
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
File: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft (raw, json)
Hash identifier: 9JqVHpopLTpHskBgEcqaQuiU/Llwdoy24lkT21iOtPY=
Subject key identifier: DE:5C:4F:28:A9:DB:46:0B:7C:A0:19:AA:16:B6:6F:FD:C3:DB:42:B7
Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Certificate serial: 038E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
Manifest number: 0386
Signing time: Thu 23 Jul 2026 01:39:25 +0000
Manifest this update: Thu 23 Jul 2026 01:39:25 +0000
Manifest next update: Thu 30 Jul 2026 01:39:25 +0000
Files and hashes: 1: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl (hash: TTMpNKA8OeJCoi77SnrRv2GMYcjPlXlH0mu/iZ7xcDE=)
2: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (hash: OXdwgZN4vaFZ6nWyjvt24Xk4nrgBuF6Vr7LgDqZpHIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Validity
Not Before: Jul 23 01:39:25 2026 GMT
Not After : Jul 30 01:39:25 2026 GMT
Subject: CN=6a6170cd-0ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:2f:50:2a:22:23:68:e2:ae:0a:d3:ad:74:
d0:a1:4d:60:bd:b9:19:d1:a5:38:bb:0e:71:29:bf:
f9:85:b7:5e:b1:82:1d:be:e1:de:c6:8a:a1:26:8a:
98:84:a8:eb:4f:c2:6f:e7:75:1f:58:12:17:5c:d9:
be:f0:92:50:4b:2e:04:ef:c3:93:63:01:0b:27:f7:
21:df:f1:f8:66:04:99:6e:e7:08:11:86:93:e4:6b:
e7:cf:58:0e:99:09:2e:4c:fe:0f:7a:03:05:f3:cf:
bb:30:12:f2:7f:07:4f:a7:a8:5c:29:45:bd:62:40:
5b:cd:5c:76:96:33:e7:8f:bd:3b:1c:45:2e:6b:3e:
a2:1c:ec:2d:80:e4:a6:30:36:1e:e3:12:c0:14:ee:
ea:25:39:cf:af:c9:a5:0a:ea:c3:47:7c:13:d4:7f:
e2:10:39:4f:45:52:32:3c:2e:f8:c8:9b:96:3a:52:
58:c8:fa:e5:2b:21:b7:79:65:c1:f4:cd:78:cc:36:
c9:09:8e:10:6f:73:2b:fe:8a:e0:06:40:1c:0b:54:
f7:13:83:88:c4:37:26:c8:60:d4:46:6b:68:ef:c1:
ea:fc:00:a8:fa:0c:cc:66:56:23:ce:9f:bb:c0:3f:
04:13:45:4f:4d:d5:02:9b:dc:f1:49:05:81:f3:a2:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:4F:28:A9:DB:46:0B:7C:A0:19:AA:16:B6:6F:FD:C3:DB:42:B7
X509v3 Authority Key Identifier:
keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c3:70:0e:10:25:93:26:2c:15:14:a7:1f:2a:20:8a:67:c5:
84:80:9d:3b:ca:5a:7f:9a:b1:b4:47:ae:57:eb:c5:30:14:6d:
01:5a:8b:40:f0:8d:2d:ed:f8:dc:10:62:54:d0:61:64:bd:10:
ab:22:2f:2c:62:e1:79:35:db:4f:1c:10:8a:13:b9:28:6c:19:
e6:d0:43:d6:50:02:64:60:12:83:a0:8e:07:b0:da:26:6e:4b:
96:ed:63:50:54:85:3f:7d:e8:d6:88:ed:2b:1f:56:25:25:05:
3c:13:75:a8:07:1e:89:03:1c:6b:52:1b:e8:8a:a2:90:ae:d4:
77:7b:e4:c5:0a:30:30:a9:ee:9a:34:b0:83:a3:81:aa:98:e3:
9f:a6:78:51:1e:63:8f:2d:d0:2f:7c:87:47:6b:ba:08:96:66:
9d:bb:68:98:02:14:e4:b9:6a:27:43:f3:9f:44:7b:53:1a:a1:
21:32:a9:f7:28:fe:98:53:6a:ca:9a:c9:ff:fa:a0:7a:45:54:
a7:6b:c0:fb:e8:d4:3a:e4:6a:66:1d:c1:b1:49:cc:2d:89:43:
ec:7d:72:27:cd:66:24:37:f3:de:e7:b6:26:20:dc:d3:de:f8:
28:2d:11:48:c1:dd:5f:16:27:fb:66:40:cc:85:e2:00:66:66:
4f:1b:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:41 2026 by rpki-client