
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier: CzQriXE7TUKx81EKdxLigpxXPhjo8BBvXq2kO9FFqqg=
Subject key identifier: B2:09:73:5D:78:3A:4F:EC:FB:F0:33:57:BA:56:B1:9A:F8:79:D1:31
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 1136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number: 1126
Signing time: Wed 22 Jul 2026 17:23:51 +0000
Manifest this update: Wed 22 Jul 2026 17:23:50 +0000
Manifest next update: Wed 29 Jul 2026 17:23:50 +0000
Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: SvRPdg5wyQizx7WVQOAjj1112wttZaqVdTvOPGkkAhg=)
2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=)
3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4406 (0x1136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: Jul 22 17:23:50 2026 GMT
Not After : Jul 29 17:23:50 2026 GMT
Subject: CN=6a60fca7-a8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:87:ef:81:fe:28:47:d1:b9:bc:87:31:35:
91:2e:2b:14:b3:9a:c7:3d:f0:94:45:42:17:f2:51:
27:99:ed:c1:b0:a4:46:31:95:26:d6:7f:cd:69:e7:
e9:7e:75:36:9c:5a:eb:9a:3d:cc:92:d6:6e:e6:77:
5a:e0:75:20:be:71:70:73:3b:24:5c:ba:8d:49:be:
6b:ad:9c:6f:2a:08:49:85:43:5b:16:c9:e2:e8:87:
be:40:3e:b1:07:28:a1:f8:f2:98:69:8a:d4:4f:2e:
60:e3:f0:f2:f9:7a:8b:cb:93:16:51:36:d3:62:f8:
3e:23:7d:64:03:2f:ae:4d:a8:42:51:eb:13:05:a0:
ac:0c:9c:a9:cb:e3:5e:2d:93:4f:71:7a:0e:c0:64:
1c:9a:e4:31:bf:30:43:14:f5:98:69:82:86:62:1e:
44:4a:ef:35:b3:62:d7:41:fc:45:f4:0f:74:ce:29:
aa:75:be:67:90:06:57:fd:aa:d6:7f:2f:96:17:a6:
29:15:ae:fa:ea:e5:32:38:e1:4d:07:9c:1b:39:d3:
c9:81:0f:09:c1:3b:d7:43:5c:08:9b:7e:a5:65:4a:
6e:a3:74:e1:07:f5:89:c8:ec:74:c4:23:10:48:9d:
2e:7d:4d:41:db:92:60:3f:20:e5:65:09:44:d4:25:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:73:5D:78:3A:4F:EC:FB:F0:33:57:BA:56:B1:9A:F8:79:D1:31
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:85:49:b7:eb:8f:43:89:7c:ee:38:f8:15:0a:f8:0a:e5:
d3:45:ae:67:7c:8d:e0:1b:06:a5:59:21:df:d7:a5:6f:c0:a1:
36:06:cd:7a:cb:39:1f:ab:9e:c4:56:f8:b5:e6:aa:0b:5d:3c:
61:96:3c:6e:26:a9:e6:07:91:46:c7:df:9b:86:06:36:73:dc:
dc:80:e3:bb:2c:70:ee:d1:2f:25:0a:11:2f:81:a5:a0:4e:65:
32:81:6c:b3:eb:0b:db:f2:84:13:63:2d:b9:70:0f:16:04:be:
cc:df:b3:4e:fc:3e:dc:7d:3a:a9:cb:d3:4d:24:e7:28:35:a3:
da:67:1a:3c:b7:32:ad:e4:87:2e:90:db:31:85:73:17:06:4c:
a6:bd:9f:67:f4:11:f8:92:bd:fd:a0:c1:a4:ad:40:b5:32:b6:
60:e9:8b:4e:6d:0d:be:7b:f4:57:36:4d:a3:23:15:67:ba:3a:
89:62:e9:66:16:72:7f:41:d1:cb:97:15:6a:2d:5e:7c:3d:88:
5b:be:98:d4:71:7a:34:d0:a4:2e:37:ba:80:18:2a:e7:8b:e2:
02:2d:c5:44:cd:df:6c:74:f5:99:ac:1e:e2:08:af:72:c2:bc:
18:af:a4:a1:ab:32:0a:72:ed:6d:6c:d1:1e:67:92:86:55:1b:
70:32:29:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICETYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1
MUEyMzUwQUYwHhcNMjYwNzIyMTcyMzUwWhcNMjYwNzI5MTcyMzUwWjAYMRYwFAYD
VQQDEw02YTYwZmNhNy1hOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDaH74H+KEfRubyHMTWRLisUs5rHPfCURUIX8lEnme3BsKRGMZUm1n/Naefp
fnU2nFrrmj3MktZu5nda4HUgvnFwczskXLqNSb5rrZxvKghJhUNbFsni6Ie+QD6x
Byih+PKYaYrUTy5g4/Dy+XqLy5MWUTbTYvg+I31kAy+uTahCUesTBaCsDJypy+Ne
LZNPcXoOwGQcmuQxvzBDFPWYaYKGYh5ESu81s2LXQfxF9A90zimqdb5nkAZX/arW
fy+WF6YpFa766uUyOOFNB5wbOdPJgQ8JwTvXQ1wIm36lZUpuo3ThB/WJyOx0xCMQ
SJ0ufU1B25JgPyDlZQlE1CWwywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIJc114
Ok/s+/AzV7pWsZr4edExMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB
ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1
cVIxejAyUTg2N3RSb2pVSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABMCFSbfrj0OJfO44+BUK+Arl00WuZ3yN4BsGpVkh39elb8ChNgbNess5H6ue
xFb4teaqC108YZY8biap5geRRsffm4YGNnPc3IDjuyxw7tEvJQoRL4GloE5lMoFs
s+sL2/KEE2MtuXAPFgS+zN+zTvw+3H06qcvTTSTnKDWj2mcaPLcyreSHLpDbMYVz
FwZMpr2fZ/QR+JK9/aDBpK1AtTK2YOmLTm0Nvnv0VzZNoyMVZ7o6iWLpZhZyf0HR
y5cVai1efD2IW76Y1HF6NNCkLje6gBgq54viAi3FRM3fbHT1mawe4givcsK8GK+k
oasyCnLtbWzRHmeShlUbcDIpmw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:44 2026 by rpki-client