
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
File: XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json)
Hash identifier: 0LrXizIJf3mpAODXPjNKjav/2EbqYIemg/vjFoAwRy4=
Subject key identifier: 57:AC:62:34:5B:D9:AF:7E:63:74:E7:81:24:F5:A0:C6:F3:49:DD:D7
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Certificate issuer: /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial: 0BCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
Manifest number: 0BA6
Signing time: Wed 22 Jul 2026 19:26:48 +0000
Manifest this update: Wed 22 Jul 2026 19:26:48 +0000
Manifest next update: Wed 29 Jul 2026 19:26:48 +0000
Files and hashes: 1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: Qh6wADif53bUaBAuIqnNIhkZ+SQBOhfXPmMt7frsGN0=)
2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Validity
Not Before: Jul 22 19:26:48 2026 GMT
Not After : Jul 29 19:26:48 2026 GMT
Subject: CN=6a611978-5134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:ce:fa:65:08:bf:5c:c6:e6:a8:91:b5:db:
05:c6:6d:e9:04:75:47:a2:15:90:a2:23:d1:27:30:
77:50:85:f2:d4:56:61:1b:07:6f:52:6e:a1:b1:73:
02:d5:0e:54:ff:6c:45:e7:e1:8a:93:55:53:3e:8a:
86:cf:da:77:46:71:40:a6:64:82:6e:d0:ba:91:82:
58:28:48:82:6e:03:19:f9:96:50:f6:ab:06:2b:97:
3c:3e:5c:e3:12:df:05:39:ec:a8:e7:fd:03:2c:4e:
eb:52:80:4b:1a:a5:01:cc:3e:ea:8a:da:15:7e:54:
e0:85:96:9b:83:dc:01:0d:92:02:a9:f9:6f:80:88:
ff:35:55:19:bb:e8:af:0e:f8:05:45:88:da:8e:3a:
41:a4:ba:7e:41:da:e1:9c:69:c5:e2:76:ce:e0:3c:
11:a2:06:23:1b:e3:e9:62:d3:e2:53:8a:40:8a:c5:
f2:66:91:15:e8:dc:91:17:92:36:30:34:2c:62:6f:
a2:be:f3:40:e1:9c:be:f0:de:20:03:6e:a6:f2:0a:
f8:79:05:b0:e3:2a:43:1b:b8:98:71:e8:59:d6:a4:
8a:de:bc:18:1d:67:3c:8e:87:a4:1e:6c:b6:01:21:
d7:f0:a7:91:e6:29:e5:ba:b6:20:9f:8e:94:dc:91:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:62:34:5B:D9:AF:7E:63:74:E7:81:24:F5:A0:C6:F3:49:DD:D7
X509v3 Authority Key Identifier:
keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:06:d3:a8:59:6b:a5:10:b3:ac:0d:2a:9d:b7:df:8f:28:40:
b5:83:85:38:11:61:ab:ee:a1:11:b8:58:ad:99:b0:e7:3c:ce:
c9:c7:74:34:0c:8b:7f:5d:9a:46:a2:97:59:88:ca:69:53:83:
0a:7e:4a:06:7c:e9:d9:4c:1d:6d:39:2b:76:e2:a1:e7:b7:1d:
45:88:29:d5:09:a9:37:4f:81:9a:ee:f8:f5:cf:cc:24:31:e4:
2a:6e:e1:31:30:fa:13:f1:6b:f9:20:e1:22:27:89:e8:6e:7d:
17:e9:ed:34:8f:dd:49:ac:e2:e2:e6:b9:2e:d6:80:7b:0e:b7:
b7:25:72:d3:53:0a:bd:5a:8e:36:e8:c3:7d:2d:52:9f:39:b5:
ea:38:70:df:ae:cf:3c:7a:1d:d7:44:df:b7:ad:98:e4:50:c6:
db:b0:02:ef:50:b8:b0:86:89:3a:34:db:32:1f:28:e0:be:52:
50:f2:84:95:9e:43:51:54:19:72:36:50:2a:c3:f3:a1:87:fb:
c6:fe:c6:62:91:ea:23:5f:ee:79:8c:dc:d1:ab:96:06:8b:9d:
8e:9e:cb:9c:61:33:99:24:ef:5c:74:34:cd:a3:58:cc:f3:2b:
87:1b:c8:38:b1:ca:64:15:60:ff:3b:94:90:e3:6f:4d:ab:8f:
8d:a4:12:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxRDMxMTAvBgNVBAUTKDVFOTlENzA4N0RENTRFQTJFN0U3NUY1QzgwODcwNzEz
ODNFOEIyOUUwHhcNMjYwNzIyMTkyNjQ4WhcNMjYwNzI5MTkyNjQ4WjAYMRYwFAYD
VQQDEw02YTYxMTk3OC01MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3/O+mUIv1zG5qiRtdsFxm3pBHVHohWQoiPRJzB3UIXy1FZhGwdvUm6hsXMC
1Q5U/2xF5+GKk1VTPoqGz9p3RnFApmSCbtC6kYJYKEiCbgMZ+ZZQ9qsGK5c8Plzj
Et8FOeyo5/0DLE7rUoBLGqUBzD7qitoVflTghZabg9wBDZICqflvgIj/NVUZu+iv
DvgFRYjajjpBpLp+QdrhnGnF4nbO4DwRogYjG+PpYtPiU4pAisXyZpEV6NyRF5I2
MDQsYm+ivvNA4Zy+8N4gA26m8gr4eQWw4ypDG7iYcehZ1qSK3rwYHWc8joekHmy2
ASHX8KeR5inlurYgn46U3JFwYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFesYjRb
2a9+Y3TngST1oMbzSd3XMB8GA1UdIwQYMBaAFF6Z1wh91U6i5+dfXICHBxOD6LKe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFEMy8wQTg0NTlGNDUy
MzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRxTG41MTljZ0ljSEU0UG9z
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hwblhDSDNWVHFMbjUxOWNnSWNIRTRQb3NwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODFEMy8wQTg0NTlGNDUyMzUxMUVBOUEwQ0IyNzNDNEY5QUUwMi9YcG5YQ0gzVlRx
TG41MTljZ0ljSEU0UG9zcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAywbTqFlrpRCzrA0qnbffjyhAtYOFOBFhq+6hEbhYrZmw5zzOycd0NAyLf12a
RqKXWYjKaVODCn5KBnzp2UwdbTkrduKh57cdRYgp1QmpN0+Bmu749c/MJDHkKm7h
MTD6E/Fr+SDhIieJ6G59F+ntNI/dSazi4ua5LtaAew63tyVy01MKvVqONujDfS1S
nzm16jhw367PPHod10Tft62Y5FDG27AC71C4sIaJOjTbMh8o4L5SUPKElZ5DUVQZ
cjZQKsPzoYf7xv7GYpHqI1/ueYzc0auWBoudjp7LnGEzmSTvXHQ0zaNYzPMrhxvI
OLHKZBVg/zuUkONvTauPjaQS+A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:34 2026 by rpki-client