
$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier: mvdibDosZuvm+lLVix35KA6kCtPFIArXbmW5r1LQ8pY=
Subject key identifier: 3B:9B:8A:99:E4:05:45:8D:38:F3:9E:CB:E2:8F:B4:60:31:0A:5C:AB
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number: 011E
Signing time: Thu 23 Jul 2026 07:29:40 +0000
Manifest this update: Thu 23 Jul 2026 07:29:39 +0000
Manifest next update: Thu 30 Jul 2026 07:29:39 +0000
Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: Md6yLp9j5i6WrYpFZBLVJvelpR9+17vrCxayVVc8kiY=)
2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Validity
Not Before: Jul 23 07:29:39 2026 GMT
Not After : Jul 30 07:29:39 2026 GMT
Subject: CN=6a61c2e3-a692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:ca:41:85:26:b9:da:7e:d8:fe:cf:ee:da:
a3:c5:a6:74:d6:79:ce:77:90:be:be:bb:9d:ea:43:
ff:87:71:0f:9d:ed:fd:8f:13:ec:10:7f:6e:f6:d6:
64:f9:05:45:bd:fe:98:43:80:f2:5f:6b:6c:c2:11:
f8:03:c0:73:72:e2:1f:f7:7b:f1:26:09:b8:ec:7e:
65:6b:12:32:36:53:d1:d4:ad:a3:b7:52:86:4b:75:
5e:8b:bf:9a:76:e7:aa:ea:57:b2:af:b3:6f:cc:f6:
ee:8e:3b:ae:42:d3:69:ba:88:c0:29:bd:18:71:d7:
e4:ff:3b:f4:6f:7a:75:ca:43:e7:fa:48:0c:ca:09:
d7:1d:ee:68:59:af:b3:d4:92:c7:54:96:4f:f7:2e:
83:7e:8a:06:77:10:77:85:f7:99:00:0e:d7:59:20:
08:46:44:81:b4:0c:be:aa:10:ff:78:8a:6e:58:da:
4b:3b:a9:3c:e1:a5:dd:ed:bb:7d:39:53:5a:cc:cf:
3e:f5:80:33:c0:a7:6c:73:23:72:8b:3a:87:12:20:
24:62:a2:74:57:d2:14:39:f6:be:4f:43:9c:23:93:
31:3b:9a:a7:dc:89:6f:8d:35:58:63:70:f9:58:10:
d2:8e:3e:01:35:18:29:1f:93:32:d0:aa:e9:b6:32:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:8A:99:E4:05:45:8D:38:F3:9E:CB:E2:8F:B4:60:31:0A:5C:AB
X509v3 Authority Key Identifier:
keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:4c:3a:c5:8b:f4:6a:c0:e9:27:f5:3d:2b:9c:bd:5e:f6:fb:
b3:6f:61:dd:63:66:2b:68:98:0c:46:bb:e1:0c:40:39:cf:2e:
9f:8f:14:ae:3f:08:81:85:e9:71:16:07:52:c2:1b:6f:08:ee:
0d:7b:c7:e8:e5:e1:04:01:1f:de:d4:86:68:dc:b3:1d:0d:f4:
82:f1:d9:7f:01:05:2c:c6:42:e3:39:98:f5:2c:cd:99:b0:fa:
d8:a9:66:7a:e6:29:3d:dd:2b:0a:7e:88:3b:42:76:ff:eb:8a:
af:aa:90:62:65:bf:dc:7d:bb:8a:87:3e:bb:4e:3f:fc:de:df:
40:8b:05:9b:32:cc:8f:e1:8e:c7:a5:ec:c3:50:b3:42:b5:f2:
46:8c:eb:b3:3a:b9:5b:87:91:9e:a4:e5:66:e6:fe:7a:e3:1f:
2a:3b:c1:12:d2:5a:3e:bb:3b:68:47:48:fd:8b:01:83:3f:2c:
3b:74:40:a7:b6:f0:07:46:e1:04:0d:e1:1a:e2:15:cd:0a:a1:
02:e0:bf:80:da:fd:c7:21:a4:bf:51:85:71:c8:71:f9:53:e5:
25:fb:0d:4e:63:be:70:3f:54:d2:73:f1:4d:19:d8:33:88:be:
cf:43:49:97:8a:f5:86:c1:78:92:82:c6:2a:10:03:10:d9:8e:
36:7d:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:11 2026 by rpki-client