
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier: 9tw6gqaL7hIPMll5nwOCs/fj16FGdNe5VZQrCGsqbs4=
Subject key identifier: 19:73:EC:B2:72:CC:D0:D5:5B:97:CB:C4:37:46:BE:EA:9F:4C:C3:E7
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number: 0235
Signing time: Wed 05 Aug 2026 04:02:55 +0000
Manifest this update: Wed 05 Aug 2026 04:02:54 +0000
Manifest next update: Wed 12 Aug 2026 04:02:54 +0000
Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: OQt3mcOZBkJuzrwWuKXMNHyZBlBW4ch3Q+4IJtKJ9Mo=)
2: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: kvLOqAvejoloIcBp8iOod+XLqcMm6Km2ICEQUCNEODY=)
3: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: CKjWrRKFrq5wIXerALs28X5SJv1uenx7ZdloeFQoUHo=)
4: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: d0JlKivvI0UuN/+g7FjPgsMv6qjwloa3O1BziCQ3cTE=)
5: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: yxoJxjt522RCtypxdpCWh8Ki8MQz+o9DlkQu175uTk8=)
6: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: r/B/wTWM1e+RbFQV+OxoufBd8XhZQMs6+SrSBQGZEm0=)
7: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: sT56QjRFMA5RYNrfwK84aeqd2CWRIQx/z7cMGwk6r48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Aug 2026 04:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Validity
Not Before: Aug 5 04:02:54 2026 GMT
Not After : Aug 12 04:02:54 2026 GMT
Subject: CN=6a72b5ee-6e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:46:c5:c7:4e:1c:8a:87:c3:c1:4c:16:8f:
d2:9d:cb:06:30:61:71:43:1b:eb:ac:e6:4d:0d:22:
87:19:21:79:1d:4b:59:98:56:a3:c2:bd:74:ea:db:
fe:0c:d6:91:90:04:bc:dd:ec:3a:23:ba:bb:aa:cf:
e0:2c:25:5f:41:73:db:ac:4f:46:4a:ad:c5:64:91:
9d:2e:ae:5c:58:96:bd:69:a6:33:6f:95:97:1c:47:
d1:03:2a:dd:f1:6d:1a:77:06:5e:93:fa:cf:7b:e9:
d6:bc:c8:2e:1c:73:85:ff:1a:be:79:88:9b:f0:03:
2c:07:25:bd:0e:ed:70:04:d4:a1:0d:c6:e9:9d:7e:
49:64:b7:7c:09:54:29:c4:08:48:46:c6:6c:d5:67:
25:d8:f7:0a:9e:0b:d4:6b:66:4d:18:b8:9d:a9:80:
1f:1f:9f:1f:e1:17:fd:1d:b1:51:01:97:cc:15:ba:
40:5a:a3:47:5a:b8:1e:cd:48:aa:04:e3:b5:ee:1f:
98:af:cc:bf:c1:e9:f7:cc:99:82:12:4a:5f:80:2f:
08:d9:d1:38:15:3a:d5:14:4a:a3:00:d7:08:f6:15:
b2:ae:c0:81:d5:88:31:4b:e2:ca:7e:b4:a0:7d:94:
e4:ba:75:df:7e:9e:22:15:d1:9c:99:80:89:db:d4:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:EC:B2:72:CC:D0:D5:5B:97:CB:C4:37:46:BE:EA:9F:4C:C3:E7
X509v3 Authority Key Identifier:
keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5f:c0:7e:b2:14:0c:5f:9f:2d:5a:e9:db:89:8d:e9:15:25:
02:8a:0b:81:3a:cf:d2:d0:00:26:7a:7f:23:1b:0f:ce:38:44:
a5:20:e6:d6:f6:5b:1c:9c:99:97:4b:52:36:0d:b4:12:89:56:
78:e7:1a:44:04:40:e8:81:52:9c:23:93:a4:31:c1:44:b8:5e:
1a:2b:9b:6f:3c:96:07:6e:d8:aa:23:ee:92:ee:f4:15:9a:07:
1f:77:d7:e3:ac:5e:a6:3e:90:68:aa:26:a7:16:ab:07:22:cf:
c1:da:c0:cf:03:54:64:7b:30:3a:58:ba:ee:f1:19:d7:e7:61:
ce:7d:f8:27:d1:6b:b7:49:16:7b:e8:f6:4a:45:87:4e:b4:e1:
9a:2d:b7:c0:01:71:ad:7a:97:9f:56:5b:7d:3e:f2:57:5f:ac:
c8:6a:dd:c3:41:a0:0f:4c:77:9a:66:eb:e8:11:e7:6f:86:79:
b6:5e:22:5f:65:5e:4d:5d:39:e9:ce:2f:7f:d1:7e:45:0b:0b:
14:ef:5b:c5:0a:a9:e7:50:aa:3d:78:36:df:24:cd:83:3f:4e:
68:1e:fd:a6:c5:c8:2c:6d:d1:d2:17:7c:ab:49:2d:7c:5b:55:
05:d9:dc:6a:64:d8:ed:5b:24:27:6e:d5:50:f5:fb:db:45:a1:
4f:65:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:16:00 2026 by rpki-client