
$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier: axdJE73wfnHEjp9G96ylS8GNSmLm3c3OjsCsceyO3uI=
Subject key identifier: 58:91:02:C7:47:8B:6B:AC:7F:9E:3D:76:82:1D:07:20:56:10:9A:03
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number: 82
Signing time: Wed 19 Aug 2026 08:26:09 +0000
Manifest this update: Wed 19 Aug 2026 08:26:09 +0000
Manifest next update: Wed 26 Aug 2026 08:26:09 +0000
Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: Y/vvbmAVpG+C+0btmDZWKiE7D09iN0D3iALxVXC0+YY=)
2: 1B831C724A1811F1A8A9712CC9833773.roa (hash: u4Y6CGErEsB0B7gfACiMg7sntGtE2KvV4PDqZ7u1hQM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Validity
Not Before: Aug 19 08:26:09 2026 GMT
Not After : Aug 26 08:26:09 2026 GMT
Subject: CN=6a8568a1-38ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:75:73:ab:5d:17:b8:d2:84:2f:81:70:e1:
b5:b7:73:6a:82:ee:18:8f:5b:02:b2:7f:f5:6e:a3:
fc:16:d3:e1:aa:28:7d:53:a6:62:25:8e:0b:78:ea:
c4:55:47:72:4f:8c:d4:f7:e9:ad:17:6f:90:29:16:
85:9c:6b:84:d0:ee:fa:24:a4:d9:bf:2f:dd:10:6b:
b5:5c:d2:f0:d0:7e:82:84:57:c6:80:4f:c1:5e:fc:
72:aa:31:cc:9d:b0:d2:3c:40:b8:39:d7:a6:d7:77:
0d:ce:ae:09:94:08:a6:48:e9:4d:16:59:4f:a7:83:
78:94:36:1e:63:71:53:88:f6:8b:6b:d0:df:fd:9e:
83:9a:e4:49:01:7c:d8:92:3b:be:da:22:95:e2:8f:
fb:f8:ad:47:07:54:f1:43:3c:a8:78:cb:a9:88:86:
b4:9e:72:ec:0f:df:cf:65:a0:3c:aa:8f:36:03:b3:
6e:24:4e:67:73:84:27:6e:6a:39:59:c9:d4:80:bc:
0c:f6:8a:54:73:f3:48:61:3a:09:c3:10:9c:3e:78:
e1:f1:68:cd:21:c4:a3:6d:72:69:47:af:d3:30:01:
3e:dd:26:6e:d6:0c:21:68:f5:67:99:ef:60:6c:63:
c1:c1:28:1e:88:8d:f4:c9:33:31:66:2a:ef:fe:a9:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:02:C7:47:8B:6B:AC:7F:9E:3D:76:82:1D:07:20:56:10:9A:03
X509v3 Authority Key Identifier:
keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:45:37:c5:c2:69:c2:63:b2:80:5a:d0:3f:f7:2b:80:8c:1b:
5e:71:1b:69:e3:12:3b:32:f7:0e:72:45:b9:15:18:0d:0a:33:
57:75:57:77:14:76:3c:f2:72:a6:cf:03:9a:b8:2b:1a:53:5a:
a3:2e:08:d7:b0:05:8b:5d:e2:2d:c4:0c:11:a3:b5:95:ca:2c:
e6:dc:b4:b6:25:17:0a:9e:ca:ac:7b:aa:39:04:53:57:6c:ea:
62:8c:47:00:80:14:3b:29:24:fa:c0:4d:d2:dd:d4:6e:60:91:
42:75:f0:98:70:ea:83:d5:41:92:43:4b:49:ae:23:51:49:74:
57:91:b4:e0:17:6b:7f:9e:64:ba:00:ff:c8:53:f2:58:a1:3e:
b7:f6:4d:ec:fb:95:2c:bd:75:0e:12:24:44:2a:84:9b:11:d3:
65:5f:62:ff:14:69:35:c6:e8:49:3b:2f:8d:0e:6e:ba:6f:54:
24:fe:71:7c:cb:eb:85:a6:15:62:41:e9:b7:98:8b:9d:31:44:
64:27:59:81:21:7a:b1:39:41:74:1f:59:cd:44:e0:87:be:2a:
19:00:ce:db:0e:3c:f2:dc:c3:bb:b1:ca:4d:4b:8d:64:c5:2d:
c0:66:dd:2a:46:18:db:1f:17:3b:8f:5a:4a:b7:97:5d:fd:2a:
b1:6a:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:20 2026 by rpki-client