
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: Qhp3zqAJ4SAGSXDjUWCTcyUEkHLtaR7meVGD4L9mPws=
Subject key identifier: 85:07:A4:9B:87:30:8D:4D:66:E3:06:3B:99:9A:D3:50:C0:EF:B2:61
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 0542
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 053B
Signing time: Tue 18 Aug 2026 23:50:46 +0000
Manifest this update: Tue 18 Aug 2026 23:50:46 +0000
Manifest next update: Tue 25 Aug 2026 23:50:46 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: K4PpGUniJEYWESBvfJbPR5n7BRsFKI/weSvDd3ftKcM=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: Aug 18 23:50:46 2026 GMT
Not After : Aug 25 23:50:46 2026 GMT
Subject: CN=6a84efd6-e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:e4:bd:2b:4d:57:f2:50:05:6c:c8:30:8f:
82:24:9e:4d:bf:84:5a:ea:44:2c:d9:09:68:cf:2a:
a8:b5:ec:14:33:84:d4:45:df:41:42:e8:b1:c6:9d:
ba:b1:42:b8:c9:d6:7a:4d:8d:74:c2:ea:51:08:32:
27:92:a9:5c:f0:86:34:fa:b3:ee:ad:e3:ab:82:33:
a1:7e:42:82:71:e4:40:3a:76:54:35:c3:c7:5f:ff:
e1:1c:bb:10:4e:38:db:72:d8:7e:75:2b:93:50:cc:
fd:c0:58:08:9e:c7:0d:e6:e2:0f:6e:0b:2c:93:04:
25:74:6e:4f:b7:c9:d8:00:f6:49:c4:58:06:2a:50:
af:86:36:a8:d2:e8:89:bc:44:b0:ee:b1:69:b7:46:
d8:3b:e3:d2:38:48:3b:6f:ae:00:98:2f:a7:97:5c:
c0:52:53:aa:76:a7:71:3c:6c:44:00:7a:33:2a:31:
45:17:6d:56:6d:2d:7f:04:85:c4:72:3d:21:6d:3c:
b4:d5:7a:e8:5e:68:97:1a:68:5d:ce:13:73:81:ff:
88:6d:8a:1e:27:5f:a9:d0:67:42:22:f3:70:7d:0a:
0e:d6:d3:7e:b1:99:8e:57:99:9c:e5:61:87:dd:2a:
58:6b:11:76:8c:44:ed:a3:d5:ef:45:fd:24:4a:dc:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:A4:9B:87:30:8D:4D:66:E3:06:3B:99:9A:D3:50:C0:EF:B2:61
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:1b:af:86:60:c6:85:0e:66:0e:a8:f8:7b:83:b7:57:4b:e3:
5c:4d:d0:66:7a:a6:7a:e6:53:b3:4c:88:c0:d7:5f:f3:89:d7:
59:f1:fa:d3:ef:b4:c0:1c:93:bf:51:a8:b2:0b:5e:9f:b2:6e:
19:48:17:84:b6:65:91:87:32:7e:e1:1c:e5:63:bd:89:42:0a:
c5:9e:b4:bb:2b:55:90:d8:c7:ef:42:81:b2:f9:c7:d3:1f:00:
41:af:9f:2a:de:79:95:88:79:49:2c:74:1e:37:f5:33:e4:44:
50:a8:4d:f8:7f:ca:93:1b:b1:7f:d5:1e:06:47:8a:e6:18:58:
4c:7a:53:9f:ae:87:8d:2f:39:04:44:f5:03:27:8a:35:39:a3:
e8:68:a6:81:ba:7b:27:9c:c9:a1:bf:eb:e5:36:3e:57:df:9e:
f8:84:99:90:62:ba:5a:94:7d:ef:94:c1:8a:8a:66:c6:9e:82:
88:ef:28:eb:c8:be:f7:cf:3f:f7:d4:ca:22:d3:5f:9f:e9:ab:
88:fa:9b:d5:91:b5:54:be:54:26:b3:7e:a5:12:d7:1b:9c:04:
1e:15:61:a0:54:3c:a6:90:ba:4e:22:0f:f1:27:a3:d2:4c:ed:
8b:7c:76:10:b6:eb:a9:16:61:29:a2:03:af:14:c5:f4:d5:ee:
49:49:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:14 2026 by rpki-client