
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier: pjbotBLeKqcW4xVlt93rojtzSqWk5cu4dRiYW4VstLE=
Subject key identifier: 3E:A2:DF:27:64:C7:AA:3E:84:68:A3:35:CC:84:14:CD:8F:C9:E1:44
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial: 02C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number: 02A4
Signing time: Tue 21 Jul 2026 03:01:59 +0000
Manifest this update: Tue 21 Jul 2026 03:01:58 +0000
Manifest next update: Tue 28 Jul 2026 03:01:58 +0000
Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: 8uBXb+FHTBihEl2mSGGuS4yb6r7cwCwQOMSymixueYw=)
2: 253BC010825E11F1A80D61EA96A30FBC.roa (hash: D3IZvwAv925L9X0Ir0tlttcYt5LCyqnz64G0hycoTEA=)
3: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hpocYvDPf9bP8lk8bw2eWDBV0MmWUMrFYAIPH3SFhGE=)
4: CC4C064A802D11F18FD74CD965A30FBC.roa (hash: nU+7f9cDRzh3u8X6B0Mt2pSEFogtEH9ZNVDC0mAJIzA=)
5: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: jEiZeVVR7YqvSOsTkuwgvg/YfncERr5FCAvit7Yi2lw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Validity
Not Before: Jul 21 03:01:58 2026 GMT
Not After : Jul 28 03:01:58 2026 GMT
Subject: CN=6a5ee127-ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:14:c8:51:7a:8b:3b:b6:fa:b8:f8:3f:88:
4c:28:2c:24:ce:5e:62:d3:3b:ea:c4:a7:70:f4:77:
c7:28:a0:d8:61:aa:28:6f:b8:5d:54:4b:0e:e3:ec:
ef:39:f6:7d:1b:3e:98:e4:5e:82:3d:d3:cf:f6:bd:
ea:70:c2:02:66:69:c2:ec:29:15:d2:87:b5:9e:48:
38:7a:c5:21:c2:6c:2b:30:a2:49:c5:e7:b5:61:16:
ab:2a:6d:b1:46:ec:c1:f0:a8:87:52:db:3c:bf:e2:
5a:34:a7:8d:c7:01:24:15:41:f2:ef:19:4c:ad:52:
86:4d:12:ec:63:59:1d:40:ec:0e:3b:9a:ac:6c:28:
0b:ac:39:92:c1:c2:24:3b:82:50:a5:34:9b:4c:3a:
c1:cc:32:dc:77:cf:87:6e:cd:41:d3:c8:7f:98:a7:
c3:7b:c1:57:8c:db:08:c2:e4:7d:77:d9:ee:bc:b5:
ee:ef:26:35:5e:3d:49:5f:5a:b7:dc:57:b1:53:27:
46:cc:23:3f:1c:68:29:f2:99:72:f3:92:11:03:a2:
95:b5:34:33:d4:d7:9a:d5:48:40:e9:fd:6d:54:45:
0d:13:62:aa:0e:68:d3:2d:3e:80:11:85:be:46:5c:
19:f1:c6:b7:98:ff:d8:ce:3c:e5:e8:70:78:06:57:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A2:DF:27:64:C7:AA:3E:84:68:A3:35:CC:84:14:CD:8F:C9:E1:44
X509v3 Authority Key Identifier:
keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:dd:47:c8:2a:93:d8:8d:55:99:ad:9b:76:f6:86:43:f2:
80:af:6c:aa:09:89:65:bf:41:8d:ee:da:20:35:eb:9c:0e:92:
75:3e:8a:b6:40:4f:6c:e2:8b:be:88:a7:da:3b:64:5d:30:b0:
97:96:92:26:ae:9b:57:01:ec:fc:e8:52:21:ec:9c:77:b9:4b:
30:16:d2:58:fd:4b:a5:b9:7c:18:3a:a1:81:34:d7:85:58:4a:
a5:49:10:c2:00:69:aa:4b:e3:8b:c2:42:19:39:59:ce:f3:e8:
93:06:6f:47:1e:01:4c:8a:02:3b:89:f5:10:80:f0:6c:fe:c3:
02:8d:96:52:36:c1:81:fe:fd:63:d7:06:33:17:07:de:81:09:
b1:f9:3e:9d:cf:f2:fe:41:d1:70:cb:77:d2:4e:72:44:ff:22:
dc:23:8e:21:cf:10:15:80:f0:12:c7:4e:02:c8:6d:b7:a9:17:
e1:4a:51:21:15:de:8f:f8:f3:26:56:f6:7a:77:6a:83:53:5a:
9a:a0:c2:af:0e:72:8f:85:99:cb:75:90:e1:f8:ff:b6:30:15:
3e:5a:34:c3:57:8e:ae:8f:c3:89:32:78:4b:3b:a6:13:f7:9e:
55:3a:3c:72:46:c3:de:dd:6e:7b:19:0f:b5:29:48:c9:76:8a:
ed:0a:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:35:17 2026 by rpki-client