
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json)
Hash identifier: HaAudV3RScJv9LHkhTlkEV0nCpMvd6hM+aZT1GrKHsY=
Subject key identifier: E8:6D:4E:8D:F7:87:33:C9:5A:97:6C:B5:8B:20:C4:04:70:1F:A1:A9
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
Manifest number: 08D6
Signing time: Fri 04 Sep 2026 20:19:00 +0000
Manifest this update: Fri 04 Sep 2026 20:18:59 +0000
Manifest next update: Fri 11 Sep 2026 20:18:59 +0000
Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: FA2dbwmkw+JFrKxESTy+6lg/87ieiYXng2xfXasN6h8=)
2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Validity
Not Before: Sep 4 20:18:59 2026 GMT
Not After : Sep 11 20:18:59 2026 GMT
Subject: CN=6a9b27b4-5f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:10:3e:27:e6:f2:47:93:c2:79:72:64:9a:
8b:cd:a4:07:c1:34:28:cf:6e:c8:fa:2b:51:e8:78:
0b:63:94:66:45:4b:c2:64:9c:f8:14:a1:af:bc:72:
4c:c9:2a:16:a4:cc:54:6b:53:ed:08:31:b6:a5:ad:
fc:53:bb:0b:94:9b:25:aa:ff:34:2a:44:5b:ce:02:
50:f8:df:2d:21:ec:73:50:54:ab:b8:f5:8c:68:d6:
ed:9a:d3:8a:5c:c1:b4:ef:d1:10:3b:c8:c9:b9:cc:
09:6e:6d:57:11:d4:dd:0b:91:f6:34:09:2f:ef:f3:
66:c0:1f:79:b0:98:5f:d1:ad:dd:bc:e1:df:bf:2a:
99:c7:69:76:fb:93:1e:10:3b:1e:05:24:07:ff:88:
98:8c:86:ef:cc:f5:ba:94:cc:28:87:c0:b2:5d:a0:
c9:83:36:bf:08:7b:a6:e7:c7:3e:91:fc:44:b1:a9:
33:6b:f0:84:dd:cf:bc:bb:c2:a7:32:4a:3c:79:ed:
c8:f2:71:9b:bf:8a:c4:58:93:7d:f0:76:22:64:e3:
7f:a3:01:03:68:6e:1d:3b:6b:2e:d5:18:ea:f1:f7:
ce:3f:ac:9a:d1:c7:55:53:1b:e6:e2:fc:2a:a8:59:
29:a6:f9:8c:6e:b9:56:03:96:3a:82:0d:8b:1f:80:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:4E:8D:F7:87:33:C9:5A:97:6C:B5:8B:20:C4:04:70:1F:A1:A9
X509v3 Authority Key Identifier:
keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a1:d2:1a:77:fa:19:0c:3b:47:a7:c0:49:ec:66:ac:d5:b9:
96:36:7d:ab:47:23:f8:98:1f:c8:76:a0:4d:47:1c:0f:28:fa:
7e:f9:e2:a5:e4:c3:0a:ac:02:7b:74:f4:7c:b8:c2:d6:c5:25:
e0:11:a5:85:22:87:2c:1a:59:58:03:20:46:60:4a:b6:4c:97:
94:47:38:a0:6d:f7:fc:5e:3a:d9:78:95:70:59:b6:5a:f4:eb:
e7:6b:33:e2:a3:14:dd:14:20:7b:07:82:2d:25:b1:ae:f9:2a:
72:a6:d9:c0:0c:4e:a9:16:e2:03:67:e9:de:1f:e8:68:9a:29:
c0:c8:f3:e7:49:c7:14:c7:50:37:2c:b0:dc:b3:b8:05:d6:f2:
96:0e:13:9d:f6:f5:e2:c3:67:1c:1a:9f:70:70:5f:e3:fd:6c:
f2:2a:89:08:7a:f6:ab:57:50:35:58:95:a7:bd:42:e0:86:7a:
f0:d8:68:98:1b:6a:f7:bc:be:24:56:71:a1:0a:dc:f0:dd:95:
69:12:77:14:13:fe:fe:1e:1a:c3:03:71:8a:78:c3:3b:48:7d:
7f:8a:52:8e:ba:7b:25:bd:36:8e:a0:bc:7b:f8:6d:09:a3:6f:
68:e9:e8:49:74:d9:0a:7a:c5:71:dd:28:97:5d:7e:9e:ca:da:
63:f6:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:18:11 2026 by rpki-client