
$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: SBHAyaANtixA8L8UMc7lebSUU5G1OQc/5Am0xKlSzpk=
Subject key identifier: 97:8A:D4:A1:B4:D9:96:3F:E0:83:18:98:7A:F0:8D:3A:98:D0:17:37
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 02E1
Signing time: Wed 19 Aug 2026 01:50:02 +0000
Manifest this update: Wed 19 Aug 2026 01:50:01 +0000
Manifest next update: Wed 26 Aug 2026 01:50:01 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: M4EaOHp2h3IJaZbbp83a2tL5o8FshOP1+UoLPDz5xHU=)
2: 403C37D454EE11F18BF3D50DA0833773.roa (hash: CqiZbfQsdSr5WOK24+P608ghGihUdoFddSIGup2XQa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Aug 19 01:50:01 2026 GMT
Not After : Aug 26 01:50:01 2026 GMT
Subject: CN=6a850bca-03dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:16:03:e6:b1:b3:4c:86:06:6a:4e:3e:18:
f0:51:1d:04:e5:a9:da:ba:7c:e8:38:a2:e3:e5:e4:
42:08:66:be:33:40:9a:d6:2a:f7:2e:90:68:c4:55:
9a:26:b7:48:ea:0c:8c:3d:5b:d7:f9:53:f0:29:1c:
f6:73:4a:a6:7b:67:02:71:b2:db:4a:70:d2:84:5b:
d7:ba:62:39:a5:ad:a6:5a:30:d8:82:f2:0d:71:4f:
de:66:2f:b2:fb:fd:71:59:7b:e0:35:23:2d:ff:97:
5a:ae:0f:8b:60:49:77:bc:4f:ed:0f:f8:da:f6:e6:
bf:2f:c7:a4:5b:21:c4:d4:88:b7:36:78:53:b3:3b:
29:04:b0:87:65:a0:f7:f4:02:b9:23:88:db:ff:0b:
f3:27:0d:02:ea:0b:c4:38:ab:5c:7e:43:be:1b:f9:
c1:84:b0:97:16:25:a8:76:dc:6f:9a:89:13:1e:ce:
6b:85:ad:c5:42:cc:b4:d9:a7:5a:c9:69:e7:98:6e:
e4:9c:36:d7:9b:0b:45:14:24:a4:d4:19:c0:64:b8:
47:cf:ff:2a:21:42:c5:55:87:fb:fc:e0:a8:ef:31:
11:14:cb:93:c4:e5:2f:1f:5a:59:ff:47:09:c0:da:
9c:10:e1:bc:32:4b:78:d6:2e:6f:5b:b4:b9:55:ec:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:D4:A1:B4:D9:96:3F:E0:83:18:98:7A:F0:8D:3A:98:D0:17:37
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:b6:aa:83:c4:0c:a8:36:8a:bf:a9:40:d0:7a:21:fb:88:
dc:44:36:a4:6c:c9:4e:7c:ec:70:a6:10:92:2e:b2:e3:c9:cc:
11:25:5e:a0:11:d8:2f:b1:7d:42:5f:22:74:e4:dc:5b:d9:8e:
cd:e3:9c:36:6c:20:4d:63:0e:a8:36:c2:b0:c3:e0:dd:eb:88:
e1:1b:76:49:44:23:15:49:da:4f:62:ff:93:a9:43:92:13:7e:
f4:3e:af:d8:e4:3b:48:79:5d:1f:7f:b7:31:87:43:48:76:1e:
8a:00:59:d7:72:27:f9:71:8e:dc:1d:7b:16:cd:bd:0e:7f:73:
44:4d:7b:52:85:f7:01:40:6c:8e:14:56:0a:e9:56:f7:13:16:
47:4e:11:4f:58:74:41:13:98:cd:92:9c:28:a9:e0:76:de:80:
2f:93:9d:a7:99:ce:be:58:a2:5f:c2:87:8d:b1:ff:b2:42:da:
58:bb:a9:19:00:98:39:37:1d:df:10:96:2e:89:c8:6b:43:b6:
e1:18:2b:8b:45:a2:8e:9d:05:d2:28:e4:c7:0c:51:46:7c:d8:
6e:15:37:3a:cd:37:ee:77:50:19:23:34:42:06:1e:dd:e7:00:
fc:ff:df:2a:59:1e:81:cc:ee:14:62:80:83:72:9c:07:72:24:
d1:f5:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:54 2026 by rpki-client