
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json)
Hash identifier: Vkntalzk27PCYIIi+iuOQnrBMbGAJAuiRvf+La7v/CQ=
Subject key identifier: E9:B2:68:AE:01:EA:07:F3:2D:9F:C2:6F:5B:88:5B:C6:04:AA:88:F0
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial: 092C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
Manifest number: 091A
Signing time: Wed 22 Jul 2026 20:43:07 +0000
Manifest this update: Wed 22 Jul 2026 20:43:06 +0000
Manifest next update: Wed 29 Jul 2026 20:43:06 +0000
Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: jEWVEtxARJwMlXD77h5AqECT7+gnO9woogs5aPaAA1s=)
2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: eazjY0QI0IkousembgiUMF6ex//mtspG+XkKlVCT+t4=)
3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: u1RDbYNdHTAW3BTDzKScEWLA3q8xl+IocU5STlH9Ois=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Validity
Not Before: Jul 22 20:43:06 2026 GMT
Not After : Jul 29 20:43:06 2026 GMT
Subject: CN=6a612b5a-2ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:71:87:cc:2f:22:af:8c:4b:ab:52:06:79:
17:bb:b0:61:14:51:1e:25:9f:60:9e:4e:ef:fc:0a:
04:bb:cc:45:8d:69:7b:cd:97:c4:8e:7c:db:6b:3f:
39:e5:73:33:eb:2e:f8:7f:52:fd:cb:76:8b:0e:55:
84:cf:3d:4f:3a:25:10:36:87:8d:92:25:43:2f:aa:
d9:22:ce:72:70:7b:e3:b6:4f:18:6f:fb:c5:9d:66:
29:d1:d7:a8:79:9b:e8:67:e6:98:14:14:28:bc:b2:
67:f2:5e:90:ca:0a:4d:e1:b8:77:8d:27:31:a8:86:
80:26:bb:16:89:7b:ab:f9:56:0b:5e:1c:42:be:d6:
8e:5f:13:68:23:77:5f:57:9c:64:94:c2:e7:28:a5:
49:76:b1:e6:45:cf:ed:5d:45:db:ff:b9:fb:ff:89:
03:29:4b:bd:3f:08:9b:17:9e:74:14:8c:9e:5d:2d:
43:0a:8a:89:28:28:96:40:08:e9:dd:3e:57:cd:81:
48:7c:c2:0f:97:77:43:0b:f2:8f:e5:a6:a2:27:84:
21:99:45:1f:61:d9:70:08:af:f2:86:64:93:5e:d1:
0b:1a:71:77:cb:04:8e:f8:23:7b:2c:90:eb:cb:e8:
f3:7a:bd:f6:41:98:de:60:91:df:ca:69:8d:99:4f:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:68:AE:01:EA:07:F3:2D:9F:C2:6F:5B:88:5B:C6:04:AA:88:F0
X509v3 Authority Key Identifier:
keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:36:dd:3c:e9:24:9d:f1:58:07:29:01:be:2f:c9:81:14:
0e:cc:3b:b1:73:ef:88:30:b8:5c:cd:d3:a8:fe:fa:60:9a:ef:
ed:e1:94:fb:6d:98:ae:70:58:20:e7:23:cd:eb:68:83:18:13:
7a:2d:e9:97:2b:c5:3a:81:ec:e4:34:ce:14:f6:53:49:40:74:
45:84:e2:7b:0a:86:7d:16:d9:51:ba:16:6c:62:b8:6d:21:e8:
5f:a6:2e:cd:66:d3:91:d3:3e:cd:73:cf:92:5d:4e:c1:dd:98:
db:3e:cd:ad:30:59:65:9c:c4:85:cd:29:3e:9d:86:0c:4f:03:
a1:a4:99:40:9b:b5:6c:22:da:8f:18:4d:86:97:dc:2a:ca:02:
0c:9c:6b:d8:ae:33:e1:e9:c0:8d:fb:82:f0:38:f8:c0:c3:a7:
1a:14:8d:49:63:21:d0:65:a9:b5:df:78:74:d6:aa:9f:b7:5a:
88:9a:64:3c:2a:c5:8e:12:32:bd:d3:21:20:e1:08:86:cf:f1:
3d:eb:49:36:ce:23:a4:25:87:7d:a1:37:ce:87:cf:25:65:9a:
6c:a6:c4:db:06:eb:c9:33:a8:96:05:41:1f:b5:52:66:75:86:
59:60:93:5b:1e:4c:5d:df:5c:9c:4a:49:c2:4d:63:1b:01:85:
f4:42:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:46 2026 by rpki-client