
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier: 0WBgzZLYKvWtjtlWcOHvbk1eYPNHxP/tTJk0WM+wOtM=
Subject key identifier: 68:BB:D0:8A:60:6A:78:FA:78:05:5F:F8:A8:17:A5:90:D1:EC:29:46
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number: 0D9C
Signing time: Mon 20 Jul 2026 19:21:23 +0000
Manifest this update: Mon 20 Jul 2026 19:21:23 +0000
Manifest next update: Mon 27 Jul 2026 19:21:23 +0000
Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: en8qui8RrRPrCKhenxRZUfqvvbGojsph+zl5P9hpg5Q=)
2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=)
3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=)
4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Jul 20 19:21:23 2026 GMT
Not After : Jul 27 19:21:23 2026 GMT
Subject: CN=6a5e7533-6fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:af:c1:72:09:05:2a:e8:3e:84:6e:03:28:
13:42:b9:08:fd:3c:b8:35:d4:bc:6e:57:ca:0e:b3:
85:dc:51:65:02:2b:48:00:cf:a3:48:2e:26:c5:33:
9e:11:c8:8d:94:34:57:4b:1b:c6:f5:7d:0a:8b:6b:
c5:76:19:23:9e:b1:9e:b2:2a:15:a1:5b:46:db:fa:
46:4f:b3:ae:65:18:f6:ed:ac:94:50:f6:71:a7:27:
98:9e:d9:ca:c4:10:f8:37:43:af:4b:cb:3d:93:2e:
62:33:35:8a:11:61:7d:d4:eb:24:4b:26:30:3b:eb:
b9:f9:a4:e3:9b:0c:94:4b:a2:8d:45:99:dc:b3:e5:
5f:e9:c7:8f:1e:6f:17:1a:9c:c7:3b:b7:33:8b:c6:
29:bd:97:df:fa:30:f0:59:86:2d:cd:3b:74:2b:5f:
1a:45:08:ea:6d:44:c9:32:23:bb:5c:20:cc:95:89:
a5:e7:b4:8c:49:4a:59:65:8a:af:e3:86:eb:be:7a:
0a:ea:17:b7:cb:23:be:91:e2:31:43:05:a8:c8:75:
26:10:a2:e4:9b:58:8a:9d:5c:14:15:15:8c:66:0c:
03:9a:73:0e:5e:a9:eb:53:95:11:07:93:d4:94:0d:
05:db:45:03:15:c5:54:03:b0:d4:8d:4f:32:53:5b:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:D0:8A:60:6A:78:FA:78:05:5F:F8:A8:17:A5:90:D1:EC:29:46
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:44:cc:df:a5:e6:54:69:0e:9e:b6:bc:88:21:ba:16:f2:
5b:f5:ae:d1:c1:0f:cc:c3:36:65:bf:7a:2a:00:86:48:07:b1:
64:50:4f:78:d8:e4:85:52:e8:40:e5:61:f3:15:e1:e4:3d:7b:
f9:91:6f:0e:12:22:3c:2a:b4:56:22:01:4c:6b:af:0f:e8:9c:
b3:f9:45:69:2f:fd:9a:cf:8d:28:ff:08:d8:f3:b1:48:bb:d9:
dd:49:08:e4:0b:e5:35:f2:98:14:28:39:4d:0e:8c:cb:d6:c2:
a7:a0:59:2d:f8:40:f0:72:0f:a1:3c:f3:4e:dc:e6:9e:30:62:
26:27:8b:ed:ce:d0:5d:87:cb:de:6a:0b:4e:39:8c:b1:72:43:
80:56:1b:e3:6e:3f:6c:07:fc:7c:27:7e:93:5f:e8:95:05:e7:
b4:c0:88:d4:db:54:3d:88:bb:0d:db:f1:9c:c8:2d:d5:33:34:
58:f1:9d:89:55:8a:4d:69:6e:98:16:b1:93:08:57:87:a8:28:
96:a4:70:f5:c5:40:d8:dc:e0:e3:62:7b:9f:cd:0c:9e:b9:c4:
a2:40:40:f8:77:02:0e:ed:37:6d:bc:8f:1c:4d:b4:7d:ef:3b:
44:96:00:1b:b5:e1:a1:f4:2c:cb:d5:82:73:4a:90:32:2d:c3:
ad:d1:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:34:34 2026 by rpki-client