
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: ST8NEbYUonR9iilUSBdBVLVqD7mqX5zEgd9cffmc/t0=
Subject key identifier: B2:D9:F2:F2:E8:7F:D6:12:4D:7A:FF:1C:C4:F0:50:CE:5A:4D:DC:50
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 088A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 0876
Signing time: Wed 22 Jul 2026 21:17:31 +0000
Manifest this update: Wed 22 Jul 2026 21:17:30 +0000
Manifest next update: Wed 29 Jul 2026 21:17:30 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: 4PzMW4+chJqzxxVeYGUKObOf0kNYJHO23airJLeOuWU=)
2: 21EE9510083211EB81509633C4F9AE02.roa (hash: iKMQHOBFrgyHmy/Ps4jIsLKGqzItSxXRkBRTt6rveQ4=)
3: 12B8820E32E811F183E6E984A4833773.roa (hash: 6EFTeBZ1wXqiO/PUIgVs+ZVAsoL+Rx0rt9GNyp8g/+E=)
4: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: 4D8RNBVxZ4n/YFoAFxcO6RiKNijl1P5296cdlR8pmnU=)
5: 03DBE96C27D311F1B9B43B2EA5833773.roa (hash: S3e+5praX3fveUx0PS8OILIaCoCyEFWJPJkSDQ7Hz+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Jul 22 21:17:30 2026 GMT
Not After : Jul 29 21:17:30 2026 GMT
Subject: CN=6a61336b-7927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:82:10:78:f2:e1:ae:26:38:d2:2e:d4:7a:
82:b7:22:d1:91:f9:3a:11:68:58:fc:ed:93:23:5f:
e6:a9:1e:a4:c0:43:4b:cd:af:10:ae:28:96:dd:93:
52:e3:f5:9b:2d:87:18:aa:39:54:dd:58:8e:74:81:
6b:b7:b3:c6:30:75:a7:0b:3f:f3:90:14:2a:54:da:
f2:e3:c1:72:e8:7b:9d:6e:a8:e1:5c:ba:ef:41:ca:
9a:37:d9:e7:da:52:35:12:35:d5:64:54:e0:5f:cc:
50:5e:81:a9:9f:72:05:c1:75:89:cc:6b:58:fb:fe:
9a:ff:92:f4:0d:d3:77:c8:27:01:d8:4e:54:56:91:
1b:20:f5:d0:e2:d2:f5:cb:28:f8:68:a0:62:12:fa:
15:bc:99:27:38:f2:49:9a:6f:95:34:43:22:c1:cf:
fb:69:c3:2e:e6:e1:55:53:16:8a:a5:d6:f3:7d:17:
12:09:9c:e6:59:fe:60:47:1a:77:44:5f:1b:bc:1c:
a9:bc:5b:4a:18:d5:5e:d4:59:ec:3a:34:1a:f9:d6:
c9:34:22:fe:ad:69:b3:fa:1e:d2:26:d0:e4:93:a6:
11:ca:c6:9c:ba:98:48:dc:45:2b:81:09:6f:ff:01:
f5:54:ef:b8:1f:64:b6:ef:72:98:39:9c:7d:d7:62:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:F2:F2:E8:7F:D6:12:4D:7A:FF:1C:C4:F0:50:CE:5A:4D:DC:50
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:36:a1:61:0b:94:b5:9a:ca:ad:67:5b:3f:6b:ea:14:ad:41:
a4:61:85:ad:65:4b:1d:01:35:c2:ca:98:25:56:30:77:d5:c9:
33:59:62:81:10:df:35:50:85:f8:f3:b1:59:9b:37:0f:29:ae:
70:55:7e:cb:5a:10:c4:59:68:1d:37:44:3c:47:f0:5f:dc:ee:
f2:bc:27:54:cf:e3:b6:3e:a4:46:dd:7b:f9:f0:f0:9d:19:fb:
bc:fb:8e:0c:92:f7:53:f8:6f:b5:8c:8d:76:ab:2e:44:e3:f4:
43:91:af:ce:28:7e:06:92:6c:3e:b3:96:af:6c:df:1a:a2:2b:
13:6f:2f:67:83:3a:2d:53:b2:8f:3c:08:cf:52:a5:37:82:d1:
34:be:af:fe:03:5d:3b:64:f8:26:66:53:6e:5b:b1:ac:ec:2b:
cf:c6:d1:09:2d:15:6d:bd:dc:d5:7f:59:42:98:b9:2f:43:f7:
09:c0:20:8c:38:50:c8:33:04:22:90:98:12:54:96:c0:d7:d4:
b3:c0:34:b1:a0:4f:c0:02:a6:dc:b6:97:0b:9f:55:65:29:a1:
94:62:b1:90:03:d5:c4:3d:8e:7e:ac:49:6c:fa:1f:e3:2f:46:
47:74:1e:53:64:bc:68:c2:ba:a3:d0:8b:f5:6b:03:13:73:42:
d9:32:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:14 2026 by rpki-client