
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier: MPv0LejKAff/vPxtDY2b8QhX/ZeK5qKO+AyZjNXExbU=
Subject key identifier: E1:5D:C2:BF:32:CC:8C:C9:5D:43:E3:57:27:BB:1D:A5:0C:BB:98:FD
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number: 0281
Signing time: Thu 16 Jul 2026 23:30:57 +0000
Manifest this update: Thu 16 Jul 2026 23:30:56 +0000
Manifest next update: Thu 23 Jul 2026 23:30:56 +0000
Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: aU5fnPIb7lFi5mo7nCnjR90g0MJ/JDUHN6id9seMSbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 23:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Validity
Not Before: Jul 16 23:30:56 2026 GMT
Not After : Jul 23 23:30:56 2026 GMT
Subject: CN=6a5969b1-e9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:ea:da:9c:9a:4a:c9:30:61:98:51:0c:46:
52:73:1b:36:76:c3:d6:ad:ea:d0:1d:b7:3d:35:b2:
f9:11:e2:86:4b:d3:41:3c:2b:ea:ba:ca:84:18:24:
7f:ef:02:0f:e6:41:0f:f6:ce:b5:45:b2:21:99:f4:
fd:f7:7a:8a:2b:2e:20:51:74:9a:31:08:84:8e:5e:
88:50:ae:31:7d:61:d4:9a:80:d9:2c:92:96:71:23:
7a:a2:0d:b9:b0:ed:10:8e:bd:a0:20:ca:ae:b3:05:
d6:31:03:a5:2e:2b:51:56:6c:86:76:e8:96:f0:5c:
c9:b1:64:0f:34:93:48:c6:98:c6:3d:de:f2:d4:ca:
29:e3:8f:42:b7:01:52:8b:80:3d:bd:c6:99:59:a8:
78:02:82:82:e9:76:fc:c8:b2:7f:78:4a:a5:7b:21:
88:5a:44:ee:70:4d:2e:9c:49:e7:ed:fc:08:0f:a8:
6b:90:ac:05:c5:fd:51:36:b6:84:ec:fd:88:ed:52:
47:05:f7:9d:95:70:5b:8e:b0:fc:dc:62:40:81:c6:
59:d0:0c:38:be:0d:af:d8:9e:1f:37:c5:38:23:2a:
f7:0f:80:b0:71:4e:a6:bd:5c:31:c1:7a:80:99:73:
b9:45:5b:db:fb:93:44:ce:56:22:b3:ac:06:50:ec:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:C2:BF:32:CC:8C:C9:5D:43:E3:57:27:BB:1D:A5:0C:BB:98:FD
X509v3 Authority Key Identifier:
keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:d0:03:a0:e0:a5:89:7c:7c:aa:e2:ca:68:0f:2c:9e:8c:
61:38:32:ec:98:c9:47:bc:ce:62:a4:9c:bf:4c:9f:5f:7e:f3:
27:f7:ef:df:0d:b4:57:78:da:ea:a8:31:de:7a:ce:c2:a6:27:
59:66:72:58:ad:54:65:bf:6a:e1:77:4f:a9:d4:d0:35:ed:e0:
20:e3:d3:a4:d3:c7:ff:46:42:14:df:ed:6c:c3:db:51:30:3b:
85:f7:08:20:b2:98:86:ed:03:46:f4:fa:70:93:dc:07:11:9c:
b1:c9:b1:b1:7e:e7:b8:0b:7b:be:ee:c2:c0:21:35:7d:32:5a:
ee:6f:f2:04:6d:0b:bc:f0:8e:55:5b:18:b5:c3:2d:ec:45:8f:
ae:f8:cd:eb:0b:15:63:26:98:f4:04:d6:aa:1c:18:5c:45:4f:
58:df:43:60:3a:bc:69:15:16:c5:74:60:1e:95:df:5d:a5:2c:
da:f2:cd:28:c6:24:bb:5e:6a:fc:e1:71:e6:33:e6:9f:c0:8f:
4f:95:e8:df:1c:20:04:6a:c1:2c:99:1b:b1:76:d4:fc:5c:d7:
09:31:a2:bc:4c:f3:71:4a:99:f8:40:df:31:a6:13:16:cd:61:
a7:43:f1:d5:a3:1d:89:2c:23:eb:ad:74:32:5b:d8:e4:6d:a6:
ed:11:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:32 2026 by rpki-client