
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier: ecnWGJqjONl5Jw8+umgcEpHGq8t9DuJ5vWBrGxnkNXo=
Subject key identifier: A1:85:93:02:56:BD:38:A6:C9:2B:D9:BB:18:61:55:34:8A:BC:55:1E
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number: 01CB
Signing time: Wed 19 Aug 2026 04:22:30 +0000
Manifest this update: Wed 19 Aug 2026 04:22:30 +0000
Manifest next update: Wed 26 Aug 2026 04:22:30 +0000
Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: GcC4dJozlmuoBprX71psUR0AlrDnrcjiJG2YuAIV52s=)
2: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 3E36B1MpZYDiaAYeovA9u0vflfKd+OIxRnYYoJKDjag=)
3: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: dTKobTpgmqVlw9+3THmdhV/OqwJR2m6apo+OjMA3HTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Aug 19 04:22:30 2026 GMT
Not After : Aug 26 04:22:30 2026 GMT
Subject: CN=6a852f86-4d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:11:75:4f:83:9e:2f:38:80:98:c5:96:69:
1e:08:65:75:49:ed:15:45:aa:94:c4:6d:e2:bc:2e:
b4:ed:40:ed:0f:9f:d6:12:2f:18:b0:dc:9c:98:21:
5a:a7:e6:72:18:67:b1:92:68:d2:22:fc:f0:c7:49:
15:50:ef:79:40:21:ac:a4:8e:79:41:7b:64:80:26:
4b:a4:7f:da:d2:a9:42:70:95:cf:a6:8d:fb:a5:48:
8e:8a:72:0a:b7:40:81:37:bc:31:ea:99:c1:77:d1:
b6:ea:d3:0a:34:e2:b5:11:b3:8d:83:5d:66:1f:b4:
41:ed:81:23:58:52:87:fe:57:22:3e:b8:de:2a:38:
38:84:2a:4f:e7:a8:05:65:ba:86:9f:98:da:fc:c0:
ff:e4:34:81:e7:b3:02:32:15:64:3f:7c:63:59:04:
3d:06:ef:e3:8f:34:9d:7b:7f:a3:75:ef:2f:c2:4e:
b8:54:73:cd:0c:f2:63:72:81:29:a3:c1:9a:57:a6:
39:71:a4:1e:7a:88:2d:4a:d6:f2:a8:17:3d:b0:4b:
5e:d3:96:70:72:be:b1:82:c7:1e:9d:db:cd:f4:aa:
3b:b0:68:2c:09:18:bc:4c:fc:0a:09:93:26:6a:67:
ec:c9:c7:b8:c8:86:fc:f4:33:41:fb:89:e0:ac:d4:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:93:02:56:BD:38:A6:C9:2B:D9:BB:18:61:55:34:8A:BC:55:1E
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:fc:3a:50:98:58:97:47:b2:09:67:9b:80:7a:5d:03:6f:66:
76:56:f0:62:04:ca:c7:4d:b8:d2:be:02:e0:d7:ff:15:73:07:
c6:07:ec:8d:d7:eb:a5:b4:c7:8e:e4:4a:94:cd:49:ed:6d:ac:
bd:de:24:71:9a:9a:25:ef:ef:88:c3:6b:49:c8:77:e0:7e:38:
a6:8f:4a:16:37:fa:96:54:33:d7:5b:6e:6d:bd:35:52:5d:d5:
25:d6:cb:17:c1:cb:f0:0e:c0:9e:cc:30:c6:0a:0a:d6:3d:0b:
b3:21:36:ef:86:08:49:12:17:54:11:4d:4f:36:d6:df:f8:e8:
a4:5e:ba:93:49:c4:71:00:0d:7d:8b:24:d0:bd:19:7b:4f:6b:
d5:69:b0:e2:ba:0d:2e:ca:77:26:26:60:d1:f7:9c:36:1d:22:
43:a0:38:65:0c:ce:50:c4:bd:d8:59:11:74:9c:5c:2e:a4:54:
d6:f9:e3:e4:08:94:b4:fc:f5:c3:ea:9e:d6:ef:da:98:6f:20:
b4:50:bd:2f:66:a8:4f:f9:98:b6:d8:f6:96:0d:3e:92:d8:5e:
04:a3:ac:f6:de:83:4b:72:a9:8a:3c:28:f5:59:22:b3:f7:1d:
e4:d3:7e:71:d0:d8:28:8a:88:76:4d:3c:bf:09:b8:5d:f4:68:
bd:82:bc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:41 2026 by rpki-client