
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
File: xBA2pq0HEadA_q5RVOE3zud7x7E.mft (raw, json)
Hash identifier: 4SzyFF88XaEuc9DasAoPN6RZioHnwCYi5ZcjEYQ+8RM=
Subject key identifier: 86:E2:26:A2:57:6F:7C:CF:BD:0E:EF:0E:95:EA:40:17:DF:11:85:80
Authority key identifier: C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1
Certificate issuer: /CN=A91F7113/serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
Manifest number: 13
Signing time: Thu 23 Jul 2026 11:08:28 +0000
Manifest this update: Thu 23 Jul 2026 11:08:28 +0000
Manifest next update: Thu 30 Jul 2026 11:08:28 +0000
Files and hashes: 1: xBA2pq0HEadA_q5RVOE3zud7x7E.crl (hash: DR0/HpwxTVNJ/hne8AQMOIjjDAtwyWGlHx9wwrhMDzA=)
2: CA0D122C6AD711F18FD2EC236D47A888.roa (hash: YHQct6L4pL/zTQ4jersZLzeD7JHF3Rv1GS4aJY0I1+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl
rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7113, serialNumber=C41036A6AD0711A740FEAE5154E137CEE77BC7B1
Validity
Not Before: Jul 23 11:08:28 2026 GMT
Not After : Jul 30 11:08:28 2026 GMT
Subject: CN=6a61f62c-ed2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fe:fe:6b:98:be:52:6a:65:5e:b3:2d:a0:e7:
51:ad:cb:a5:96:ce:f7:d6:9b:c5:ea:0e:7b:b5:0d:
87:81:23:73:2c:59:f6:7f:2b:ba:9b:9d:a2:fd:31:
8c:61:5b:68:46:0c:cc:48:3a:20:c6:97:2b:cd:b2:
5f:28:38:53:78:ec:c1:28:d9:02:ff:92:db:82:0d:
e7:c6:4b:7f:a1:d8:8f:dd:20:f7:b0:2f:dd:7a:ac:
25:a7:bc:11:16:96:32:16:41:e5:2a:a0:9c:e4:78:
7b:8e:b7:29:d0:f7:1e:d2:d3:79:fb:fb:4d:b4:38:
a6:69:82:b1:c8:0a:c1:1d:f2:ab:47:52:65:24:58:
90:02:30:17:5f:31:e2:ca:f3:24:f8:b5:7a:9e:35:
1a:be:4a:56:75:d9:aa:2f:c7:ee:2a:1d:90:cd:d5:
a9:2e:6d:75:3a:93:4a:ab:15:88:d5:b8:44:8f:22:
05:1f:8a:64:00:e7:a3:ab:98:a5:54:70:50:9e:0d:
26:d8:e1:c9:81:72:57:1b:a2:07:74:ea:55:bb:ed:
9c:ee:a6:e1:7d:a5:11:db:dc:26:da:e0:13:8f:2d:
3b:8a:73:25:43:d2:74:84:c4:98:ce:ee:94:62:36:
b5:b9:7d:db:3c:a9:8d:dd:a7:aa:aa:ba:04:3f:dc:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:26:A2:57:6F:7C:CF:BD:0E:EF:0E:95:EA:40:17:DF:11:85:80
X509v3 Authority Key Identifier:
keyid:C4:10:36:A6:AD:07:11:A7:40:FE:AE:51:54:E1:37:CE:E7:7B:C7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xBA2pq0HEadA_q5RVOE3zud7x7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/CD67F3266AD511F1A1558F9E6C47A888/xBA2pq0HEadA_q5RVOE3zud7x7E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:48:60:a9:84:e1:36:07:fe:0c:76:5d:b0:b0:f7:51:1d:
98:63:55:95:b1:3e:7e:90:aa:10:c6:f7:f6:c4:6e:c1:1d:7f:
86:45:bc:c9:3c:32:be:57:4a:6b:a7:de:f3:f5:2a:de:96:96:
a6:b2:8c:6d:62:a9:c8:e7:64:00:8f:37:e1:fe:c6:eb:93:b3:
93:7b:c8:be:38:6e:bd:39:3d:73:9c:87:6d:7b:07:06:27:e6:
02:aa:f0:d9:dd:42:de:c9:2e:6e:07:55:b3:ee:b0:b3:05:e2:
09:26:58:c6:44:a7:1e:e5:99:cd:a2:c4:be:a4:7f:c8:52:e6:
9e:6c:1b:88:97:4f:d1:83:af:5e:4d:23:25:07:f9:8f:12:15:
df:65:19:b7:8b:8e:09:55:d0:85:ba:95:d8:cd:2d:f4:15:8c:
00:77:cf:b3:5c:6a:48:88:52:d0:6d:69:b1:08:69:02:ca:66:
30:d2:fc:49:b3:a4:ea:8c:42:28:34:84:b9:58:47:1c:d2:c2:
03:5d:cd:5b:12:26:12:9d:84:f6:28:31:db:26:99:9f:20:68:
90:6e:0e:ff:36:1f:a3:5c:86:3d:24:b5:e1:c7:b0:6b:60:f0:
e0:3f:f8:06:a7:4a:17:cb:ca:5d:41:79:dd:69:65:af:31:d3:
1c:25:be:94
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzExMzExMC8GA1UEBRMoQzQxMDM2QTZBRDA3MTFBNzQwRkVBRTUxNTRFMTM3Q0VF
NzdCQzdCMTAeFw0yNjA3MjMxMTA4MjhaFw0yNjA3MzAxMTA4MjhaMBgxFjAUBgNV
BAMTDTZhNjFmNjJjLWVkMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD5/v5rmL5SamVesy2g51Gty6WWzvfWm8XqDnu1DYeBI3MsWfZ/K7qbnaL9MYxh
W2hGDMxIOiDGlyvNsl8oOFN47MEo2QL/ktuCDefGS3+h2I/dIPewL916rCWnvBEW
ljIWQeUqoJzkeHuOtynQ9x7S03n7+020OKZpgrHICsEd8qtHUmUkWJACMBdfMeLK
8yT4tXqeNRq+SlZ12aovx+4qHZDN1akubXU6k0qrFYjVuESPIgUfimQA56OrmKVU
cFCeDSbY4cmBclcbogd06lW77ZzupuF9pRHb3Cba4BOPLTuKcyVD0nSExJjO7pRi
NrW5fds8qY3dp6qqugQ/3LH7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhuImoldv
fM+9Du8OlepAF98RhYAwHwYDVR0jBBgwFoAUxBA2pq0HEadA/q5RVOE3zud7x7Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTEzL0NENjdGMzI2NkFE
NTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFkQV9xNVJWT0UzenVkN3g3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveEJBMnBxMEhFYWRBX3E1UlZPRTN6dWQ3eDdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
MTEzL0NENjdGMzI2NkFENTExRjFBMTU1OEY5RTZDNDdBODg4L3hCQTJwcTBIRWFk
QV9xNVJWT0UzenVkN3g3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7tUhgqYThNgf+DHZdsLD3UR2YY1WVsT5+kKoQxvf2xG7BHX+GRbzJPDK+V0pr
p97z9SrelpamsoxtYqnI52QAjzfh/sbrk7OTe8i+OG69OT1znIdtewcGJ+YCqvDZ
3ULeyS5uB1Wz7rCzBeIJJljGRKce5ZnNosS+pH/IUuaebBuIl0/Rg69eTSMlB/mP
EhXfZRm3i44JVdCFupXYzS30FYwAd8+zXGpIiFLQbWmxCGkCymYw0vxJs6TqjEIo
NIS5WEcc0sIDXc1bEiYSnYT2KDHbJpmfIGiQbg7/Nh+jXIY9JLXhx7BrYPDgP/gG
p0oXy8pdQXndaWWvMdMcJb6U
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:15 2026 by rpki-client