
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier: j3hlbieO+s1cPxRg1e87FXEtCCk3MjxV1d9yaDtQfXQ=
Subject key identifier: 8A:70:6C:A8:80:73:89:B5:26:89:3B:6C:04:BC:5C:1D:2B:44:86:0E
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number: EE
Signing time: Wed 19 Aug 2026 07:02:29 +0000
Manifest this update: Wed 19 Aug 2026 07:02:28 +0000
Manifest next update: Wed 26 Aug 2026 07:02:28 +0000
Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: Xmq4PXbS7+Ri6SoKo34YWZRnK3P9IDRti0ZMSJ0drkI=)
2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: D4Fh/NIHj7fZ34zloZMh/akkaTIXbYqXpUa5vCDjjrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Validity
Not Before: Aug 19 07:02:28 2026 GMT
Not After : Aug 26 07:02:28 2026 GMT
Subject: CN=6a855505-f764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:8d:67:5a:9c:8a:0c:42:7c:0d:40:d7:32:
a6:c9:bc:09:d6:f2:2e:cc:bf:e0:1d:87:06:7a:6c:
00:c8:47:c1:0f:12:75:15:05:9a:0a:cc:1e:a0:63:
32:67:c1:73:54:03:94:52:48:88:5a:bc:c2:61:5c:
0f:bf:76:8e:f0:5b:8e:4b:53:8c:2b:9d:f2:78:e0:
1b:4b:93:68:35:28:ae:4a:d9:eb:35:18:e9:cf:3c:
7c:fb:d9:e5:29:f6:c3:d2:2f:20:7f:72:7b:09:83:
21:8f:08:65:b6:ff:00:16:25:70:8f:a1:b2:77:58:
29:87:91:45:81:84:2f:ab:8b:5c:ef:3b:2e:62:4b:
cd:c4:ab:7d:6d:d8:5d:ea:ab:ad:a0:e2:63:31:ca:
00:0b:6f:71:5f:03:f3:6b:b1:30:aa:58:82:48:d0:
2c:ec:3a:58:4d:fb:7b:1c:28:cf:bf:ad:1c:ef:21:
fb:8b:48:ce:cb:f4:36:fa:b2:57:c4:a2:27:a4:54:
46:f5:06:c8:a5:9f:d7:c5:bc:d2:1a:8d:8e:55:cf:
7a:a6:15:95:6a:1e:ff:40:53:e5:d5:ed:97:15:62:
c6:35:16:87:36:bc:9d:fa:4d:8a:7d:18:c5:2f:01:
ec:c5:81:9d:2a:0d:8d:17:78:4a:d3:8b:57:45:62:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:6C:A8:80:73:89:B5:26:89:3B:6C:04:BC:5C:1D:2B:44:86:0E
X509v3 Authority Key Identifier:
keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2e:f0:c8:2f:ff:29:58:e4:9c:ea:92:d7:6f:01:1e:27:17:
9c:36:70:3d:0b:00:c0:0d:c0:bf:1f:1d:d2:2d:67:99:23:77:
f8:99:45:7c:5d:03:8f:d6:91:0a:20:fb:19:95:6c:7d:d9:5b:
71:63:3c:96:b5:e4:dd:64:f5:55:6d:9e:71:f6:59:14:32:09:
87:ff:3f:23:b4:4f:b5:0d:8f:c3:5a:4e:54:34:db:7b:df:26:
1f:53:80:6e:ff:27:60:0c:4e:3b:94:71:e8:02:f8:10:58:40:
88:27:f2:bb:4a:ef:c4:8d:27:6d:32:1c:32:c0:ec:44:c1:cf:
fc:31:5f:5e:0f:b1:45:0d:77:ff:20:c1:30:ac:0c:f2:97:a9:
fb:2c:57:d8:d2:38:77:8e:e5:da:48:16:de:b2:29:73:4b:7a:
57:54:9a:0e:03:06:8b:8c:d3:1a:3b:3a:79:c2:72:fd:18:c9:
33:f2:fd:36:88:64:16:0e:d2:5d:4d:65:dd:07:e8:f7:7b:27:
af:dd:8a:d8:d9:ea:81:e5:da:a1:e0:65:f4:a8:06:17:3f:ef:
44:fe:ab:4b:c5:5f:44:20:d1:eb:5e:ef:40:ac:55:f9:37:28:
34:50:ef:02:81:f8:2e:e6:8d:ec:39:1c:ee:b2:5e:3d:e7:57:
e4:8b:8b:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MzMTExMTAvBgNVBAUTKEM2REUzNkE0RTQ1RTdBOTkxRkM0NDRGOENCMUI0NTVG
MTc0NjJDOEQwHhcNMjYwODE5MDcwMjI4WhcNMjYwODI2MDcwMjI4WjAYMRYwFAYD
VQQDEw02YTg1NTUwNS1mNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0MGNZ1qcigxCfA1A1zKmybwJ1vIuzL/gHYcGemwAyEfBDxJ1FQWaCsweoGMy
Z8FzVAOUUkiIWrzCYVwPv3aO8FuOS1OMK53yeOAbS5NoNSiuStnrNRjpzzx8+9nl
KfbD0i8gf3J7CYMhjwhltv8AFiVwj6Gyd1gph5FFgYQvq4tc7zsuYkvNxKt9bdhd
6qutoOJjMcoAC29xXwPza7EwqliCSNAs7DpYTft7HCjPv60c7yH7i0jOy/Q2+rJX
xKInpFRG9QbIpZ/XxbzSGo2OVc96phWVah7/QFPl1e2XFWLGNRaHNryd+k2KfRjF
LwHsxYGdKg2NF3hK04tXRWLMAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpwbKiA
c4m1Jok7bAS8XB0rRIYOMB8GA1UdIwQYMBaAFMbeNqTkXnqZH8RE+MsbRV8XRiyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzMxMS9GMUY3QUYyNjJG
QkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVwa2Z4RVQ0eXh0Rlh4ZEdM
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzMxMS9GMUY3QUYyNjJGQkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVw
a2Z4RVQ0eXh0Rlh4ZEdMSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvC7wyC//KVjknOqS128BHicXnDZwPQsAwA3Avx8d0i1nmSN3+JlFfF0Dj9aR
CiD7GZVsfdlbcWM8lrXk3WT1VW2ecfZZFDIJh/8/I7RPtQ2Pw1pOVDTbe98mH1OA
bv8nYAxOO5Rx6AL4EFhAiCfyu0rvxI0nbTIcMsDsRMHP/DFfXg+xRQ13/yDBMKwM
8pep+yxX2NI4d47l2kgW3rIpc0t6V1SaDgMGi4zTGjs6ecJy/RjJM/L9NohkFg7S
XU1l3Qfo93snr92K2NnqgeXaoeBl9KgGFz/vRP6rS8VfRCDR617vQKxV+TcoNFDv
AoH4LuaN7Dkc7rJePedX5IuLpg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:03 2026 by rpki-client