
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json)
Hash identifier: tpluaE2efjineO599M4aM7N8a6FllAA1fIING/Q+WnM=
Subject key identifier: 5D:5A:25:D0:52:6A:28:DE:B3:86:E2:5D:06:80:11:69:8B:0F:95:ED
Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
Manifest number: 0742
Signing time: Tue 18 Aug 2026 22:13:01 +0000
Manifest this update: Tue 18 Aug 2026 22:13:00 +0000
Manifest next update: Tue 25 Aug 2026 22:13:00 +0000
Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: 9aOBEfCCgU5FEtkCWTcAvYqCTMxK038qKV9Pixo0B0M=)
2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Validity
Not Before: Aug 18 22:13:00 2026 GMT
Not After : Aug 25 22:13:00 2026 GMT
Subject: CN=6a84d8ed-90e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:1b:ab:c1:5a:91:ab:53:ea:2a:e6:2f:1b:
91:60:f5:57:4e:2d:29:f4:53:a4:0f:98:7b:92:24:
f0:f8:b5:33:ee:8d:0f:43:0c:12:c5:fc:ac:fe:6a:
fb:91:16:b5:9d:fb:75:a8:38:29:f3:01:2c:22:f2:
50:7d:ae:74:b4:c6:6a:d8:01:c7:20:bf:ee:6d:0a:
1c:76:bb:af:67:cf:1b:6d:8a:f4:a0:22:c4:8a:ea:
ec:b0:26:fd:ae:d1:09:49:c8:7d:f4:22:80:15:fb:
45:30:25:b6:3a:60:90:c8:60:15:74:a5:9c:92:bd:
51:7f:7b:82:ff:5c:51:54:a2:8e:ba:fb:68:2f:73:
8f:24:b4:54:b4:71:7b:09:2a:99:0e:64:74:bc:09:
90:b7:43:28:f6:1e:6e:f4:78:88:db:67:b4:e9:de:
03:c2:b3:6c:a6:85:bd:75:6d:35:35:b5:a2:54:88:
3a:76:f6:23:89:39:11:8a:10:4c:da:93:2e:52:77:
4b:b3:94:95:d9:ed:5b:e5:a1:9d:5e:51:12:34:c9:
62:c5:c2:60:ee:84:9c:0e:cc:c7:df:a5:cd:15:3c:
be:97:10:f7:11:5b:1a:3c:63:dd:34:eb:ab:2c:2c:
64:c7:62:f6:47:32:84:9c:8c:a6:4e:9c:7b:62:a9:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:25:D0:52:6A:28:DE:B3:86:E2:5D:06:80:11:69:8B:0F:95:ED
X509v3 Authority Key Identifier:
keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6e:47:9c:20:19:0f:35:3b:b4:6e:f3:72:81:fa:d8:f7:48:
29:c6:25:3a:eb:23:2b:26:43:01:95:6c:04:a5:62:5d:26:c4:
8f:8a:8b:8b:13:59:5b:9d:be:cd:fb:d9:a2:9f:93:d7:9f:e8:
5e:71:a6:a4:a5:0b:7f:a8:37:33:c4:84:61:1a:26:e8:c8:2c:
f3:be:5a:5e:9f:d9:1c:7a:fa:82:d3:ae:50:66:90:7c:ad:85:
6f:b0:2e:7a:01:5e:ba:93:c8:b0:12:1a:36:c5:c7:b8:5f:03:
21:85:2c:10:46:b2:b9:d4:56:0f:1d:6d:b7:e4:94:b0:82:c4:
43:42:93:a6:e6:c0:63:f1:5b:0e:f0:84:eb:01:71:bc:92:72:
19:16:c8:76:25:1e:7a:08:64:a4:68:51:2f:a8:ea:bc:94:ae:
ac:c5:b3:c9:aa:f4:49:bc:95:6d:36:72:47:61:cb:23:f9:31:
7b:26:bd:28:e8:96:a7:ef:4d:25:df:21:20:bc:d2:ab:01:6d:
8f:6b:18:83:65:bf:bc:02:ce:ff:44:4c:96:37:b5:c6:d2:30:
ce:96:03:ba:c4:4c:e6:39:03:77:da:1c:d5:6d:0b:51:5b:71:
0f:1e:a5:54:0c:74:08:9b:87:6c:37:4b:e4:6b:cc:55:44:5d:
88:bc:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:55 2026 by rpki-client