
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: gKIJpAt3LfXvW/W2iNTqBjchaWxVfvRjGmHESa8a4U4=
Subject key identifier: DC:74:17:CE:CB:B4:AC:BE:DD:35:B9:51:FC:63:EB:32:81:F2:AF:1C
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0D9E
Signing time: Wed 22 Jul 2026 19:20:27 +0000
Manifest this update: Wed 22 Jul 2026 19:20:26 +0000
Manifest next update: Wed 29 Jul 2026 19:20:26 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: kvZUDOhKbZ7pDpfdXe99Op+LtPThR/2XGQyJJXvWfgk=)
2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=)
3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Jul 22 19:20:26 2026 GMT
Not After : Jul 29 19:20:26 2026 GMT
Subject: CN=6a6117fb-fb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:04:dd:4b:bd:50:31:e7:2c:69:04:20:c0:
08:74:3e:82:8f:39:6a:44:81:5e:fb:8d:77:9c:c8:
3c:5a:9e:3c:57:20:d7:bc:c6:07:4a:6c:37:81:dd:
9b:b4:56:70:f6:b5:33:14:49:7a:2a:14:6b:83:0e:
3f:6d:e7:63:22:44:22:15:dc:99:b7:e7:65:11:ee:
fe:fb:5f:d1:b8:52:9c:b7:b4:ba:f9:5d:7e:b1:57:
e6:39:74:2e:71:03:55:05:0d:49:75:cf:bc:03:f1:
2e:b1:a2:9c:ed:b3:ed:eb:cd:97:7c:36:14:80:3b:
78:68:f0:4d:82:dd:b7:58:c9:f4:78:fb:30:8d:61:
9d:aa:d8:8c:79:ac:d0:f9:f6:30:dd:06:09:22:84:
bc:3d:d4:a2:ec:31:83:d8:d4:45:d6:8e:c7:4e:ce:
7c:43:26:20:9b:e4:31:f8:80:fe:5a:ea:14:09:1a:
4c:61:5c:a2:b8:5c:69:26:ee:30:1c:5c:1c:e6:ce:
69:65:79:ba:dc:be:ec:9c:a5:70:70:d0:38:89:70:
f3:4a:69:16:43:99:90:80:ff:35:04:03:13:54:30:
4f:3f:1c:6e:ab:ba:e7:e9:0f:c8:a8:3a:9d:1a:9d:
0b:61:44:5f:3f:df:73:3e:ad:dc:0a:f3:1d:a9:c1:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:17:CE:CB:B4:AC:BE:DD:35:B9:51:FC:63:EB:32:81:F2:AF:1C
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:c5:0e:24:9c:99:e0:26:c6:c1:3a:e4:5a:56:7f:01:34:7e:
f7:85:eb:77:03:27:47:97:39:0f:1d:14:ea:cf:dd:a4:39:85:
5b:ce:2b:02:1c:c0:b0:d2:ef:6b:69:f1:cb:65:f1:84:3e:1f:
56:f2:99:f1:d6:35:13:94:93:04:dc:f7:6e:11:a7:23:5b:88:
46:07:52:1f:2a:27:7f:fa:34:37:2b:87:41:e1:53:d2:8e:28:
f5:90:d6:02:65:24:3f:bb:f5:21:4a:fe:c7:63:58:ce:0b:9e:
67:ec:97:dc:55:f9:fa:aa:4b:64:c5:a5:2c:92:cf:6e:9b:cc:
76:d9:c5:da:49:a8:c2:6f:43:45:72:0f:5b:9b:8b:0c:c5:45:
16:0e:4f:56:e5:47:cd:f3:d3:00:1a:2f:1f:31:df:8c:9c:38:
b2:d9:8a:3f:5f:14:cf:2f:06:e7:0f:98:97:75:fa:df:2e:b4:
00:57:25:c7:8c:ee:7f:8b:94:f6:89:42:69:42:a9:07:f0:5c:
e7:77:cb:18:77:fd:28:54:38:e1:b8:4a:95:cf:bf:a7:f2:85:
23:01:d2:91:cc:1f:4b:5b:c4:b2:29:77:06:79:31:8a:3f:08:
d4:cc:1e:c5:c0:37:e3:7f:f0:dc:83:20:89:10:8e:3c:42:b0:
ed:2d:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:18 2026 by rpki-client