
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json)
Hash identifier: Oogmo9I2cd+xBAWAjqzEY4jUOcY4NA1opzdFZxsmHqM=
Subject key identifier: 80:7F:28:B6:BF:CA:4B:D9:70:27:0F:F2:FA:F6:5F:E4:8C:9F:F5:BB
Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
Manifest number: 0261
Signing time: Thu 23 Jul 2026 03:19:44 +0000
Manifest this update: Thu 23 Jul 2026 03:19:44 +0000
Manifest next update: Thu 30 Jul 2026 03:19:44 +0000
Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: 04JnixMuTLKbFv4AmbmDmL2yeel1wu0+YSpOh0j1SCM=)
2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Validity
Not Before: Jul 23 03:19:44 2026 GMT
Not After : Jul 30 03:19:44 2026 GMT
Subject: CN=6a618850-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:28:a5:1b:ee:ab:e1:32:9c:65:d7:41:28:
7c:49:19:47:34:0f:46:bb:7c:f0:f1:11:b7:24:ba:
f6:22:5a:1d:ff:29:5e:ef:73:f5:3b:e2:2e:c9:b1:
3f:ba:4d:32:8d:97:76:8a:8d:51:a2:b6:62:9a:12:
09:32:bc:1d:bf:6c:e2:b5:3a:24:6c:3b:40:9f:46:
3e:32:ad:1b:1a:6b:e9:b7:7b:73:aa:74:4a:f3:ed:
97:c8:f7:4b:36:60:91:46:97:7e:47:3a:17:9e:2e:
88:a8:0a:fe:ad:d2:2e:09:25:0e:68:d4:24:0e:9a:
ad:d7:82:68:31:d4:f4:89:6a:8e:2b:e5:ae:18:a5:
1d:ba:af:9b:fb:8a:83:54:36:00:ab:64:5d:1a:d1:
10:f3:19:12:93:a1:5b:ec:54:f5:3c:fd:8a:9d:3e:
bc:7b:cf:3e:fe:75:24:77:3f:66:bd:b1:87:f2:b4:
b1:61:79:b2:7b:ba:da:3b:47:ec:01:45:5d:cd:ff:
14:fe:a8:f6:94:67:9d:3a:35:f5:72:38:0a:b7:73:
ca:a5:e2:b7:93:aa:d3:a0:6c:2f:a9:c5:d6:eb:7b:
cf:c9:b2:42:46:19:7d:1d:28:48:23:c6:88:5d:93:
87:31:eb:ff:1f:29:dc:6a:16:f6:59:1f:0c:82:5e:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:28:B6:BF:CA:4B:D9:70:27:0F:F2:FA:F6:5F:E4:8C:9F:F5:BB
X509v3 Authority Key Identifier:
keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:28:7a:58:92:75:96:1e:50:5a:11:42:cc:d2:a6:86:33:4e:
2b:b7:07:86:10:59:f7:45:5e:60:5d:f5:4a:ce:a5:85:0b:88:
1c:2e:cb:28:50:fe:ed:2f:62:16:3e:e8:32:81:5f:05:83:36:
5b:8e:73:58:84:e2:e6:52:57:78:c5:71:5f:0b:e6:5d:75:66:
87:f5:ea:68:40:65:c6:41:46:45:db:6d:ca:95:e2:29:70:dd:
3a:08:ce:92:71:62:7b:45:20:25:24:90:98:7f:8d:6a:90:17:
19:71:7d:6d:7c:15:52:a1:44:0e:0f:b0:97:a0:37:3d:bb:43:
74:32:20:7b:88:9d:52:b5:3c:f4:96:dc:31:45:d0:e2:35:27:
a5:b9:39:5e:12:df:7a:3b:12:6b:f7:a4:d5:e4:56:e6:35:26:
41:c5:55:f5:ee:46:99:a5:d7:b1:05:e5:f2:22:e2:cb:c4:08:
20:77:37:1d:02:72:57:d5:5f:bd:ff:3a:05:b7:a6:5b:62:ca:
2a:46:fd:a0:4c:04:2f:98:05:97:20:52:33:e0:e0:98:f0:63:
ad:23:8c:e1:8b:c6:46:49:f0:44:a1:63:40:00:c9:6c:aa:50:
0a:b0:6b:1d:e2:99:d3:60:07:7d:64:a9:db:35:eb:1e:98:c9:
04:c1:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:49 2026 by rpki-client