
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: YQdjHxSzZxMOuFcm4nfGYzfv5UnIqcu4uKx9IC4EQ68=
Subject key identifier: 26:72:7F:5F:0A:B1:23:18:5E:6F:6A:64:68:F2:DC:33:51:50:5A:FE
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: 0169
Signing time: Thu 23 Jul 2026 02:20:51 +0000
Manifest this update: Thu 23 Jul 2026 02:20:50 +0000
Manifest next update: Thu 30 Jul 2026 02:20:50 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: DnBhnaPaLn9sVpYtM0PVIoJsT0LUfpmozWtic7psPW0=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: 6lO6h2G77UVb/TYYp/IKbTb/elPRTlBLimPdGpXo2iE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Jul 23 02:20:50 2026 GMT
Not After : Jul 30 02:20:50 2026 GMT
Subject: CN=6a617a83-0f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:b3:f3:99:52:d3:3b:af:92:00:8a:b4:37:
8f:b1:48:22:f4:7f:cb:fa:bb:b1:1d:9f:94:58:a7:
ac:0f:5e:d9:73:78:d7:6a:96:ee:b1:40:c5:cb:9f:
1a:ad:d4:83:62:f2:2e:ae:ce:56:7f:1d:9b:e2:e0:
75:5d:25:0f:18:f9:b8:6f:b3:83:42:18:f3:3e:85:
eb:af:19:48:b7:05:9d:b7:9c:28:fb:ae:b9:32:bb:
d4:0d:a9:18:26:a9:55:c9:d9:30:d1:a4:02:df:00:
00:28:88:79:00:a5:dc:55:96:52:6b:2f:9e:d5:bd:
82:77:e1:aa:f8:63:82:93:be:c6:4a:6f:e2:24:22:
00:ec:b7:43:07:9d:ee:ea:f1:bd:b7:45:5d:55:f8:
b0:c1:64:e2:72:95:60:56:d6:55:c7:3a:6c:75:be:
23:4b:66:54:4b:b6:35:03:39:f3:77:ff:30:cc:54:
c3:cd:a0:cd:5a:de:ae:45:7d:c2:db:b7:59:07:36:
03:93:dc:d3:50:91:56:15:84:eb:24:0e:1b:60:81:
fd:15:90:08:6b:1b:2b:89:1f:d9:7d:70:6f:d0:24:
1c:d3:10:9d:f3:ee:b1:ea:37:54:6b:2b:5e:55:c5:
5d:2a:32:5a:96:46:b7:b6:f6:18:c0:54:5f:86:99:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:72:7F:5F:0A:B1:23:18:5E:6F:6A:64:68:F2:DC:33:51:50:5A:FE
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:40:27:8d:d3:c8:a3:00:0d:48:16:83:ba:f6:69:ce:47:
e3:2a:b6:8c:38:07:c5:2b:68:d7:6f:fe:5d:44:de:be:b2:d7:
13:b8:2b:30:46:73:b2:49:11:29:c7:01:9e:ce:5f:76:33:57:
e3:c7:4e:1e:b1:3e:2f:4d:8c:0c:82:29:e0:19:d8:60:b1:6e:
10:90:12:0e:46:cf:25:b6:32:ee:7a:88:f6:17:0a:3b:0f:10:
29:e5:61:16:0b:55:05:eb:2c:e2:db:3a:6a:1e:df:6b:6b:9e:
46:11:e6:30:ff:c5:1e:63:ab:fd:ea:48:6e:c5:30:ef:b2:c2:
b1:6f:b1:07:18:3d:b6:50:c5:31:b5:46:1d:e7:c7:09:6d:02:
43:34:d3:94:43:ef:f1:36:10:e3:14:98:95:79:a0:4e:12:49:
59:60:18:8f:d4:51:b2:99:b0:e9:57:71:a9:6f:48:0f:88:36:
bc:44:4c:0f:b0:69:4c:26:0f:af:2d:62:90:ae:e1:7b:d7:0b:
a2:c1:70:1a:37:a1:8b:b0:c7:b4:d2:6b:74:9f:c8:7b:ea:06:
4b:ca:9f:b2:44:f7:4a:2e:37:05:49:1f:54:4f:b7:21:1c:b1:
7f:a4:59:35:ff:e8:2e:82:6c:0e:6b:81:ef:04:cb:eb:c4:04:
56:c5:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:29 2026 by rpki-client