
$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json)
Hash identifier: Ycv+Y3pTKFfHr7802JP7U4sdxwivJqo7lm7Ro7A8bF8=
Subject key identifier: 1A:0F:5B:66:09:53:8E:5A:73:3C:D0:C2:AF:A9:B8:FE:DA:F5:F4:F8
Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Certificate serial: 06B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
Manifest number: 06AC
Signing time: Tue 18 Aug 2026 22:45:40 +0000
Manifest this update: Tue 18 Aug 2026 22:45:39 +0000
Manifest next update: Tue 25 Aug 2026 22:45:39 +0000
Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: IVguUmWSm+9lclLkhm9j0RyTGu92getGW+lEus7WZ7k=)
2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: iQ+PgNNqf8UmV9fcTIqKb5ivLyfy8TSAmHAuDpQqAYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717 (0x6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7
Validity
Not Before: Aug 18 22:45:39 2026 GMT
Not After : Aug 25 22:45:39 2026 GMT
Subject: CN=6a84e094-76f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:7b:9e:dd:c9:c0:d1:41:be:ea:ec:b8:ce:
57:db:b9:1e:17:64:97:50:39:64:c5:68:d7:ae:bd:
5d:43:d3:1f:be:ee:a8:54:10:8c:92:c5:6b:c1:0e:
a9:fb:5e:98:c2:75:05:a2:56:65:23:da:6a:ea:a9:
34:17:0f:4a:0a:33:29:58:c9:77:f0:59:dd:e5:57:
cc:da:8a:59:19:be:e0:89:b0:fa:de:39:a3:8c:a2:
97:5c:fd:d7:bc:1b:c9:5e:c6:5d:b4:b3:fe:c0:06:
40:29:4b:3b:b9:00:33:3b:fd:7b:6b:45:f9:6b:8a:
3b:28:6c:7f:c9:11:a8:30:f1:c0:13:9a:29:7b:92:
16:9b:e0:d6:2e:91:7b:9a:b4:84:a5:22:07:fb:2f:
0c:92:04:0d:eb:59:13:0a:ac:d2:6c:d3:66:8b:a8:
1d:59:42:f5:77:4c:5f:44:ee:b3:2e:ae:ee:bc:40:
c3:bb:c2:81:5b:2a:0b:0b:5a:36:e0:23:ae:52:c4:
89:fb:a9:9a:c1:fd:98:18:2a:55:2e:3b:19:80:08:
f1:e8:c9:13:b7:b7:9e:81:e5:3a:57:e7:17:9d:9a:
af:33:b2:63:f0:05:62:c4:5a:30:c6:60:a2:fd:b4:
65:59:3e:b8:da:54:51:15:06:af:2e:71:be:c4:6e:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:5B:66:09:53:8E:5A:73:3C:D0:C2:AF:A9:B8:FE:DA:F5:F4:F8
X509v3 Authority Key Identifier:
keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:cf:c0:3a:db:a2:20:31:65:7a:aa:b1:3e:84:dc:a5:aa:d3:
e7:d8:0c:a3:11:f4:1b:97:68:99:75:d0:f0:64:7d:98:30:aa:
ab:82:5f:15:c4:e4:01:aa:e5:f7:05:aa:ee:a0:eb:c0:48:99:
b2:44:00:b2:97:7d:34:f1:f4:3a:37:6f:b6:ba:8a:2d:4c:50:
eb:b5:bc:09:3e:a7:98:e1:bb:e0:7b:dd:40:0d:ec:98:d3:40:
a6:97:1f:14:24:36:5e:20:12:f9:bc:7a:12:c8:c8:ed:2e:34:
d8:fb:31:bb:04:d1:02:52:aa:ef:ad:2d:1e:d0:80:0e:2c:ac:
92:51:07:ea:46:60:cd:d1:dc:03:56:93:de:76:a2:5d:4e:4d:
6b:96:31:ca:f8:e5:09:54:15:19:a4:6b:46:8d:2d:b7:fa:a1:
2e:4e:6a:fe:cf:2c:2f:90:9e:0a:25:4c:82:90:ef:a7:87:81:
f6:b6:ca:10:61:0f:2a:8b:83:ed:66:ec:c3:b4:ef:52:17:8a:
4f:27:e7:dd:2c:1e:cd:4d:be:0d:4d:69:43:11:51:5f:8b:91:
a1:9c:3a:53:59:4d:e9:09:16:cc:4a:89:f2:c0:9b:e2:35:a4:
5d:20:09:33:d1:19:6c:8e:4d:57:c0:f4:62:c5:37:60:09:7d:
09:85:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:45 2026 by rpki-client