
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File: XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier: dazyaUq9sSTb+/wBSjZnYuk0W5lDJc8uSNS22izT+gY=
Subject key identifier: BF:EB:B1:55:4D:DA:F5:BD:AE:44:A8:0E:6A:D5:80:A9:B2:3C:80:48
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 23C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number: 23AA
Signing time: Sun 26 Jul 2026 15:53:59 +0000
Manifest this update: Sun 26 Jul 2026 15:53:58 +0000
Manifest next update: Sun 02 Aug 2026 15:53:58 +0000
Files and hashes: 1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: 4GxT0qnSP5P+hHT5Mkf6zo3c1EAOfVwkpOvEr/CkIXw=)
2: 9A74033486EF11F19E006003A7EE528E.roa (hash: nM6DOGTCq1XiY4QFr/gSv6xfQY2Pps9Pkd6SvoqHBpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9159 (0x23c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: Jul 26 15:53:58 2026 GMT
Not After : Aug 2 15:53:58 2026 GMT
Subject: CN=6a662d96-ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:fd:c9:da:15:81:5e:b7:64:5b:87:82:c2:
62:e9:35:52:14:b0:46:5d:48:38:4b:ae:4f:0f:97:
9b:a2:bf:41:dd:e2:78:e0:18:6a:45:a6:42:7a:06:
20:f9:03:6b:25:a5:b2:cf:96:20:f4:70:e1:ad:2f:
72:01:e1:e7:be:c0:8e:ff:ac:04:c7:06:91:e2:44:
dd:4b:b1:6d:94:92:43:1e:09:11:bf:34:49:e6:e3:
65:6e:d5:9f:bf:f2:55:fa:33:e3:7f:43:3b:13:7d:
d1:94:d1:05:13:85:32:6f:96:aa:24:4b:34:06:63:
12:ae:c2:b2:56:a5:8b:7f:54:18:97:93:b7:30:a1:
5f:05:26:8c:ea:7a:5d:da:3a:fb:44:d9:81:7b:6e:
37:a0:73:70:6f:cb:ae:71:77:9d:94:fa:b7:98:39:
6b:a3:96:1f:3c:15:af:d9:31:f1:7c:bd:47:fe:96:
14:72:02:57:fe:4a:28:80:18:5e:05:d6:ac:ca:a1:
d6:91:0d:1c:4c:8a:d6:45:4b:56:a1:a6:11:3d:0b:
ef:b7:11:e1:46:44:0d:f0:1b:5d:b5:39:45:c4:f8:
26:14:a1:5c:f4:4f:40:08:dd:3b:83:b7:e8:20:7b:
56:86:88:5f:a3:c5:94:f4:4b:e8:fc:2e:6c:fa:73:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:B1:55:4D:DA:F5:BD:AE:44:A8:0E:6A:D5:80:A9:B2:3C:80:48
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:cd:b9:54:ad:dd:00:0f:dd:25:9b:7d:40:b0:27:52:3c:
b1:d8:5d:65:89:d2:ad:a0:ee:c9:89:6c:3c:7c:6a:d1:e2:d5:
88:b0:1f:c1:32:b5:2e:bc:29:02:32:16:bf:c4:47:4d:e5:cf:
a8:31:b8:04:b6:8d:50:6a:ff:f5:c9:8f:e6:9f:40:28:1f:ac:
5a:5c:c9:c1:b5:74:f3:27:5d:a5:da:08:72:e8:a7:04:86:dd:
06:9e:6e:00:58:16:2d:b7:ce:24:6d:7d:0e:df:72:01:b1:0b:
ee:d5:24:74:6b:ac:f2:e5:29:01:48:80:e1:11:ed:61:21:94:
79:60:f6:2e:32:b6:54:4f:90:a8:e1:d1:8b:3a:60:28:3d:50:
b7:df:a8:3b:3f:e2:de:e7:fb:af:da:f3:3f:18:81:60:ed:2c:
91:08:9c:19:be:e1:bb:91:8a:5f:6f:14:b7:67:1d:34:5a:dc:
ff:87:25:b4:42:17:ec:a4:ba:3e:19:bb:c0:57:e3:72:f0:b1:
d8:51:34:35:1e:53:8b:d9:2b:85:8d:b8:bd:62:68:10:48:1c:
0d:b9:03:35:c1:0f:76:13:c3:90:9b:8a:5b:7c:ea:17:83:a5:
dc:34:c0:67:b9:75:39:44:b1:6e:b2:26:22:e7:f7:5c:c2:0d:
d3:d6:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:49 2026 by rpki-client