
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: gPzwaBciNTQRpUlQnsile/WBtqcgP4vv2yt3NVViRa0=
Subject key identifier: 51:E3:84:87:2C:15:E4:74:6B:AB:72:7F:D4:CE:4D:88:CE:B8:4B:FB
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 074E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 073E
Signing time: Mon 20 Jul 2026 22:27:17 +0000
Manifest this update: Mon 20 Jul 2026 22:27:17 +0000
Manifest next update: Mon 27 Jul 2026 22:27:17 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: CrfHko2DDEJboQuAOxttcJ2YA5kPXj7AYHrz6HWrTHs=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 22:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Jul 20 22:27:17 2026 GMT
Not After : Jul 27 22:27:17 2026 GMT
Subject: CN=6a5ea0c5-9240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:a7:f4:97:3e:34:0a:56:07:ce:79:8a:4c:
5b:d6:74:07:e6:81:bf:04:8c:6a:cd:16:5e:91:d9:
8e:93:df:c4:36:8f:96:8f:66:b5:e2:29:d1:04:ef:
fc:b8:e3:15:71:07:40:13:d5:32:83:11:18:bc:80:
75:8a:0d:a5:ae:58:e0:d0:78:b6:35:c3:bf:7f:d6:
b2:40:f1:22:10:58:80:48:fb:d5:05:a0:c5:b9:32:
42:d7:4d:f1:39:75:db:cb:69:9a:ee:77:0e:9a:45:
15:27:dd:3c:d5:2e:c5:df:94:e6:67:93:35:13:a1:
14:0a:32:be:db:64:a0:8e:5d:86:55:e0:ab:1a:0e:
04:e7:c7:d0:a9:98:dd:6b:4e:b1:f7:8e:93:95:8f:
c2:44:fa:8f:1e:97:69:5a:0a:f5:e9:8b:dc:54:4a:
fc:57:68:3e:18:f5:ba:35:18:0c:c0:e9:20:9b:86:
22:c0:7b:9e:e1:21:51:42:3e:d3:37:f9:34:dd:69:
f2:93:20:0f:6b:fb:4e:11:23:a3:2b:6a:f0:eb:9c:
5c:db:6d:43:a7:0b:94:6d:fe:d7:c4:bc:97:14:b5:
7d:07:50:ec:67:3d:28:27:b2:02:5c:07:22:54:72:
1a:35:8e:b0:eb:eb:fa:30:9c:cf:37:05:54:e2:1b:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:84:87:2C:15:E4:74:6B:AB:72:7F:D4:CE:4D:88:CE:B8:4B:FB
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:d2:50:25:b1:71:42:21:01:3e:9f:17:a0:13:07:39:19:
ac:22:46:3e:25:98:2c:dd:ac:a0:96:a9:9b:a1:f5:90:89:6b:
aa:27:54:b4:93:91:09:a7:b5:23:8c:d5:f1:ac:b1:96:02:0c:
15:35:a0:81:88:7a:28:87:7b:f1:10:d6:b4:28:da:10:24:57:
be:17:4e:83:92:ea:96:11:50:df:9e:08:72:39:e3:01:cc:eb:
6e:17:eb:d0:df:2e:a5:b4:cf:8c:9c:3a:f4:e8:93:83:61:2a:
0a:3e:f5:73:eb:6c:67:81:56:2f:78:7e:b7:af:0a:e7:be:11:
18:74:0d:f9:4e:bc:72:e0:e3:0f:6c:53:05:a7:8d:a3:ae:84:
f1:62:07:c9:2e:ec:81:ab:dd:33:ce:dc:f9:d8:1d:a6:92:f4:
4c:ee:3d:9c:f0:73:fe:bc:53:a0:cc:93:0c:f6:62:56:ec:1a:
c6:91:cb:94:d0:a1:a9:c5:51:ad:9d:c5:85:88:56:5a:79:1a:
15:0e:21:1e:d9:73:5f:48:e0:e8:f0:cd:27:6d:5d:21:e5:cf:
b9:e1:b0:dd:37:43:cd:66:80:38:71:96:a1:21:7b:0d:f0:c2:
03:36:93:27:d1:9e:82:d5:f1:5d:6c:2f:d9:9e:fb:a1:10:3f:
1e:f5:2e:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjYwNzIwMjIyNzE3WhcNMjYwNzI3MjIyNzE3WjAYMRYwFAYD
VQQDEw02YTVlYTBjNS05MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5mn9Jc+NApWB855ikxb1nQH5oG/BIxqzRZekdmOk9/ENo+Wj2a14inRBO/8
uOMVcQdAE9UygxEYvIB1ig2lrljg0Hi2NcO/f9ayQPEiEFiASPvVBaDFuTJC103x
OXXby2ma7ncOmkUVJ9081S7F35TmZ5M1E6EUCjK+22Sgjl2GVeCrGg4E58fQqZjd
a06x946TlY/CRPqPHpdpWgr16YvcVEr8V2g+GPW6NRgMwOkgm4YiwHue4SFRQj7T
N/k03WnykyAPa/tOESOjK2rw65xc221DpwuUbf7XxLyXFLV9B1DsZz0oJ7ICXAci
VHIaNY6w6+v6MJzPNwVU4htn3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHjhIcs
FeR0a6tyf9TOTYjOuEv7MB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL
Y1BrNlhMY0xabWdLVW83Y0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIjHSUCWxcUIhAT6fF6ATBzkZrCJGPiWYLN2soJapm6H1kIlrqidUtJORCae1
I4zV8ayxlgIMFTWggYh6KId78RDWtCjaECRXvhdOg5LqlhFQ354IcjnjAczrbhfr
0N8upbTPjJw69OiTg2EqCj71c+tsZ4FWL3h+t68K574RGHQN+U68cuDjD2xTBaeN
o66E8WIHyS7sgavdM87c+dgdppL0TO49nPBz/rxToMyTDPZiVuwaxpHLlNChqcVR
rZ3FhYhWWnkaFQ4hHtlzX0jg6PDNJ21dIeXPueGw3TdDzWaAOHGWoSF7DfDCAzaT
J9GegtXxXWwv2Z77oRA/HvUuVQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:44 2026 by rpki-client