
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: mCIv0A05KNHO5su7ZMryKHB8O2i3q6RC7zSDUg94iiM=
Subject key identifier: 67:6B:2C:BE:5F:B6:37:C9:ED:4A:4E:98:92:7E:76:8A:99:FB:AD:32
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 2686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 266A
Signing time: Wed 22 Jul 2026 15:46:31 +0000
Manifest this update: Wed 22 Jul 2026 15:46:31 +0000
Manifest next update: Wed 29 Jul 2026 15:46:31 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: xg1h/YRA2OUaMJXOi50pABHD3JPwZffZseI+HESrMQM=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:46:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9862 (0x2686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Jul 22 15:46:31 2026 GMT
Not After : Jul 29 15:46:31 2026 GMT
Subject: CN=6a60e5d7-4511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:7d:ca:d7:17:30:a6:04:fc:39:72:2f:ef:
2a:67:76:73:11:a3:5b:af:ad:84:60:ca:2f:f3:5d:
f7:7d:84:2e:21:5a:0a:53:53:81:a1:c4:b7:9d:89:
f0:eb:0a:7d:17:58:21:e5:1b:51:b4:7f:bc:49:54:
c1:13:85:bb:d8:96:d0:fa:b6:27:5d:f0:2c:e5:05:
14:f3:90:87:1f:d3:df:5d:0c:3c:f1:da:37:c8:4c:
f5:17:70:81:88:76:86:a6:90:fa:a7:82:96:e4:70:
a6:10:e0:ab:0a:23:94:60:ae:76:16:b5:c0:1f:e1:
d1:96:0c:29:86:cf:51:f4:5a:10:5f:ff:4f:11:20:
57:74:2f:c6:24:3c:6a:1f:dc:47:b0:59:e2:3e:ba:
b7:5d:53:ed:12:01:18:f9:af:5d:ea:af:f1:fd:87:
16:7c:ab:a0:a2:62:27:9f:02:47:6f:01:76:df:ea:
b7:a5:3c:fb:c3:4f:e2:d9:e9:2c:e2:7a:04:67:1c:
fc:8e:f5:87:fc:a4:00:04:6e:40:85:31:58:cb:89:
9f:9c:0a:cc:a6:c9:99:13:d0:67:29:6c:9f:3a:fb:
07:76:e4:7d:ac:2d:56:f0:73:34:91:a0:f5:26:33:
34:a0:06:6e:dd:a2:fb:d9:6b:4a:81:da:a8:ce:23:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:2C:BE:5F:B6:37:C9:ED:4A:4E:98:92:7E:76:8A:99:FB:AD:32
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:dd:06:ee:b3:15:11:af:db:eb:10:11:bd:03:66:6a:18:
77:4b:4b:03:f3:39:c0:2d:4d:6a:f7:39:6b:c6:09:d7:e8:83:
42:b1:c8:8b:63:24:bc:2a:38:48:21:94:7c:90:a1:80:c8:5d:
2b:e7:36:ae:be:af:f5:51:e6:76:d0:8b:f8:b9:dc:31:19:1c:
06:5f:e1:4e:58:e1:fe:1d:13:9d:bb:29:e5:0c:20:87:38:5c:
c6:5a:fd:fc:87:17:9d:ee:ff:5b:17:fe:32:df:dc:53:1f:42:
9f:55:2b:11:06:60:24:f1:13:04:78:85:e6:2b:c7:5f:eb:e5:
f5:25:f4:1b:f4:55:d4:b5:a9:dd:cf:e2:09:5f:81:d8:2d:61:
41:ce:9c:1b:f8:72:e0:a4:11:13:f6:7e:37:8d:3b:24:69:42:
c4:e6:fd:35:ab:c9:46:d5:46:85:21:7d:ad:8d:7b:b1:35:b8:
66:6b:36:ff:cc:16:62:b8:08:b9:b9:9c:4f:83:64:3e:b5:69:
4a:5e:06:f3:17:d3:19:e8:1f:d4:d6:1c:82:9e:f1:a8:64:70:
3d:15:c2:58:d0:c5:e8:31:77:cf:df:ca:b1:95:45:d3:eb:01:
ab:3e:c5:5a:83:16:45:24:80:e0:07:b7:8c:09:5e:45:9c:0f:
bc:f9:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:02 2026 by rpki-client