
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json)
Hash identifier: KnbbYDrKT+YoNWH0siTRdv4TaXi0KnBAhVgN8Hf1ey0=
Subject key identifier: 24:16:E3:CD:57:58:76:D8:BF:B4:AD:86:3D:04:A9:E8:9D:A2:64:E5
Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Certificate serial: 2C77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
Manifest number: 2C77
Signing time: Sat 04 Jul 2026 15:31:24 +0000
Manifest this update: Sat 04 Jul 2026 15:31:23 +0000
Manifest next update: Sat 11 Jul 2026 15:31:23 +0000
Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: 6Y8mlA9jgfXtOqL5d7TaVU1zEB+kutfeiRT5bXlTfFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 15:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11383 (0x2c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Validity
Not Before: Jul 4 15:31:23 2026 GMT
Not After : Jul 11 15:31:23 2026 GMT
Subject: CN=6a49274b-09ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:77:65:ad:29:6f:77:a1:30:10:c2:fc:32:
83:2f:17:11:0d:c8:cc:54:83:66:e1:d4:8c:64:4e:
f2:eb:f4:a9:da:34:bc:d3:c5:17:c3:2e:72:47:8a:
e4:74:3d:fd:c5:b2:5c:26:6e:15:e9:7d:38:e0:0d:
20:60:33:0a:ea:81:d9:0d:a4:17:f1:9d:12:ff:b8:
a3:49:da:25:d2:6b:93:ed:72:7c:08:e3:b1:ad:75:
b7:d9:cc:be:b3:09:58:e0:7c:ed:62:eb:88:98:d0:
c4:c3:91:92:57:71:89:be:75:c9:2d:74:c9:48:be:
f7:ca:04:15:c9:9a:e0:33:ca:e4:f2:fc:e8:87:99:
13:70:99:48:48:99:4d:b7:71:6d:f7:f4:a1:75:c1:
86:20:a6:15:02:8d:00:62:c1:cc:6a:41:05:44:0b:
47:23:1f:d7:fa:4d:7e:45:86:0f:a3:e9:6f:58:93:
4a:35:d1:cf:bd:9a:af:6e:59:17:22:b3:27:3b:96:
8b:d4:65:39:26:ba:f1:8b:55:18:ab:dc:cc:d3:83:
ac:c4:ae:db:fc:20:ea:5d:01:3c:0f:c9:a9:5c:d3:
df:25:63:dd:f8:b3:6b:39:5e:b2:6b:47:6f:ad:4c:
f7:2a:b5:97:db:c0:81:ce:ad:47:6c:43:96:a5:12:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:E3:CD:57:58:76:D8:BF:B4:AD:86:3D:04:A9:E8:9D:A2:64:E5
X509v3 Authority Key Identifier:
keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:22:7c:34:97:d4:f4:6c:4b:50:ae:85:0e:8d:dc:8a:37:15:
b0:c9:bf:8f:73:16:8b:9f:fc:01:88:9c:0e:76:75:8c:78:06:
54:af:e8:b2:10:08:10:c8:5d:96:8d:71:f7:a1:81:6c:59:9d:
cc:c9:f6:6c:f1:cc:d9:4a:cd:54:d8:aa:4b:45:ee:04:19:b3:
93:f0:a9:a9:20:77:4d:aa:a0:5a:1a:e5:19:2b:a3:30:a9:a0:
b4:55:21:59:0d:63:87:c4:7a:ea:b6:83:ff:1c:4c:fb:fa:8f:
3b:b7:14:6d:32:1a:8b:0b:41:cf:a9:d2:0b:f9:81:96:77:1f:
a8:69:08:2f:a2:fd:6c:bc:d7:ed:11:ae:ce:7d:99:b5:08:65:
58:21:e2:66:f5:0e:57:19:0c:5e:15:97:f3:8d:76:ef:23:5d:
d7:c5:01:d6:e8:4e:60:bf:3d:00:85:d8:47:e4:eb:a3:dd:5c:
96:03:7a:4b:26:7b:50:2b:a8:69:90:1e:a9:91:a4:0f:26:fd:
79:64:44:a6:c5:05:6d:22:8f:ce:a9:bf:9e:71:1f:58:8b:a0:
20:49:ae:e4:3f:0e:29:49:7b:60:50:73:f4:2d:b9:21:42:8e:
cc:45:6d:90:95:3a:de:0a:de:f0:3c:ec:2d:ac:6c:cd:15:ec:
6f:75:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:41:04 2026 by rpki-client