
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json)
Hash identifier: BJel0ZPnnRbJD0cZQHQj33jwmcFzmdiykWah9Qns01c=
Subject key identifier: 30:DE:22:C5:E3:F5:B4:A3:88:11:2C:DB:5D:0F:4F:AF:49:31:54:70
Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Certificate serial: 1FF6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
Manifest number: 1FE7
Signing time: Tue 14 Jul 2026 16:00:40 +0000
Manifest this update: Tue 14 Jul 2026 16:00:40 +0000
Manifest next update: Tue 21 Jul 2026 16:00:40 +0000
Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: mpqvMu+MWixiqePj8o4dbpIDpU30Mit6xvkOyfiobJg=)
2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: W76e9AIVTyaTFBKFcxkBKNy/Y9c3O96EbBTxmYrNiiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8182 (0x1ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Validity
Not Before: Jul 14 16:00:40 2026 GMT
Not After : Jul 21 16:00:40 2026 GMT
Subject: CN=6a565d28-6477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:71:ca:59:79:36:5d:95:19:44:64:04:b8:
80:77:dc:b3:6c:18:18:04:b8:42:40:82:65:17:f3:
e9:4c:8a:ed:e6:4f:ef:cc:14:be:69:d0:e3:43:d2:
38:23:47:0f:00:46:a0:b9:04:2b:60:93:8c:98:36:
f4:e8:05:16:3d:63:6e:13:5a:93:2a:31:83:ae:4a:
99:5e:de:1b:32:e3:86:44:70:84:17:14:7c:1b:8f:
e7:55:5b:1d:a4:15:83:ad:7e:a3:60:00:57:f7:1d:
1f:07:c5:dc:36:45:b7:e3:6a:45:9b:e6:96:e8:6d:
dc:70:5b:f1:2b:a8:80:3d:4d:4e:86:ed:39:60:4c:
ae:b1:8e:2c:b9:14:ea:7e:af:4f:72:07:e8:38:46:
02:b2:64:c1:70:78:72:71:a3:72:2d:80:53:ca:cd:
ce:68:f1:36:16:37:d5:0f:e0:19:ae:a0:30:fa:c1:
6a:21:4a:74:92:b6:bc:dc:95:89:36:6f:76:2c:b7:
62:b5:b9:64:f7:c1:e5:1c:77:d4:a9:5f:da:72:d6:
d8:96:5e:64:25:de:2a:92:de:77:99:f8:24:7b:ac:
98:25:28:80:ce:e2:0d:74:68:43:6d:53:9a:a6:42:
a7:3b:77:e6:0f:48:d9:3a:a8:ca:3d:97:d1:6b:fe:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:22:C5:E3:F5:B4:A3:88:11:2C:DB:5D:0F:4F:AF:49:31:54:70
X509v3 Authority Key Identifier:
keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:8b:05:f6:af:62:97:d5:3e:08:73:ec:98:38:c2:1a:63:
6e:1e:0b:60:f1:d8:3d:6f:98:60:c9:91:6b:88:a7:93:31:51:
83:a8:eb:7b:77:17:bc:a0:56:6e:41:e6:cc:59:50:4b:73:67:
50:1d:f0:1c:8b:b7:8a:8b:e7:53:57:dc:eb:5d:bd:17:40:02:
59:51:5e:29:c8:b7:c0:9f:66:b1:77:84:a5:9f:15:4a:83:f9:
c2:86:c2:01:68:c2:c3:c5:6b:72:16:53:9c:24:df:ea:25:15:
30:b3:e0:44:ac:b9:fa:85:1d:c9:cc:ec:bf:8f:a6:4d:13:97:
2f:96:41:f0:35:07:86:2b:c0:53:3b:78:a0:f6:ea:4e:e8:b3:
3f:11:7c:8c:66:73:13:44:56:42:80:c8:3b:5b:66:63:ed:e2:
21:8f:57:1b:c3:b3:e6:3a:47:86:d6:bf:2d:f9:cc:be:73:a8:
7d:74:f2:76:a2:91:ae:6c:86:20:7b:05:ab:08:e8:ea:b5:cc:
2b:8c:df:16:be:8d:ff:05:b7:62:64:0d:a8:74:c3:10:6f:cc:
a0:bf:b1:82:4c:96:f9:d6:c5:ed:80:96:26:cf:1c:65:a0:bb:
ed:de:26:1b:f5:c5:f0:e6:c4:a2:cd:73:36:08:42:06:e5:90:
ec:8c:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 15:56:41 2026 by rpki-client