
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: NB775VqKts+2FEXFzJi+3nQ23RHw+yofVAE0VVij7bQ=
Subject key identifier: 3E:98:B9:9E:28:B7:51:4E:08:7D:3F:A9:F9:5B:5D:ED:7B:7F:D9:E8
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 2414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 23E0
Signing time: Fri 24 Jul 2026 15:55:08 +0000
Manifest this update: Fri 24 Jul 2026 15:55:07 +0000
Manifest next update: Fri 31 Jul 2026 15:55:07 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: V0CRG9+wZOW5//FqGZO/GB7FOd9y6IBc2X4UdSkFzsE=)
2: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=)
3: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9236 (0x2414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Jul 24 15:55:07 2026 GMT
Not After : Jul 31 15:55:07 2026 GMT
Subject: CN=6a638adc-95e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:29:cc:df:1b:a3:1d:1c:e7:01:a4:ea:4b:
52:df:f5:91:54:84:c2:0f:d8:43:59:88:21:71:ee:
ad:67:5b:cd:93:0a:0e:a9:91:19:83:b4:36:19:45:
45:c5:3f:c1:26:bc:2d:d7:54:96:1b:dc:05:32:de:
94:45:0c:63:b0:87:c7:14:6d:27:56:e9:ae:29:dc:
7c:e0:98:f6:c7:c2:e6:e2:3d:da:86:46:82:84:0c:
11:1d:b6:0e:fb:c0:21:e4:45:2c:ea:1d:f8:ad:09:
9e:e2:d3:b0:5e:40:75:0d:c5:2a:6d:11:27:07:bb:
06:bc:46:2f:cf:e2:79:b1:79:b3:f1:3d:8c:07:97:
4a:d7:ea:ac:e4:8d:a1:4d:b2:eb:6f:0a:25:dc:b2:
d9:ec:1b:29:1e:07:37:60:23:ea:e1:bc:ea:83:4a:
ae:82:4b:f5:61:72:24:12:2f:cc:0a:4f:1f:ad:ab:
49:cf:9b:4a:1f:28:2e:4f:34:3b:29:4f:c9:51:60:
7b:12:f3:15:5e:de:f4:26:1b:59:41:01:ce:32:f9:
5f:d5:ff:25:46:04:b8:df:c9:b5:70:14:1e:ae:87:
b4:ef:77:3a:fe:55:99:62:9a:c6:63:69:9c:ac:59:
77:cc:e7:38:a8:bd:e4:7e:12:cc:5d:32:8f:b8:ac:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:B9:9E:28:B7:51:4E:08:7D:3F:A9:F9:5B:5D:ED:7B:7F:D9:E8
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f9:77:a9:68:e4:c4:a1:27:c7:dd:ba:a4:9e:2a:57:52:ab:
d5:af:37:5c:18:49:4c:92:36:2f:cf:d2:85:57:8e:c6:4d:a4:
7d:f6:6a:78:1e:89:9d:eb:45:1b:e2:40:0c:e7:7c:46:5a:d0:
6f:d0:62:7c:a1:fa:06:df:b8:44:95:7a:58:3e:76:02:c5:20:
96:8a:01:b5:68:1e:95:e6:42:59:6d:a6:6c:59:3d:40:34:67:
8d:76:f7:e9:1d:e6:90:3e:0f:40:29:f9:bc:0a:f1:a3:8a:9f:
30:88:86:6e:49:d6:af:24:22:91:35:4d:32:4b:b3:33:42:9b:
80:fb:19:38:06:b5:cc:5f:f4:1f:d1:fb:bb:28:98:43:1c:a9:
50:8c:b9:fb:37:53:81:55:b0:57:be:68:7e:9b:0b:8b:b1:13:
fa:67:e6:d6:1f:26:9e:e2:3c:08:be:d9:47:32:1a:db:3d:b2:
c7:6f:b6:53:0c:e8:0b:c5:62:08:a2:4e:f0:ed:3e:0f:8e:e1:
87:a1:2b:3d:c1:ad:9a:86:07:99:b8:46:6b:4c:8f:73:87:9c:
c6:13:29:96:64:a7:e8:34:c5:33:46:90:ad:cd:14:54:9a:d5:
dc:83:a4:3e:44:b3:93:16:13:18:51:d7:14:38:cd:c5:d0:c4:
1b:7c:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:15:51 2026 by rpki-client