
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier: 7bLWbC3tmKPnhMEWYHE5jjRn2WrTNIrLxoBnRWd9muE=
Subject key identifier: 3C:26:38:8F:BC:24:44:AB:F7:E1:33:5B:C3:04:2E:2F:BC:F3:43:6C
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial: 2683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number: 2667
Signing time: Thu 16 Jul 2026 15:44:47 +0000
Manifest this update: Thu 16 Jul 2026 15:44:46 +0000
Manifest next update: Thu 23 Jul 2026 15:44:46 +0000
Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: Twu9yoigzrozAEJI0/cTG+OTVjNa/ptVsZiIhRf4358=)
2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9859 (0x2683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Validity
Not Before: Jul 16 15:44:46 2026 GMT
Not After : Jul 23 15:44:46 2026 GMT
Subject: CN=6a58fc6f-9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:73:32:1c:fd:be:af:a4:9e:0e:fc:50:5d:
a0:22:53:fa:8e:c2:6d:8b:2b:b1:0c:b6:0c:26:b2:
06:4a:fa:5e:5e:3a:d9:f1:33:df:47:19:ef:5b:a7:
c5:bb:cd:2c:81:1e:ba:11:d0:6e:ba:7f:08:39:41:
bd:73:80:e7:84:c2:ff:dd:61:e0:43:4e:6a:b8:1f:
2e:14:58:f7:67:95:67:b2:24:e2:1d:a6:6b:07:a4:
cf:f6:16:92:02:80:c0:69:9e:8f:5c:34:b9:88:4e:
7c:19:50:b3:23:1d:a3:73:3c:2e:43:ce:e7:ed:61:
f5:3d:2e:fe:34:1a:8a:16:ce:b3:3a:0d:74:40:6d:
f2:fe:b5:48:e6:3b:7d:ad:fe:a1:f0:84:d1:1f:66:
21:cc:8c:f6:12:f4:8a:23:c1:55:66:3e:95:89:67:
0b:49:69:fd:9d:20:aa:27:6b:64:74:60:ad:95:9e:
6b:34:51:17:ea:a3:8c:92:d9:0d:96:ea:cc:2b:93:
86:c2:dc:2b:2b:3d:c9:bf:33:21:0f:29:ef:c4:47:
c4:be:38:80:cb:1b:9e:c3:66:3b:7e:76:29:95:1a:
8b:42:db:43:de:c9:ba:4e:ce:00:de:c4:3a:38:47:
13:e6:ab:49:a5:58:a6:71:4d:0f:7c:50:7b:45:5f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:38:8F:BC:24:44:AB:F7:E1:33:5B:C3:04:2E:2F:BC:F3:43:6C
X509v3 Authority Key Identifier:
keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:0c:28:45:50:74:31:60:12:54:b7:00:8d:98:75:63:1a:
ba:65:4c:a3:04:68:fc:db:0d:f0:d1:d2:30:8d:71:55:bf:70:
fa:3a:ee:a6:a6:fe:60:03:0a:3f:c4:c2:5e:5e:10:1f:d2:c6:
22:e1:22:6b:b8:ba:e1:2d:97:37:48:9e:7b:16:89:31:46:cf:
d6:ac:48:01:05:eb:9d:57:2f:b1:a7:5a:27:8c:22:d2:55:3d:
e2:02:8f:d2:6f:62:c5:9a:41:58:6f:a5:c2:67:ca:8c:ac:b6:
73:6b:ff:c5:3b:93:49:51:7a:04:a3:e6:d4:26:97:b8:d3:10:
48:bd:47:b8:42:3f:ec:55:48:3f:20:fd:b8:d0:f1:ff:c9:63:
9a:e4:67:5f:64:44:c9:0a:db:2b:20:6a:fa:2d:7e:67:0f:cd:
30:2f:c7:91:5e:05:52:86:9d:63:b4:d0:1d:0d:be:c0:df:55:
ab:46:36:72:2c:93:83:a0:6a:99:5a:07:f0:1f:b2:74:75:91:
ac:76:b9:bf:3d:9d:45:37:4f:df:80:0a:ee:64:0a:3c:89:f9:
6c:10:19:90:51:f5:b7:1f:7f:8f:e5:75:cc:f8:6f:e3:d6:39:
5a:6f:01:e6:3d:e0:d6:83:e4:55:3a:58:42:36:0f:a1:46:01:
0d:1d:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:12:14 2026 by rpki-client