
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: YhJ0Ka4Qqveu2UlCZKS1oSYVLjwXlJYiBN8/o2wUohU=
Subject key identifier: 7F:6D:00:FB:5C:72:20:E0:28:FB:5B:27:95:98:0C:37:F7:28:79:D4
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: 0157
Signing time: Thu 03 Sep 2026 05:18:53 +0000
Manifest this update: Thu 03 Sep 2026 05:18:52 +0000
Manifest next update: Thu 10 Sep 2026 05:18:52 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: YYl/IQAO8QnYtJhln5vasKoOj0zfUBQpxakuQ1r6t00=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Sep 3 05:18:52 2026 GMT
Not After : Sep 10 05:18:52 2026 GMT
Subject: CN=6a99033d-dcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:82:ea:df:04:e9:1a:a7:17:2b:23:ba:47:
4a:d1:53:8a:c0:91:32:b3:9f:73:55:b6:d9:94:0b:
55:c9:93:41:e0:cb:17:cb:58:77:c7:52:5b:98:f0:
c2:cc:35:40:99:74:ef:b9:b2:94:cd:f7:3c:39:4d:
f1:fd:8e:c9:1f:9a:f6:22:62:0b:f3:2b:fb:d9:25:
65:55:26:e9:63:1c:e0:d1:9d:4b:f1:ed:56:a6:59:
ae:0b:c3:bc:c7:37:fe:5e:e7:46:6c:85:70:e6:26:
0d:d6:e9:b4:37:26:59:3e:2a:12:01:f9:f7:42:26:
16:87:90:6c:8d:54:7d:cf:18:88:c4:6b:4e:f5:94:
03:6a:8f:79:24:a4:81:a3:90:0b:81:6b:1e:6e:dd:
96:ce:25:7f:13:d8:bc:1d:26:9b:7a:84:51:99:9d:
fb:4c:ee:83:b8:c2:c9:86:5f:e5:35:ae:c8:df:92:
60:7f:42:72:7a:68:9e:64:55:17:c9:2f:6d:85:07:
1f:d0:2b:29:a9:ad:04:96:cb:34:cd:9d:f3:0b:66:
74:62:89:88:8b:d3:7a:2b:95:81:f3:33:48:6d:45:
f2:64:e5:ae:7c:3f:5f:3b:79:98:b7:7f:34:ba:eb:
5d:8b:85:92:6a:d7:cb:66:51:bc:4a:c9:2d:cb:12:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:00:FB:5C:72:20:E0:28:FB:5B:27:95:98:0C:37:F7:28:79:D4
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:0e:e2:17:24:75:61:df:62:e4:d7:39:99:c3:a1:3c:c1:27:
98:f3:33:4a:80:16:21:26:71:fa:f1:43:99:c6:c3:7f:6a:ed:
a7:23:83:98:3b:25:24:fd:77:9f:c6:ef:71:4f:00:77:f6:a0:
12:ca:48:25:20:63:d0:e1:3d:cd:e4:7f:0c:57:0c:bb:b9:86:
b1:ec:5e:bb:91:9d:0b:dd:89:c9:23:7c:88:6f:e7:2e:64:31:
04:b3:ce:9c:6c:73:86:ae:43:75:0c:13:23:1b:28:20:20:d3:
fd:1b:26:80:8a:bb:fe:50:9c:b5:94:8d:d3:ff:31:ce:29:df:
cd:ea:37:ef:dc:b4:3b:cc:f7:b8:03:be:00:cf:ef:0b:5f:c6:
45:a4:cb:73:e5:ff:3f:3a:10:21:82:34:b3:51:23:45:f5:10:
25:9f:ed:39:15:5f:94:87:da:c2:5e:83:d9:d8:07:2e:8f:2a:
06:4c:b4:5e:59:9e:b6:e2:5d:b8:8d:71:9f:d7:d8:89:0c:68:
52:ce:f0:c5:7d:f7:59:af:80:6e:64:90:e7:f3:a1:79:8b:6d:
e4:62:36:15:19:2c:83:76:93:98:ef:73:a4:df:aa:39:a9:34:
26:87:f8:b5:90:73:f0:e6:ee:26:65:57:63:d8:4f:c7:6d:88:
ad:dc:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:15:12 2026 by rpki-client