
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json)
Hash identifier: lBiKI43ZxY7SJrTMTloqUx0FSKCJ2R7moae9jRleRXQ=
Subject key identifier: D3:E5:46:4A:25:2A:B4:26:E1:AC:DE:BC:10:68:23:29:55:DA:06:FD
Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Certificate serial: 01E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
Manifest number: 01DE
Signing time: Mon 27 Jul 2026 05:13:13 +0000
Manifest this update: Mon 27 Jul 2026 05:13:12 +0000
Manifest next update: Mon 03 Aug 2026 05:13:12 +0000
Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: /p7FpzeBo3H/YiccUVIWTN3PBlixlt1H/ZlL9d0aCss=)
2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: nyjMQ4Y7DB/tIj8XNqvBhuvlZj0Lq52QsaNMK9E+R5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483 (0x1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D
Validity
Not Before: Jul 27 05:13:12 2026 GMT
Not After : Aug 3 05:13:12 2026 GMT
Subject: CN=6a66e8e8-c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:92:06:a4:52:13:93:dd:23:b9:ce:c0:e2:
73:23:4b:4a:3a:37:d6:db:20:03:86:eb:e1:5c:dd:
98:da:6e:a1:40:6e:81:0e:88:15:df:0e:b9:ce:04:
b4:9e:e0:f9:1e:1e:15:f1:02:63:c5:75:05:4b:d6:
6b:87:eb:e8:84:69:ed:15:31:0b:c0:2f:24:81:b9:
95:bd:dd:3d:c5:b5:0a:64:63:08:2d:5b:e1:45:d1:
ed:8e:1f:e7:d4:41:09:ec:8c:65:8e:01:94:b0:09:
17:8b:54:91:9b:95:3c:d7:ee:0b:06:9b:cf:8a:d7:
53:61:f2:24:6f:d0:7a:8d:8e:c8:a4:ce:9b:56:db:
9b:21:e3:77:c5:aa:58:e4:a8:8c:95:c4:31:4b:8a:
27:5c:86:42:b3:09:01:24:6d:9c:eb:96:74:48:10:
68:87:6b:0c:34:53:e6:2c:4d:11:d2:87:ed:1e:58:
d6:cb:95:c2:e9:3a:e0:6e:fd:22:6a:aa:f9:01:7c:
4a:36:e1:8d:c2:bc:0f:67:d7:8f:18:03:b6:c4:9e:
60:39:9b:28:e1:53:12:13:f8:62:b8:a8:3f:87:7a:
0b:0a:01:d2:cd:ea:3d:a5:da:fb:a0:fc:95:dc:bb:
e7:93:9e:e7:a5:47:de:73:9a:39:2e:a8:42:6d:5e:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E5:46:4A:25:2A:B4:26:E1:AC:DE:BC:10:68:23:29:55:DA:06:FD
X509v3 Authority Key Identifier:
keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c9:3e:64:a3:6a:1a:0c:82:81:06:9c:01:57:50:6d:ac:03:
35:45:ce:8e:42:27:1c:f4:c2:9d:99:fb:cd:ad:ce:7d:fa:bd:
99:eb:ad:ab:1d:0b:cd:05:46:09:89:3e:0e:8b:b1:79:6e:83:
ed:d8:92:b6:0a:0f:04:6c:89:40:5f:78:56:e1:9d:3c:01:31:
83:70:9c:1f:6f:d6:90:26:fd:47:b1:3e:cd:20:90:95:1d:e9:
9e:dd:fd:c5:85:91:e4:c1:e7:63:57:60:f6:7b:8c:d3:61:79:
3a:de:10:f2:4d:9c:56:06:25:d9:fa:f6:b2:83:d7:db:c4:c8:
d5:11:64:4c:eb:c7:53:a7:5b:f4:44:54:ec:44:e0:fd:10:4d:
5d:6a:a7:9c:ac:44:89:c0:be:83:56:63:35:c0:ed:ae:a5:f1:
53:f2:38:c6:f2:82:14:e5:5f:d1:61:f5:55:3b:1a:43:1b:6a:
07:3b:aa:10:31:51:06:21:68:0e:1d:73:93:93:aa:f7:61:3d:
fc:41:ed:45:cc:c7:ee:e4:df:75:8a:df:c0:f2:6c:3c:f2:4c:
94:f5:c3:99:7c:50:96:29:98:af:cc:3a:f0:1b:06:55:27:b5:
63:b0:3d:ee:79:06:0a:0c:01:df:73:a2:ad:32:e6:f7:a2:fb:
fb:3b:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:36 2026 by rpki-client