
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier: Pq/r8urkFJvqm4YipqQqIU+lIb1Sn4pNPc4ac0K9gTc=
Subject key identifier: B8:D9:37:39:9C:D6:A5:16:3D:CB:19:F6:74:32:49:8E:DC:35:36:07
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number: 3559
Signing time: Wed 22 Jul 2026 15:11:33 +0000
Manifest this update: Wed 22 Jul 2026 15:11:32 +0000
Manifest next update: Wed 29 Jul 2026 15:11:32 +0000
Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: TDfCuVEJJCxXv3Up7KyC6jzMYftCdEzEikMIaD2k7tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Validity
Not Before: Jul 22 15:11:32 2026 GMT
Not After : Jul 29 15:11:32 2026 GMT
Subject: CN=6a60dda5-28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:d4:25:95:33:65:00:c9:0f:39:55:c5:29:
e2:30:5f:a5:12:9f:ce:0f:2c:36:2b:f9:3f:3b:1f:
d3:a4:a1:65:49:39:99:85:57:7d:d4:c8:14:e7:d3:
61:ff:6a:0a:37:85:cd:9d:30:9f:d6:26:5d:c2:da:
d7:78:fe:c2:de:cd:52:96:98:4c:88:e0:0c:ae:3b:
63:5d:a7:eb:b7:ff:b4:a6:a4:ff:aa:15:03:f9:1d:
e0:75:45:15:26:f9:b9:a0:6a:dc:90:e7:fe:58:e2:
7b:5a:2f:8f:7d:b9:5b:38:98:14:08:f4:10:0f:14:
3b:06:c3:86:54:91:9f:4e:8d:bc:9e:6c:29:d9:a5:
ba:ea:64:7c:cf:97:55:47:fb:46:70:91:2f:6f:ec:
29:28:56:7b:d3:7c:f0:af:d2:8f:9d:5d:35:01:f9:
c4:2f:7b:cb:36:6b:5e:52:3f:bf:42:67:7e:36:25:
42:30:94:8b:bf:a6:15:67:b8:51:cc:de:ad:13:62:
19:16:53:c3:b8:29:12:b5:f6:9d:c4:a9:26:f9:e0:
79:82:b6:39:92:c9:5c:a3:73:b1:d9:6a:b5:26:cd:
89:30:51:22:95:99:96:63:7b:ff:44:20:56:1b:2b:
95:3a:8c:2f:66:8a:87:0b:4d:b0:95:1a:95:90:3e:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:37:39:9C:D6:A5:16:3D:CB:19:F6:74:32:49:8E:DC:35:36:07
X509v3 Authority Key Identifier:
keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:bc:d4:f3:51:2c:69:59:b7:61:36:0b:68:42:d8:d6:f7:
c6:d0:cc:fb:16:8f:24:ca:ce:6e:0c:fb:49:c4:38:9a:61:0a:
bf:97:17:d7:72:dd:56:d2:26:ae:56:fd:e1:0a:46:17:0e:a9:
08:ce:fa:d7:f4:85:90:42:88:95:36:2e:71:a9:eb:c0:b3:9e:
73:85:a9:b1:57:d3:10:e1:e1:26:5f:3d:76:07:4a:c4:0a:48:
92:c8:fe:7e:3b:fc:9c:01:36:f5:54:e8:d0:b7:2e:29:38:b1:
51:ac:3d:ab:ef:45:62:fe:7e:e1:df:58:06:67:47:cc:e4:6a:
12:d1:f6:f2:0a:d7:28:6b:39:26:2a:32:13:12:a6:ff:ed:c1:
34:4e:00:88:d0:aa:4d:82:74:8b:27:94:dc:b0:42:4a:ba:9b:
dc:08:f6:5d:83:7b:86:96:c2:e1:3a:82:02:ff:b7:7b:6b:32:
6f:ab:a8:d4:d2:79:a2:47:c1:ad:76:2b:7b:67:7c:08:01:87:
12:f4:99:ef:0f:ab:3a:8e:69:db:cf:10:1f:78:00:2a:b8:63:
9d:0a:47:49:ea:ac:98:c0:a9:67:b9:f3:71:83:b3:6c:77:f2:
99:ab:e3:07:7d:0a:2a:91:c4:a5:a5:cb:59:c5:aa:5f:16:cd:
b9:44:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:06 2026 by rpki-client