
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier: iHCZ2JcczuOUHGeJgpZ14eh4FG1kEkdIzsLdGi9ILow=
Subject key identifier: BD:38:CC:41:5F:B1:65:C0:7E:DE:52:A4:95:35:B7:36:E5:E1:35:89
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number: 0189
Signing time: Fri 17 Jul 2026 05:40:59 +0000
Manifest this update: Fri 17 Jul 2026 05:40:59 +0000
Manifest next update: Fri 24 Jul 2026 05:40:59 +0000
Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: /QhXqUesSdSt46dk7Xq3go9cOT/b4xh1pMtizXVhtu4=)
2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Validity
Not Before: Jul 17 05:40:59 2026 GMT
Not After : Jul 24 05:40:59 2026 GMT
Subject: CN=6a59c06b-1860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:79:01:1f:d1:db:5c:a1:7c:85:7d:11:b4:
6d:2d:8d:d8:16:f2:11:b1:0f:8d:a1:64:24:6e:ac:
83:b5:2b:fe:11:16:7b:87:a4:7f:e7:16:94:b5:4b:
8d:18:aa:4e:89:64:87:69:e6:f4:17:7f:43:ab:bf:
45:fd:42:5a:06:81:ad:2b:f5:15:af:62:00:26:51:
eb:42:8b:ea:7a:ee:8d:00:1c:57:19:c9:b2:62:50:
e1:75:37:d3:7b:76:02:3f:09:b8:33:a2:c7:71:e1:
6c:43:0b:90:1f:6c:c1:a1:ae:f8:6e:ca:ed:c9:60:
9c:1a:66:a0:b3:b1:c0:0c:d1:2a:5c:05:a3:bd:32:
a8:57:dc:29:78:5d:14:6c:30:c4:fd:34:63:40:57:
de:ed:11:57:fe:4b:35:f5:0f:f2:82:f0:fc:03:ac:
18:e4:07:a7:1c:43:5d:2e:27:16:e7:70:f5:87:1a:
1e:59:61:37:74:d0:33:b4:f4:46:3c:d0:80:7f:98:
c0:06:87:70:c9:2b:8f:bb:93:89:c1:43:e6:4a:7e:
38:92:a5:2c:4e:9f:78:5d:02:7b:f9:52:c6:2d:a0:
c3:8f:c0:ce:b6:43:71:f6:e6:9e:aa:b5:b5:81:d0:
51:ef:db:d7:8b:1b:e6:00:5f:bf:4b:1f:04:38:57:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:CC:41:5F:B1:65:C0:7E:DE:52:A4:95:35:B7:36:E5:E1:35:89
X509v3 Authority Key Identifier:
keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:29:70:b2:36:a4:07:ce:00:56:40:a1:35:e6:5a:77:46:
df:0e:e6:d2:4f:17:32:1e:7a:54:d7:e7:9c:62:16:d8:ce:5b:
f2:31:de:d9:d0:e4:b8:aa:cb:54:55:8c:1e:d2:5c:6e:f1:16:
1b:c7:49:4a:fc:2e:ea:a7:79:4a:dd:f5:f0:fb:bf:0b:16:7c:
fe:20:c6:d7:e3:83:15:a2:ba:3c:2a:83:7a:93:3b:15:89:ff:
f6:43:7c:e7:62:f8:bf:5e:dc:17:a4:fd:88:bc:01:31:a5:d1:
a1:c9:f1:53:eb:6f:70:e3:24:e4:01:51:15:42:8c:5e:06:78:
52:ae:06:a3:f1:81:0c:b5:43:04:02:41:b8:f7:01:7c:58:f4:
54:92:a3:24:0b:3a:39:0f:70:83:dc:5d:a5:67:8b:8e:ec:9b:
72:7b:5c:a6:bb:e4:3e:2e:5a:21:8e:aa:70:98:db:c7:bf:e1:
c0:26:3b:e9:e2:c4:0f:d7:36:aa:ff:8c:9b:68:d6:84:98:17:
74:a2:1b:c6:77:2e:4d:dd:fd:e0:fa:98:1b:86:1d:4e:28:48:
c3:12:56:38:fb:fc:40:4f:cc:34:aa:0c:40:70:d7:e2:d0:9d:
5d:ff:17:4d:8d:f4:67:d6:d3:70:7e:7a:10:1a:47:c8:a8:0b:
da:9c:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:03 2026 by rpki-client