
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json)
Hash identifier: AymEfxwDf86zAGcAjTEvgB3GzRdPBTyv/s3ePUTxV7s=
Subject key identifier: DB:33:24:4E:C6:D5:E7:B7:22:6B:C9:10:D3:2D:0D:7C:5F:78:78:21
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial: 0BBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
Manifest number: 0B91
Signing time: Wed 22 Jul 2026 19:31:56 +0000
Manifest this update: Wed 22 Jul 2026 19:31:56 +0000
Manifest next update: Wed 29 Jul 2026 19:31:56 +0000
Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: sdLfq3kB4l4UZQnlqIlgbrZQuhb0KhXIMFLDvHnXjFE=)
2: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: lAb12WKjWNZhERVfu+rXY9B+lTIhcdPrOzSWtvyJJG0=)
3: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: pNMivkkOLffKPDrh/XyyiMiyvZdESt4jTfT5doztz7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Validity
Not Before: Jul 22 19:31:56 2026 GMT
Not After : Jul 29 19:31:56 2026 GMT
Subject: CN=6a611aac-266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:24:6e:e8:57:61:76:42:5f:c5:4d:55:9d:b1:
8e:e6:12:2c:82:37:c7:14:15:fc:82:b3:7f:fe:c0:
00:22:30:5a:c0:61:82:be:78:21:6b:8d:42:54:10:
30:bd:56:bc:e0:44:95:dd:dd:98:99:a4:66:44:83:
2b:dd:6d:bf:f1:19:f7:58:a8:d0:30:ad:c0:23:7b:
b2:9e:46:30:93:74:9f:33:c8:a9:61:84:36:21:79:
bc:ee:ca:cb:74:4a:c9:62:3d:db:69:c0:0b:df:88:
eb:14:8b:ab:1f:85:ec:a1:d0:4a:08:d5:a2:d6:e0:
85:e8:a3:7c:b1:dd:4f:92:09:c6:a5:d0:e3:db:10:
8f:fb:83:32:35:60:e3:15:63:e0:fc:fa:11:d1:95:
3b:58:32:05:dd:52:d0:26:67:27:77:e1:ff:f3:07:
a7:df:e7:60:d4:81:d4:56:ee:46:34:3e:8d:13:15:
43:29:91:35:cd:cd:a4:a3:34:32:9b:32:d7:b2:03:
ff:f6:bf:76:57:77:e6:aa:23:5c:c2:04:58:ac:e9:
57:25:ca:34:6e:24:eb:65:62:fd:b4:83:ec:13:04:
bf:1e:6d:76:eb:d1:c8:70:7f:35:37:e1:63:e9:ab:
03:aa:81:d2:a1:45:71:fe:ff:ef:9f:cb:0c:6e:c1:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:33:24:4E:C6:D5:E7:B7:22:6B:C9:10:D3:2D:0D:7C:5F:78:78:21
X509v3 Authority Key Identifier:
keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:e2:72:58:6f:e8:a3:fe:ab:c7:f1:d3:22:e9:2d:16:09:
6d:8e:14:47:11:ec:6d:d6:b3:9f:2f:3a:9f:b9:af:15:e1:47:
cf:2f:60:e6:ee:42:aa:fd:77:21:fe:4d:26:f6:2b:32:57:17:
77:41:72:6a:7a:7e:96:4e:ce:1c:d6:ac:df:2f:70:7e:3d:9e:
4f:71:67:c6:32:1c:ea:0d:1f:c9:48:3e:ea:23:2f:24:de:c6:
04:68:11:a5:5d:dd:53:50:40:12:27:5e:6f:ec:e5:2c:59:62:
ae:df:02:25:52:cb:27:85:98:8b:12:65:44:21:20:66:35:80:
85:de:c7:d8:74:fa:6c:59:b0:69:98:5b:1a:d5:eb:cf:07:69:
6d:14:14:fd:0f:23:09:5d:86:29:5f:a3:bd:55:8a:a1:01:cf:
7c:ee:44:cf:eb:c2:8f:6e:2d:ce:d4:3b:03:38:26:43:2a:14:
ff:bb:7c:fb:a8:30:e6:f2:86:bc:d9:47:00:9e:ba:2c:bf:ea:
21:41:b1:24:36:4e:6a:95:08:53:84:3b:c5:29:82:01:dd:ca:
43:ef:33:fa:91:94:63:a9:18:50:2e:c6:34:01:31:43:f4:b1:
aa:b9:ec:6b:cc:ae:6b:c7:68:49:7f:b6:37:18:6c:a8:1b:7d:
ec:43:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:12 2026 by rpki-client