
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json)
Hash identifier: GS+XbpF16fu0El6A0Ie7n28RFG2v+LX04Qtml0CNIgc=
Subject key identifier: EA:B9:34:51:D4:AF:8D:DF:D0:F4:2E:CF:6E:5F:2E:F1:37:05:71:0D
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial: 08A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
Manifest number: 089B
Signing time: Tue 18 Aug 2026 20:57:02 +0000
Manifest this update: Tue 18 Aug 2026 20:57:01 +0000
Manifest next update: Tue 25 Aug 2026 20:57:01 +0000
Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: egfV/IwqhaNR11BYNsuakFZOGrMts5SrynxWvOIP//Y=)
2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Validity
Not Before: Aug 18 20:57:01 2026 GMT
Not After : Aug 25 20:57:01 2026 GMT
Subject: CN=6a84c71e-c678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:48:67:3f:4b:b2:2e:71:f7:b3:27:5e:c1:ff:
bf:44:a2:61:c0:bb:d4:32:01:47:d5:18:71:8d:dc:
37:12:28:c7:f4:76:90:47:7d:a9:55:96:7d:4b:24:
7d:fd:c3:13:53:fa:2a:0b:d0:46:ae:10:a9:b2:df:
e2:e1:f2:4a:3f:05:52:48:4b:60:44:44:a7:cc:ba:
08:68:51:c9:1f:9f:1d:1e:6b:96:22:4f:fe:b2:93:
cc:7a:47:36:f9:f9:54:ed:fe:ae:39:78:a7:7c:1d:
89:fd:01:bb:94:f2:85:e4:24:f6:04:f8:6e:9c:7c:
30:74:d8:73:f8:15:f1:14:a5:da:65:d0:a1:0f:37:
21:64:26:b2:ff:8f:af:06:24:17:38:0d:69:fc:4d:
0a:ab:cb:95:29:e1:6e:a9:32:82:37:72:e0:81:dc:
48:c8:2d:66:2a:3d:8f:ef:68:38:5b:52:74:03:28:
99:eb:e3:b5:8c:cb:b7:ca:8e:84:2e:c9:23:3e:b6:
a3:03:1f:c4:bd:21:6d:bf:dd:9d:ab:0a:3e:cf:99:
63:8c:ef:be:a4:b1:fa:36:08:4a:26:9d:1e:6d:aa:
3f:86:f0:bf:ea:2e:9b:c9:b1:4e:c0:2a:48:fc:f4:
1f:69:31:6f:16:91:97:09:35:91:6c:c2:e0:93:6e:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:34:51:D4:AF:8D:DF:D0:F4:2E:CF:6E:5F:2E:F1:37:05:71:0D
X509v3 Authority Key Identifier:
keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9d:17:60:dc:00:6d:17:1a:0a:af:a3:74:5e:30:e7:5c:ca:
c8:f9:7b:4d:50:35:f2:e3:47:19:1f:0a:22:e5:a9:9e:f9:8d:
9c:ff:5f:ca:73:ec:eb:31:31:fe:38:de:4c:8c:58:6b:85:fb:
59:81:5b:48:56:4b:ea:34:5c:ad:f6:55:a8:7b:ef:3c:fb:46:
f6:0d:78:04:ca:c1:72:72:9d:a7:03:84:1d:1a:05:a8:8c:4c:
0f:08:a7:a4:69:21:c8:ca:d6:0c:c3:66:cb:b1:c6:6f:53:1c:
88:22:43:92:59:da:24:1c:8a:22:17:e1:5d:48:33:af:9d:3c:
09:8b:67:cd:72:6f:6d:08:a7:9e:26:64:40:c3:14:9e:83:6d:
0f:75:a4:dd:44:d0:ba:73:7f:1c:c3:ed:5f:31:8b:49:e0:73:
7b:ed:b7:6b:c8:52:89:d3:13:29:24:4e:dd:31:6b:a7:d7:21:
08:62:29:03:ea:10:e0:31:90:3f:fc:70:07:3d:f4:e8:e9:3b:
10:cc:8b:6c:0c:14:bb:5d:a1:0a:a7:66:98:09:0c:fa:64:0d:
2e:08:b4:b8:06:c5:8e:f1:d0:17:42:98:41:b9:9e:30:87:6c:
31:11:90:48:fb:d2:fd:7b:34:40:ba:c8:58:82:8a:16:c5:81:
1d:27:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:46 2026 by rpki-client