
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: XwJCSwSfLn36bNCfmQuzeZ4q1IG/KEgKPLxsaumsBBY=
Subject key identifier: 3C:0F:B1:E0:E5:E6:A7:65:8B:14:59:ED:17:17:2F:E2:77:11:87:BB
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 01BD
Signing time: Thu 23 Jul 2026 05:17:24 +0000
Manifest this update: Thu 23 Jul 2026 05:17:23 +0000
Manifest next update: Thu 30 Jul 2026 05:17:23 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: yFpxR3Fbpny4tD5QcJTkKYU4YYFO6VQ+7vSJLNQ5dvU=)
2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: dTKobTpgmqVlw9+3THmdhV/OqwJR2m6apo+OjMA3HTs=)
3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 3E36B1MpZYDiaAYeovA9u0vflfKd+OIxRnYYoJKDjag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Jul 23 05:17:23 2026 GMT
Not After : Jul 30 05:17:23 2026 GMT
Subject: CN=6a61a3e4-d5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:37:2c:32:e5:ae:62:06:e0:ec:7e:ac:53:
10:56:53:95:3c:f4:55:3c:08:91:fe:a9:25:24:7b:
7e:76:7c:1e:b1:2d:df:ae:c2:fb:a1:d4:08:77:40:
a1:1c:34:53:bb:23:43:1f:82:2f:e5:02:1a:a6:6a:
3e:21:e7:92:1f:0d:c4:92:2a:9d:65:54:48:af:0f:
7d:57:a2:2a:c5:6a:63:bf:d5:44:b2:7c:79:a7:1b:
c6:83:33:01:5d:01:8d:37:7f:50:fd:bf:53:f4:aa:
7b:28:07:20:2c:37:35:85:ec:c2:f3:82:ba:6b:15:
7b:4e:87:26:5e:3f:61:4f:8e:2a:18:d5:e3:7f:ac:
4f:38:b5:a2:66:6c:e0:16:d7:dd:1b:e7:3b:7a:3c:
eb:e6:11:b8:60:d8:48:64:35:6e:c4:7a:7c:41:bc:
8e:de:a8:b2:ab:be:6f:29:7c:55:0a:51:a1:2e:a2:
9b:0b:d3:be:bf:70:fa:e5:51:23:3b:fe:ad:4f:53:
fe:09:ee:71:ab:46:08:25:1a:e4:bb:8a:82:2d:81:
76:a5:f1:68:61:3e:82:cb:bf:60:b3:74:e5:bc:ae:
dd:92:29:a4:f6:1a:41:06:fc:e3:bd:e1:51:85:ee:
c3:45:a6:6c:9d:2f:04:5f:bc:b4:1f:8c:8b:51:91:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:B1:E0:E5:E6:A7:65:8B:14:59:ED:17:17:2F:E2:77:11:87:BB
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c1:d4:9a:5d:e1:51:5a:00:d8:5c:bc:e8:07:3d:36:94:d6:
de:84:23:18:62:5c:23:a7:2f:08:87:cc:83:36:2f:c0:cc:93:
0d:9d:e3:62:77:91:9a:61:82:68:bd:5b:fb:b4:03:da:aa:7f:
d0:ba:83:dd:8e:72:95:87:4d:4e:b4:ca:36:d2:66:c3:35:fc:
c6:15:80:0b:58:e5:46:11:b6:39:50:aa:d9:37:ae:79:fb:b8:
3c:ab:40:bf:ea:95:ee:fc:94:c7:c0:b9:c8:de:3c:72:70:ce:
2f:96:51:e2:a4:ab:91:85:21:6c:ff:e0:32:75:a5:74:dc:60:
86:c3:16:bc:59:ac:02:1a:17:18:70:45:bd:9c:c7:84:ad:59:
e0:34:5c:be:00:a3:db:82:19:c8:ec:08:43:b7:46:a6:56:f7:
e8:87:a9:1d:8b:f0:21:41:75:26:a1:e0:d2:54:24:bc:5f:99:
21:5b:e3:37:46:67:15:62:cd:09:51:e8:e0:d5:da:21:f1:c3:
0a:4d:2c:87:97:82:25:42:c5:ef:0b:da:a9:9c:5c:54:99:ac:
36:99:20:8b:67:8b:82:ca:62:2a:37:c6:c5:c9:85:11:38:17:
2d:1c:22:7f:7c:28:c2:24:ce:ac:00:1a:5f:af:0a:2b:c1:b6:
c5:97:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:42 2026 by rpki-client