
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json)
Hash identifier: QvssUe/ifM7m77m95UB8g/8jz3LOhmOSQPA28TXbNtU=
Subject key identifier: 0C:06:C9:A0:89:87:5B:B8:A9:A9:88:F7:4E:14:9C:8B:E6:51:9B:6E
Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
Manifest number: 026F
Signing time: Wed 19 Aug 2026 02:35:01 +0000
Manifest this update: Wed 19 Aug 2026 02:35:00 +0000
Manifest next update: Wed 26 Aug 2026 02:35:00 +0000
Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: QzmoTgTj43+zy7fShK3xLSYc7WpDhMZgU/5+hILOIC4=)
2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: l3+rbubcPMHtKSMQDJv+EJ3SUoMsXD+EmSrxxE3voR8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF
Validity
Not Before: Aug 19 02:35:00 2026 GMT
Not After : Aug 26 02:35:00 2026 GMT
Subject: CN=6a851655-32d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:16:59:59:15:54:90:2e:6d:23:8c:74:95:
01:ba:78:27:1c:b7:e0:67:1f:66:30:da:78:2d:b6:
e8:55:14:5f:f5:d0:72:77:e8:b3:35:82:ac:2f:0b:
ce:5c:74:42:c1:94:c2:26:79:0f:7a:77:42:20:09:
08:56:9c:2a:86:8d:59:86:06:a8:ef:64:72:d1:b8:
c1:20:1a:4e:4a:79:11:54:b9:d7:d4:26:67:82:6f:
7c:26:3b:70:d9:0b:26:68:2f:d4:4f:37:60:97:bc:
18:44:1e:6f:7c:4a:45:2e:6d:97:a5:5e:2a:2a:73:
0f:5a:42:ab:9a:87:2d:36:93:d1:4e:f2:ff:f0:49:
1a:3c:f3:49:14:62:fc:c3:e2:0a:e9:04:8d:5b:4f:
18:05:f4:c0:14:30:8a:aa:26:83:2a:43:f2:6c:55:
31:41:13:78:a8:11:52:8e:02:c0:88:4f:fd:2f:02:
0b:44:e8:a4:19:5e:81:87:4d:0b:54:5b:9f:5d:e6:
80:65:0f:11:b2:1e:d9:9d:17:7f:94:95:d2:69:6b:
98:01:21:d0:81:c7:cc:cb:8a:e5:e1:4c:99:55:55:
c0:94:a2:2d:ac:8b:1f:f4:b5:f1:43:37:a3:68:f8:
d9:25:94:3b:73:d8:8d:a9:da:b3:dd:85:fc:6e:24:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:06:C9:A0:89:87:5B:B8:A9:A9:88:F7:4E:14:9C:8B:E6:51:9B:6E
X509v3 Authority Key Identifier:
keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e4:d5:4f:b6:40:27:86:5c:86:c5:9a:1a:fb:04:7b:c6:d9:
f6:06:f0:fe:a8:5f:97:dc:85:d7:25:f5:51:44:ff:88:ef:5d:
a8:b4:3b:17:fa:ba:ed:eb:44:cd:e9:10:07:3e:e4:1a:3e:95:
7e:b2:98:a1:1d:fa:df:a3:33:69:61:0b:cd:f2:7a:f4:8c:b2:
76:bd:3c:57:d0:30:b2:98:8b:69:12:18:2f:c2:3f:57:58:67:
33:49:53:1c:02:42:c3:dc:b1:1e:c3:7c:7f:30:de:1d:07:de:
96:5d:5d:55:69:24:2b:87:e1:53:72:cc:8f:19:d8:64:9f:16:
ee:45:22:7e:c5:92:b9:f7:52:b9:8f:2d:16:4f:9d:c8:49:7b:
26:f5:3a:bf:7a:4f:bd:78:02:1c:f4:2a:31:77:0c:41:b1:36:
9d:5b:83:9a:b1:f0:6b:8e:eb:99:ef:ec:6d:20:b1:52:86:89:
2a:79:fc:fe:4b:85:b0:1b:c6:c5:61:b6:ef:71:6a:2c:5e:af:
2b:69:63:79:5a:fe:08:c9:6a:e6:e0:31:59:ae:ad:0b:8b:11:
73:8a:23:9f:0c:e2:00:2a:7f:ed:b4:41:de:8c:c6:64:40:e0:
c5:9b:3f:ac:01:69:18:82:6d:7c:92:e6:ff:67:52:28:45:8b:
2d:d4:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:19 2026 by rpki-client