
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier: TcmyMwRJvbVUonnH8qzOUtDNZo88ZT1l79+vuz+IDIg=
Subject key identifier: EE:BF:B4:04:8F:57:23:E3:7E:79:E3:20:D6:EB:23:5A:23:1C:93:32
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number: 8F
Signing time: Wed 19 Aug 2026 08:10:55 +0000
Manifest this update: Wed 19 Aug 2026 08:10:55 +0000
Manifest next update: Wed 26 Aug 2026 08:10:55 +0000
Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: bQNAVEJKeE4p6EF8nQ09AZyh8w/ZapwvCoGGAcg9jAA=)
2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: e6p12F49PX7qCkcwZNgn+CaOt0/TImrLuvnCu7Vczvc=)
3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: 11c8TK/vLAQyKDtxVuKGgv22tCaQip5k8q75oDTrT4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Validity
Not Before: Aug 19 08:10:55 2026 GMT
Not After : Aug 26 08:10:55 2026 GMT
Subject: CN=6a85650f-50df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:9b:56:59:63:33:e8:41:d3:ae:11:4a:cc:
c8:04:20:ae:ab:05:f7:41:e1:fd:b7:61:5c:ec:30:
94:3c:91:64:02:c8:72:9d:32:8e:b4:ec:0e:a9:7a:
74:95:e1:1a:55:fc:5e:03:0f:87:0f:af:84:2d:96:
ef:35:60:ea:f8:c2:5d:47:72:c4:da:f6:26:cc:20:
84:6e:e6:c0:1b:df:af:e8:90:f0:9d:a7:fa:2e:f9:
58:89:59:eb:c0:7a:4e:73:70:7e:f0:10:ba:b3:ea:
d6:da:5c:e7:75:03:5a:1b:23:40:d9:af:b9:50:1a:
a3:b5:bd:31:6f:c7:29:36:1a:8e:0d:b5:54:2a:60:
b8:54:d2:6e:9e:5e:07:96:4c:ee:d5:27:80:a6:8d:
56:3e:01:1a:d4:ce:ee:94:e6:a3:29:a1:73:dc:24:
8d:0f:a0:ca:22:af:eb:0c:a3:f1:ce:b2:f8:6f:51:
ba:b5:a3:7c:f5:43:bd:f6:be:cb:2c:d0:45:f5:e6:
e2:7c:0f:17:3a:5c:52:1a:2f:8a:67:59:f2:68:f0:
68:67:8d:31:4d:01:59:87:6c:e5:e0:94:3a:b9:6f:
d1:5e:45:1f:8b:5d:fd:9c:37:84:1f:23:23:9a:37:
12:a9:2d:bb:57:fb:5e:34:38:03:ce:30:60:98:4f:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:B4:04:8F:57:23:E3:7E:79:E3:20:D6:EB:23:5A:23:1C:93:32
X509v3 Authority Key Identifier:
keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:7c:18:ce:34:a0:1a:4c:42:02:96:e6:06:8c:c0:69:47:
ab:5e:5f:57:7a:45:ae:8d:ce:68:4a:da:4a:0d:43:e5:69:4e:
91:05:aa:6f:30:70:00:71:b2:0c:2d:5d:d7:8a:3e:9d:7d:a6:
0a:47:f2:31:52:94:3e:20:d2:0e:53:7c:5c:19:30:5d:b3:ab:
c0:06:3e:c7:89:9a:5a:14:3f:a2:74:2d:b3:80:0d:03:39:42:
f1:7e:8c:7a:87:92:2a:3c:f4:8b:96:11:e6:e4:4c:11:32:b9:
3a:cf:c5:18:c5:98:e0:f7:64:ab:50:93:17:98:5f:24:b2:d5:
da:db:89:0e:6d:f4:a6:59:f6:e4:18:c5:e8:d4:fc:0c:93:4c:
5c:f9:84:a4:fd:d1:9d:a5:e7:b9:26:5d:b5:4b:b6:5b:f4:e8:
cc:c6:34:75:6e:76:f0:6b:0d:35:99:36:8d:a3:4b:b6:12:df:
98:14:33:1c:90:bd:58:e5:c0:14:9f:3f:75:00:c4:b0:b2:4f:
ac:75:7a:51:49:d0:e4:9a:f6:cc:0f:ef:22:e5:f3:07:40:15:
18:e6:60:02:30:0e:79:1f:fe:a0:d4:ae:61:75:23:b3:f4:b5:
69:d5:d9:08:56:1a:0d:31:80:17:02:9b:3a:b4:54:23:a5:c2:
74:4d:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:41:35 2026 by rpki-client