27:8b:aa:c2:ce:
de:83:12:18:ce:62:ba:1f:88:78:db:b5:41:aa:57:
84:82:cc:61:ea:a9:c6:ff:ce:6b:6c:b5:c7:44:9e:
89:31:3c:a4:10:65:14:71:77:bf:95:01:34:6d:7b:
7d:94:c5:c6:8a:10:ab:f3:f5:51:a7:52:f4:86:99:
d9:03:74:bc:49:d1:cd:2e:68:7a:1f:a8:4d:78:da:
6d:41:e5:85:bb:14:fb:72:e1:ad:58:07:d1:75:3a:
54:27:cf:51:d4:58:40:82:58:5d:b9:c7:da:e4:b6:
d0:7a:dc:6b:c8:87:22:89:4c:76:7f:2f:fa:27:53:
36:17:ce:dd:dc:2a:4a:24:12:69:4f:22:8c:cb:3b:
68:30:0b:38:ec:a8:5e:a1:40:a9:9e:34:b6:2f:08:
e2:57:f2:00:78:75:87:9a:55:30:cb:23:3e:3a:18:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:45:39:9A:39:A6:45:BD:07:68:0A:9C:53:3F:56:B9:0B:D5:15
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:b8:f5:f7:e9:43:42:3d:92:1a:e6:50:4b:b3:47:df:db:
07:f4:ac:d0:a6:46:f2:5f:fa:2d:6e:aa:3b:88:83:fd:29:0e:
44:27:cf:f0:78:81:fe:aa:e1:02:0c:01:b6:eb:18:5b:01:bb:
49:d7:44:b5:35:79:50:22:fd:ac:f9:0e:4a:94:53:ed:50:05:
72:87:4d:0e:79:b1:84:66:93:ef:e1:ed:67:a7:17:85:0b:29:
2c:21:68:fa:62:69:05:ee:24:bd:78:cc:d1:ed:6a:52:b3:54:
19:00:b0:01:87:53:3a:28:f4:c2:63:c0:fd:c2:a5:00:69:92:
60:6b:b6:22:1f:c8:fc:48:f7:3d:1a:be:fd:9c:e5:ce:8f:ed:
23:98:2a:57:eb:6e:fd:fa:88:98:7b:82:95:0a:e5:8d:33:4f:
7e:27:b7:c0:f9:9b:48:f4:86:1e:0e:d9:9a:8a:b1:b2:3a:7e:
13:85:ac:e8:fb:ea:51:30:b1:0e:57:a8:56:d9:35:bf:bb:a4:
25:30:61:c4:ce:a7:98:08:1b:0a:9c:43:a4:83:70:59:67:08:
a6:a5:4c:20:34:b0:aa:45:ac:70:65:38:4f:9b:b2:b9:0f:c0:
f1:f1:35:a1:18:b2:1c:34:c8:11:6c:af:ab:6e:28:32:95:91:
c3:71:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:52 2026 by rpki-client