
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier: 9NjtSV7FWhPz3qypuu7fIqGBn2GUw5FuiR64PHcqVkg=
Subject key identifier: 47:A1:51:ED:5D:D0:63:01:6D:27:6C:B7:E5:D0:7F:A5:EB:02:5F:E5
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number: 78
Signing time: Sun 05 Jul 2026 08:27:30 +0000
Manifest this update: Sun 05 Jul 2026 08:27:30 +0000
Manifest next update: Sun 12 Jul 2026 08:27:30 +0000
Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: lvuiqTqILowXpmfcoYzhtdBILHcr2u6+kxgIQsFvnZ4=)
2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: e6p12F49PX7qCkcwZNgn+CaOt0/TImrLuvnCu7Vczvc=)
3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: 11c8TK/vLAQyKDtxVuKGgv22tCaQip5k8q75oDTrT4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 08:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Validity
Not Before: Jul 5 08:27:30 2026 GMT
Not After : Jul 12 08:27:30 2026 GMT
Subject: CN=6a4a1572-e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:a7:44:15:a1:38:41:81:db:ab:b0:0e:e2:
5e:07:f8:01:24:50:50:0f:4a:80:1f:87:d9:c7:fe:
ed:37:8b:d8:0b:71:bf:22:3e:49:58:c5:a5:a6:3f:
28:67:b0:e9:4f:08:b7:de:e8:43:7b:b8:c8:d7:12:
bd:25:d0:2b:a0:f9:84:3f:89:4d:78:c9:28:d8:ee:
94:61:92:f0:e1:30:37:3c:45:9f:30:dd:b3:50:65:
0e:25:b1:f8:fc:d0:52:0a:fc:17:b8:24:6a:50:71:
86:81:e4:7d:67:8a:5e:de:e2:d3:70:56:3e:0e:b1:
ef:80:c0:2d:3a:03:5a:7a:97:35:c9:53:d0:63:80:
d0:d7:d4:ce:1b:95:b4:6f:0b:50:53:9e:1c:b7:4c:
44:e3:72:1c:28:9e:4f:6b:49:91:08:f9:8b:7d:28:
a2:55:ba:db:02:16:15:36:84:ed:0c:be:8f:77:c4:
f2:df:85:d3:aa:ff:20:4e:56:98:1b:43:92:e9:97:
31:bc:e9:52:e8:d8:2f:4f:01:e6:79:ce:c4:52:46:
fa:ad:14:80:9e:ec:9c:f7:28:31:49:4b:01:4c:9e:
11:f7:91:ed:55:a8:5c:96:7a:41:c0:cb:df:fa:4f:
bd:65:5a:a8:92:cc:d9:45:4e:bd:3a:98:2f:e5:e1:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:51:ED:5D:D0:63:01:6D:27:6C:B7:E5:D0:7F:A5:EB:02:5F:E5
X509v3 Authority Key Identifier:
keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:78:56:92:43:d5:33:1b:19:f7:f8:83:83:55:07:72:cf:
91:f1:59:f8:e9:d6:99:6f:d6:5b:34:c8:82:c2:2b:5a:31:3b:
32:bf:85:3a:67:45:f5:79:94:0d:00:e1:99:61:15:a4:16:96:
a5:03:7f:5e:74:ef:34:11:93:e0:ff:04:69:97:24:ce:d0:f6:
6e:a1:77:9f:2b:51:04:f4:f0:4e:5d:42:92:4b:65:77:d8:84:
3c:0b:f6:b5:4c:e2:7a:91:21:81:97:70:bf:a1:72:df:2f:1b:
d1:ba:7b:59:1f:96:93:c2:ba:62:bd:1a:27:3a:8d:3b:14:e0:
ce:9c:a2:e0:a7:06:55:bf:8b:be:65:5a:6b:bc:96:cb:63:11:
7c:5e:f5:a1:23:9d:a2:0b:ea:ed:dc:7e:e3:e7:78:55:2f:ce:
98:f7:c1:7b:fb:d9:6a:c1:a5:1e:2b:b0:96:80:ef:da:9d:df:
1c:b0:2c:3c:08:6d:1a:70:89:29:bd:6f:2b:a8:62:ad:20:4a:
75:3a:09:ff:91:85:d0:b2:58:db:63:00:0c:a4:b5:cf:3d:1e:
01:ae:a7:df:13:3e:4e:2b:32:b9:46:da:b3:ac:55:44:6a:c0:
51:08:f2:89:b4:71:c8:68:cd:98:a4:e8:6d:8e:40:20:31:33:
73:7c:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:21 2026 by rpki-client