
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier: 50nrr2wzb2Z5fn6tGnd+e9dSIX/8P31Osz6wKVYiBa8=
Subject key identifier: 14:67:66:9A:0E:07:1C:1D:A7:09:07:51:0B:E2:D9:8D:63:64:EA:FD
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number: 0126
Signing time: Wed 29 Jul 2026 07:24:24 +0000
Manifest this update: Wed 29 Jul 2026 07:24:24 +0000
Manifest next update: Wed 05 Aug 2026 07:24:24 +0000
Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: 68cRUSKoiMMDVtXTlejSxwmzgkJqB/KDJxdL3Yt+s/Y=)
2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Validity
Not Before: Jul 29 07:24:24 2026 GMT
Not After : Aug 5 07:24:24 2026 GMT
Subject: CN=6a69aaa8-62d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:31:c6:a9:61:97:f3:74:6e:e8:c2:1c:e8:
ea:38:45:88:9f:5c:ab:4f:b3:33:92:ab:b9:99:b2:
1b:db:7c:47:12:d4:40:b1:8a:39:02:76:44:b6:05:
9e:50:25:7a:8b:3b:0b:50:b3:28:97:7e:a3:b7:91:
ed:18:67:9c:92:f4:0c:5f:ab:0a:e4:cb:9e:e9:5d:
67:9e:54:f5:6b:9d:69:4a:6d:a5:14:23:61:bd:70:
a7:c3:1b:b4:d5:96:a9:0a:5b:7a:27:85:c0:39:89:
ee:9e:7f:a5:90:8b:7f:7a:c0:f6:16:5d:34:93:a1:
7e:ca:29:0e:8b:4c:26:ac:bc:bf:37:98:3d:42:b4:
45:94:72:1e:71:e4:3c:67:5f:a7:38:40:d9:e3:83:
97:eb:3d:95:6e:04:17:2a:3e:c5:ec:0a:43:ab:6e:
cb:e0:4e:fd:dd:40:7c:68:f5:9b:fa:f1:3a:5b:11:
7f:22:83:11:ae:87:63:b1:4a:10:86:e3:c4:5b:e7:
9b:99:47:2d:f5:8d:23:9c:5d:3e:e6:f8:2e:59:5d:
cf:3a:f5:7e:e0:69:aa:e6:c5:85:e3:0f:84:cd:e7:
49:6d:fb:d8:54:90:47:b4:67:d9:d1:b1:5d:c6:32:
d6:a5:bc:5e:cb:33:21:7a:bc:b1:e1:72:b1:98:c3:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:67:66:9A:0E:07:1C:1D:A7:09:07:51:0B:E2:D9:8D:63:64:EA:FD
X509v3 Authority Key Identifier:
keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:b0:df:3b:5e:3f:55:c4:1a:ab:2b:15:dd:97:a5:cb:91:
fd:e2:f4:60:21:35:98:a9:c1:ac:ac:5e:9a:09:d1:46:93:a1:
d7:59:e2:82:c5:09:ba:20:b8:87:51:30:b4:a7:f9:bd:e6:75:
79:d0:5c:e3:8e:bd:58:60:cb:23:57:ce:ec:7b:1a:54:7b:9a:
01:04:42:23:4c:94:b8:cd:99:b2:5b:be:1d:6b:34:7f:78:a7:
23:f9:6f:43:79:91:71:e3:fa:66:a7:0f:5b:5f:bd:7a:63:c4:
55:87:36:cc:9e:9a:68:11:67:b7:65:a6:32:3a:58:48:d1:39:
07:e2:ae:32:cf:ab:c0:1d:60:4c:c4:fc:07:9f:72:90:dd:95:
4c:39:f3:ec:83:4b:aa:fa:ca:62:1f:ab:3a:6c:db:f5:5f:b0:
b2:bd:a8:23:96:97:0c:7d:9d:8e:d3:c9:6c:46:68:e5:76:3a:
e8:46:a4:39:66:04:1c:d2:44:71:e3:c0:24:b4:78:d6:a9:e9:
8d:63:c9:de:f3:e9:40:16:b9:01:34:2b:e3:13:99:cd:6b:0b:
90:29:f1:7d:c7:6b:6b:47:1a:34:8d:4c:19:b9:e3:92:82:7d:
9f:50:e8:ef:cf:24:d3:ce:7b:76:ef:42:15:60:0e:a3:1b:f1:
b1:b6:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:32 2026 by rpki-client