
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json)
Hash identifier: tOtLW77pG1KAe4Oyrsm0PSsL7vUrW5RoE5b8HYOP3rs=
Subject key identifier: 01:F1:22:C5:94:FB:FB:81:92:7E:0D:F8:61:70:97:BB:F6:57:B3:CB
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial: 04D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
Manifest number: 0490
Signing time: Mon 03 Aug 2026 00:50:25 +0000
Manifest this update: Mon 03 Aug 2026 00:50:24 +0000
Manifest next update: Mon 10 Aug 2026 00:50:24 +0000
Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: IyEummwpDlawlk9WBlcontsJz1gZKGRMzzlLoJmmsc4=)
2: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: CNCgjqoVzyqxh93n0ZBsBcg25yxnaYEUJ+jXTOgpvUo=)
3: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: ORf56ozU5OuuYhJ3jJBGO/DKLOqT1LcBoA7dCCaBtMw=)
4: 5C153EA0EC5811F0941546AF4A6F56BC.roa (hash: SESRFgYcB//TECdDuj/cs+vfm+TSag2D6w9sVIXdLb0=)
5: 97F41C10818811F0AE59F81AC4F9AE02.roa (hash: ZlA781tNXPtHDv8gbQ6DMbr27sqCTQUDYyUqps9Yuss=)
6: 977BACDA818811F0AE59F81AC4F9AE02.roa (hash: dEkGctGFRuV+92+6vy6IawdT4cLJk4p5FamFSDgRr5E=)
7: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: 4xc2eHMBANiDLGUopOzPmz/t979NlwB4OQ24UrePrZk=)
8: 366FD216EC5611F0B67F861C4A6F56BC.roa (hash: 8hEcxmIABfPcKgGp7REoiZjUChwO5uqaU2sng+eHPto=)
9: 0735D9BEEC5611F09B1B681B4A6F56BC.roa (hash: 9O8lYARfguAM8wZyrMjSX3M2SixgKtVusIr2gjU+hSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 00:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Validity
Not Before: Aug 3 00:50:24 2026 GMT
Not After : Aug 10 00:50:24 2026 GMT
Subject: CN=6a6fe5d0-5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:45:b6:03:60:b5:57:66:2d:ff:d3:03:c7:
b7:c4:c7:ba:d5:d2:a8:7c:66:ab:9c:65:b1:f6:ab:
2a:73:45:53:8f:2d:79:47:64:e5:60:fc:3a:d3:c3:
27:1e:46:e5:5f:e8:66:ab:39:28:87:76:9e:69:49:
8c:d3:34:8f:eb:51:f7:d8:43:c4:0f:a0:51:8f:69:
44:8c:14:9a:27:4d:99:20:95:80:43:5a:fe:53:5c:
0a:a3:6b:ec:9e:18:1d:fb:dd:76:cb:b0:2b:7a:1f:
4b:56:fd:7e:82:0f:fe:f4:4a:cf:ac:1f:bd:1f:d3:
e8:34:21:02:88:8b:81:af:19:68:ef:aa:bf:94:6f:
07:8f:25:60:8f:2a:a4:a1:c3:88:2e:78:70:74:cd:
ff:dd:ac:e8:7b:01:54:6b:85:42:1b:0a:86:85:09:
bf:51:44:5e:8d:c0:cb:9e:fc:e3:87:8c:63:cb:25:
c5:26:c0:93:bb:78:b3:17:82:75:aa:9a:4f:d7:ab:
b3:be:7a:d6:04:c1:73:64:f7:26:3d:ca:a0:ca:02:
cc:f8:6f:18:14:05:b0:ad:0d:8c:fc:74:d8:f6:47:
cd:e1:cf:80:b4:6c:c7:cc:7d:bb:41:7b:50:01:55:
63:1c:f3:28:22:d1:39:58:82:11:9c:be:b5:70:6e:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:22:C5:94:FB:FB:81:92:7E:0D:F8:61:70:97:BB:F6:57:B3:CB
X509v3 Authority Key Identifier:
keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:ab:de:81:8c:5b:45:98:0d:7a:cf:0c:16:b1:ae:f9:b7:
71:4f:7b:6a:db:24:53:91:31:ed:38:5f:a0:53:81:28:ef:31:
67:8e:e5:75:7e:cd:84:0e:ea:a9:6b:df:5b:96:e2:98:f1:d1:
df:17:24:7b:3a:84:4d:7a:bf:27:e7:4a:6d:c1:d7:7c:86:3d:
bb:24:72:c4:c1:ff:ba:fb:bf:2b:52:dc:47:d8:40:a4:82:9e:
68:f8:c1:4d:65:76:42:dc:19:23:77:d4:fb:5d:fb:72:e4:0b:
65:d0:e3:27:70:ea:6e:16:85:6d:e2:01:1e:eb:d0:d6:fa:99:
a2:7a:e3:0b:1a:48:a2:34:a6:43:d1:11:a5:c6:b2:d9:24:75:
60:80:08:e0:6b:3d:54:f4:43:88:b4:9d:f2:88:36:9d:ff:e2:
7e:c5:a3:c7:c6:13:a8:a0:be:65:5b:99:c6:53:c2:30:ed:35:
64:1f:5c:12:fd:ab:b8:a4:f4:35:3f:eb:6f:15:9d:0b:0a:e7:
19:ed:f3:52:d1:c0:eb:1f:d6:b7:a0:7e:49:3e:01:6f:c0:37:
6e:fb:43:f6:bd:6a:13:a9:b9:6b:9c:b5:24:0f:29:53:25:7e:
22:d6:10:1f:ed:78:ee:80:f9:ff:be:49:1a:36:61:dd:9c:1c:
62:25:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:23 2026 by rpki-client