
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier: 0hXrmwMQMt2vvxA7WMDboRhGaq7a/ojVeAVuan11ZaA=
Subject key identifier: 29:2E:FF:B8:0F:83:19:7F:EF:2F:A8:E3:5C:DB:B5:78:FF:AE:FB:F7
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number: 80
Signing time: Thu 23 Jul 2026 09:35:35 +0000
Manifest this update: Thu 23 Jul 2026 09:35:35 +0000
Manifest next update: Thu 30 Jul 2026 09:35:35 +0000
Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: fxsJ1Y2gy3avMzUMqFZPJdZvpvFfBdxi7EoJNSJDMgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
Validity
Not Before: Jul 23 09:35:35 2026 GMT
Not After : Jul 30 09:35:35 2026 GMT
Subject: CN=6a61e067-c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:9e:f1:7e:6f:74:92:c9:16:97:19:3d:1d:
a8:66:5b:9e:56:7c:53:3b:c7:07:d6:08:53:fe:72:
71:cc:b3:a5:21:7a:7e:7d:47:2b:59:60:a9:c0:42:
7b:7c:57:aa:d1:2e:b1:30:c2:55:75:04:9d:ef:d0:
41:3a:11:86:ef:c3:75:72:64:18:6b:49:ca:d7:0b:
b6:57:3a:18:7a:a1:cc:50:34:e3:6e:27:1f:73:d8:
36:31:7b:d4:ab:97:46:04:4e:8b:dc:b9:34:e6:46:
68:56:54:3b:75:0a:05:dd:9a:13:8a:71:f0:02:16:
a5:91:d6:31:a0:20:d4:77:e6:09:67:9b:cf:f6:ae:
0b:d2:af:be:6e:f6:06:99:8b:ec:4b:04:7d:cd:38:
1b:00:eb:c2:6f:10:e3:e8:7e:a3:45:a9:b0:73:a5:
c8:84:5a:3b:e4:6d:7f:12:04:cc:a8:e4:b4:94:77:
cb:1f:9f:02:2a:b4:73:dc:a1:3b:dd:20:1a:4f:4c:
fb:25:81:43:f8:2c:6c:39:64:a5:8f:ee:04:93:8b:
5f:64:e5:93:82:b7:fd:ea:41:d3:66:ad:7c:d7:d5:
2d:3f:e0:71:0c:e7:78:df:b6:36:a6:1e:fa:88:2a:
ba:b4:22:a9:d6:4b:ef:a2:9d:8e:d2:da:7c:a4:84:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2E:FF:B8:0F:83:19:7F:EF:2F:A8:E3:5C:DB:B5:78:FF:AE:FB:F7
X509v3 Authority Key Identifier:
keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:a9:cb:22:f3:e3:36:8b:c7:62:14:08:67:ec:bd:f9:22:
b3:9b:58:c5:29:2f:79:81:ef:cb:47:84:4c:c1:ba:63:60:5b:
9f:18:e4:4f:cb:15:ad:84:0e:22:9d:11:d2:df:66:85:ff:26:
a4:ab:e3:24:71:d1:61:b6:cf:d5:e0:b8:5e:55:4f:53:89:dc:
37:0c:2f:3e:3c:78:bc:61:17:c5:4d:67:26:d6:91:b6:f0:df:
ac:cf:f6:92:61:df:07:a1:3b:ab:97:9f:cc:d2:42:5a:7b:1b:
60:59:12:f9:fc:a9:74:60:df:5d:86:70:12:e7:fb:e1:96:39:
7e:ce:84:44:bf:df:a2:f5:9f:d1:96:0b:61:82:a6:e3:63:4b:
87:ce:5f:8b:f7:8c:c8:6d:72:8a:15:96:5c:e9:44:6a:a6:43:
c6:f4:80:ea:1d:02:a6:e2:bf:a3:4c:a1:98:17:1f:53:e1:aa:
51:b3:86:14:15:2d:7b:2f:25:34:1b:95:96:e4:ac:35:c1:d6:
61:75:76:2b:23:c1:64:fc:04:5b:35:ee:24:ed:d2:c4:80:53:
8a:6b:47:81:0b:dd:4e:a8:07:ef:f7:11:5b:59:cb:09:bd:22:
87:5d:c0:80:0f:3b:f4:d5:cf:31:ac:63:aa:51:88:9b:b5:83:
dd:57:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:02 2026 by rpki-client