
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json)
Hash identifier: 3BPGebWiDX4FTl2q9+GVVrJT+qqchggQVQpXa4o5VUk=
Subject key identifier: F3:7B:56:F5:F4:63:2C:AA:ED:61:D1:44:7A:AC:4E:91:8F:00:FB:30
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial: 14EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
Manifest number: 14C3
Signing time: Tue 18 Aug 2026 17:00:29 +0000
Manifest this update: Tue 18 Aug 2026 17:00:28 +0000
Manifest next update: Tue 25 Aug 2026 17:00:28 +0000
Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: L24zKaiaBqINjxhp/mja5IE3FGjF7WYsJ2BkabyTz0s=)
2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: qTpPVg/wplzI5WQ4m/rJJ8bvu6SR/R5aPwbOFpt8Y8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5358 (0x14ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Validity
Not Before: Aug 18 17:00:28 2026 GMT
Not After : Aug 25 17:00:28 2026 GMT
Subject: CN=6a848fac-4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:24:ff:28:0d:c9:2f:27:78:d8:24:04:d2:
72:3e:7f:c9:03:91:05:11:af:5c:96:d9:9d:89:ad:
4e:aa:63:e0:ec:b9:9c:60:f9:ab:34:15:c5:98:59:
66:a1:cb:1d:09:5a:66:04:1c:2d:58:ba:07:73:ea:
1c:0f:5a:6f:1b:23:0c:ea:63:05:37:68:c1:de:22:
0d:8a:d2:9a:08:20:60:fc:0b:b1:41:65:54:5e:45:
63:87:41:44:0e:40:a1:4c:07:91:b8:61:7f:10:56:
ed:d3:d0:8e:b9:7d:34:cb:cf:0d:62:73:3a:56:c1:
94:3d:ed:42:da:75:02:b6:dd:79:b3:eb:4c:38:fc:
52:ec:26:f7:cf:eb:dc:fd:50:85:ab:20:f7:cb:77:
56:f2:69:f6:ea:8c:15:8c:b6:7d:66:d1:67:82:b3:
d5:39:ca:46:d1:f7:5d:bd:a3:9b:de:99:9e:ed:89:
1d:fc:43:75:35:c5:29:35:08:8f:b5:e2:c9:94:f1:
84:e7:5e:e4:4d:5c:f2:b2:3f:7e:ec:d8:4e:8d:c6:
c9:66:bf:c4:d7:83:23:d8:f9:bd:52:8e:1d:52:d0:
a3:e4:56:a8:18:b6:eb:96:e1:b2:60:dd:eb:2c:1f:
b6:79:45:e2:05:36:79:e3:a5:42:e9:32:bf:70:8c:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:56:F5:F4:63:2C:AA:ED:61:D1:44:7A:AC:4E:91:8F:00:FB:30
X509v3 Authority Key Identifier:
keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:72:d4:07:2e:82:b8:ea:b1:99:13:0a:eb:dd:e4:0b:c5:19:
32:3b:8f:58:5c:23:5f:d2:61:f5:29:78:33:95:1c:48:33:d5:
ca:fc:e0:4f:d1:24:ab:75:70:26:02:de:a9:71:23:fa:a7:75:
b5:4d:ba:94:ed:f9:fc:7b:85:8e:13:9b:d3:7f:da:61:3b:48:
31:aa:77:4d:0d:6f:64:b9:8b:c2:86:d6:8d:9d:52:d3:bc:f4:
cf:dd:a0:8c:fd:ea:c1:91:93:f6:a3:9a:b6:fa:51:66:43:87:
62:4c:2e:f8:05:92:c8:7a:01:22:c0:09:ce:8f:07:0f:e7:88:
2c:f2:43:34:46:6a:16:d5:38:31:d0:55:9b:64:5a:19:a6:ef:
e8:d6:1f:55:e7:44:51:3e:b3:69:4a:cb:5e:9a:7c:e1:fd:5b:
a5:3a:23:e8:04:d2:c5:9b:79:a3:76:ce:f3:f0:d2:90:ec:e6:
bd:a4:fb:74:2b:1b:be:df:e9:33:5a:1f:d6:83:fc:79:e0:6c:
73:d5:9c:b3:41:23:f6:6c:72:f0:82:58:08:73:83:c8:79:72:
18:17:50:fe:65:3d:0b:b7:ac:f9:fe:32:e7:b5:68:90:a7:1f:
c8:71:ed:e5:2f:33:94:76:86:9d:76:f5:18:d3:99:16:ae:18:
53:ae:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:55 2026 by rpki-client