
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier: Ruos9G0tO8CTPd3b0ELl8hVEdIAU8Yl7NjzYMXxoM5U=
Subject key identifier: F2:B9:FE:03:6E:8A:F2:D9:E9:E9:3A:C2:D1:01:45:8A:20:A0:C3:B1
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 038A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number: 0371
Signing time: Thu 23 Jul 2026 01:46:03 +0000
Manifest this update: Thu 23 Jul 2026 01:46:03 +0000
Manifest next update: Thu 30 Jul 2026 01:46:03 +0000
Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: iumkWZk7Ths7HOx+7gIGhvAJxPbDgP3OnJOUegXNnhw=)
2: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: MTaNxaw7PtCNbXESI8RoAJTf60c11P2nE6sDF8sb2DQ=)
3: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OCvPEGQvB1CysAAIU7OkJHE4iNozCgl1veWjbuwvrhA=)
4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: 2lKHlrM+cqHGlUvl56hkW387P065E+umXHXOgejxyiQ=)
5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: Mcnw9cU8VxSTIzbCnuuHLM/p/44XqAFiwLx0phruJEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Jul 23 01:46:03 2026 GMT
Not After : Jul 30 01:46:03 2026 GMT
Subject: CN=6a61725b-4ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:d7:27:6e:a0:63:c8:d8:90:7a:f6:79:10:
56:ed:b9:99:e6:34:28:a5:7e:b0:b1:e5:e2:59:ec:
0d:19:2e:0b:22:13:75:4e:a4:8a:ca:b9:83:10:ef:
cd:85:8c:89:89:c9:fd:5b:19:5b:2c:03:8a:fc:9d:
eb:c7:79:0c:ec:de:8d:29:95:83:90:8a:42:e0:47:
7a:67:ca:ca:c3:8f:a2:03:b1:ce:af:43:14:df:a3:
75:14:00:77:07:ec:c7:76:9f:e7:49:c3:f0:f2:43:
e9:61:26:bf:e3:ec:9d:71:ed:f5:ae:f4:db:4e:8e:
28:4a:0f:67:37:b8:26:c7:bf:f2:4b:b3:01:8d:e1:
20:7a:23:fb:d4:39:f1:c7:5d:7c:c4:87:a9:98:2d:
82:10:b3:bd:a8:3e:c9:0a:73:fe:ae:9e:6b:c4:a0:
68:29:bb:a0:8b:f3:db:ab:5a:f2:b7:6d:8c:9d:37:
f9:44:98:04:0e:e7:af:09:8d:c1:8f:95:bd:98:1c:
1a:5b:23:9e:17:4d:bc:e3:cf:e7:3a:32:e3:4b:44:
ac:b6:7d:8d:ab:71:d5:2a:94:60:fb:25:c5:ab:07:
89:c6:5a:d0:f1:39:6c:75:4c:18:ba:0e:f7:5f:77:
1d:1e:a5:28:82:76:41:57:1d:67:2a:4c:1c:e8:a6:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:FE:03:6E:8A:F2:D9:E9:E9:3A:C2:D1:01:45:8A:20:A0:C3:B1
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:d8:35:cb:77:9c:e7:e3:f3:2d:f1:ba:db:9f:c8:ff:5b:
12:44:ee:dc:17:54:69:b3:66:96:ed:a0:4a:56:9e:ce:f5:aa:
76:5b:d9:fd:b9:71:36:45:ab:8f:4c:68:08:b9:ab:37:9f:24:
cb:9c:20:33:09:c4:80:7d:59:d5:48:b3:c5:81:e0:38:da:a9:
eb:99:be:98:27:c9:ac:b2:6c:13:89:66:e8:b9:78:ee:ad:55:
83:21:28:9e:18:62:91:7c:65:d7:c7:46:a4:d8:ea:18:1d:5a:
45:3e:f9:3f:35:2b:26:78:3a:66:ed:c5:02:26:f7:c2:dd:53:
20:99:93:ab:e8:c6:3f:5e:94:9c:6c:eb:66:20:fc:d0:03:4a:
a6:8a:45:59:e2:6a:99:5c:ea:4f:08:1f:91:2f:ef:95:77:a9:
aa:b3:78:e5:23:c4:fd:86:c2:2b:08:da:95:1c:11:70:3a:d5:
93:e3:48:b5:5b:05:b1:b3:c5:36:a7:5c:73:2f:a3:01:9c:c1:
41:f6:e9:c0:d5:c9:1d:50:ff:a2:71:dc:c3:9f:68:f8:f5:03:
47:de:81:fb:fb:09:89:93:81:6e:4b:a0:f0:4d:2c:fc:c6:a9:
d5:31:07:e8:e9:23:57:16:25:26:1a:33:2a:10:f4:bd:d4:fa:
af:ee:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:22 2026 by rpki-client