
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: lN9MzfgJPFdHhHVRGovoqRo+WFP6IpcLhKZ/7qtwfRk=
Subject key identifier: E7:E0:03:CB:03:6B:70:55:67:EB:B0:CF:13:B0:18:38:E2:E9:32:D2
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 018C
Signing time: Thu 23 Jul 2026 06:05:11 +0000
Manifest this update: Thu 23 Jul 2026 06:05:11 +0000
Manifest next update: Thu 30 Jul 2026 06:05:11 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: yKr2SIEUAjhSyK8ZIJxS0FAz5t7U23SNgV415GbQf1o=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Jul 23 06:05:11 2026 GMT
Not After : Jul 30 06:05:11 2026 GMT
Subject: CN=6a61af17-d4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:88:38:51:e0:d7:41:50:84:8c:9b:2e:6c:
28:0d:25:97:31:82:64:4a:09:65:e5:aa:15:2c:18:
71:1b:55:bb:d8:de:64:53:44:c1:ad:2b:ae:83:c8:
7c:b9:45:e6:23:28:63:a4:61:4a:60:a9:10:02:dd:
f6:66:12:3a:03:40:29:3b:48:ca:50:8e:69:87:70:
e1:14:e5:74:1c:a6:8d:2c:48:16:b2:5a:0e:c9:37:
a0:f0:9c:f2:0d:47:0e:a5:f4:14:00:51:e6:93:78:
8b:0d:16:36:c0:42:8d:60:80:e8:53:70:62:fc:fe:
06:12:2d:23:51:70:0c:88:e8:0e:32:75:9e:4d:29:
fb:a8:fc:4f:87:2f:f8:da:fb:2a:cf:99:15:fb:35:
ed:77:24:05:7a:94:86:69:00:c5:3f:f3:e6:a9:aa:
84:da:01:a1:27:3a:34:68:f1:2b:ad:cd:50:9a:b5:
3b:68:b0:e9:84:69:de:20:e7:36:aa:95:22:ae:74:
c4:a8:42:67:d4:c6:32:ad:ca:bd:09:9e:06:6b:ad:
85:1d:ca:66:f9:1f:85:80:22:be:95:8c:fd:f7:f5:
62:bf:44:f7:2e:24:b8:47:09:08:37:d2:cc:37:0c:
31:6e:ba:62:92:d2:b6:8e:1a:9f:9d:74:b1:e1:c9:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:03:CB:03:6B:70:55:67:EB:B0:CF:13:B0:18:38:E2:E9:32:D2
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7a:41:c2:8d:c1:91:fd:dc:2b:00:ae:7f:a6:c4:bf:67:9d:
3b:af:84:e4:a9:14:5f:38:0f:6a:df:48:14:de:f4:84:11:88:
14:c4:68:ba:b1:99:a3:65:37:2d:a2:9b:7b:e2:b0:b3:64:98:
56:a1:44:60:91:b7:cb:9e:40:b1:89:7a:36:28:ba:3c:d4:98:
ef:94:fc:33:fa:6c:55:04:87:3e:28:f6:da:2f:a9:df:b9:a4:
a2:89:77:a4:0e:62:09:c3:cf:52:6a:bc:d6:cb:ef:50:c4:78:
dc:2a:b7:e3:68:32:54:ae:af:1b:f8:68:e1:8d:f6:56:46:21:
96:54:06:57:94:03:42:42:8e:34:60:52:85:a9:23:8f:91:d2:
e1:1e:5d:ad:20:11:e3:d4:14:5c:47:36:fd:64:34:bc:b1:9b:
51:0b:08:83:2c:00:55:16:8c:56:03:84:4d:03:e5:45:9c:c6:
52:8c:b5:e3:b7:0d:92:27:76:b6:06:9f:4c:10:fb:ff:be:ff:
bf:b7:1f:6b:0a:d0:d1:97:6a:74:86:d3:b2:52:58:35:d2:b1:
0a:cd:65:5e:10:d8:cb:8a:2a:ab:be:75:02:a6:6b:25:be:51:
50:05:ad:4b:f0:89:2d:10:f6:6d:2f:30:ec:d0:53:ee:40:c9:
e2:54:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:32 2026 by rpki-client