
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: 8Y0F6d2GYL8mqKmxb2yHYCVfF45HjxwSbg681x+Mz0I=
Subject key identifier: 91:A4:4E:DB:89:D6:BD:C7:A0:B7:48:ED:45:B5:27:51:0C:92:BA:4A
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 0737
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 0727
Signing time: Thu 04 Jun 2026 21:56:53 +0000
Manifest this update: Thu 04 Jun 2026 21:56:52 +0000
Manifest next update: Thu 11 Jun 2026 21:56:52 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: c0/pzOn//idOQrv5Lp+BZ1hiCcvaMLrlJEQMbE/K9J0=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Jun 4 21:56:52 2026 GMT
Not After : Jun 11 21:56:52 2026 GMT
Subject: CN=6a21f4a5-5675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:16:79:97:e3:f9:2f:1b:78:b2:cb:17:08:
cd:88:49:49:17:02:c3:6f:9d:02:ef:49:de:a4:f0:
a1:d5:51:ac:9d:a7:4c:27:9e:9b:51:cb:93:db:b1:
aa:9c:97:bf:f6:50:23:f5:c1:fc:cf:af:b3:e0:7a:
f3:32:e2:7f:57:65:fd:82:79:c2:ca:5f:81:54:68:
08:fc:b3:e5:ef:aa:17:74:44:4d:00:ab:1e:25:97:
5d:42:66:9d:f5:c3:c9:4b:d6:d9:9d:78:93:35:98:
a6:24:70:28:17:8c:36:1e:5a:9b:b0:cd:52:c7:4e:
62:98:a2:fa:6f:cb:df:ad:d6:75:06:40:fa:c2:83:
1a:14:5f:53:99:c5:8e:94:da:0b:90:f2:d7:7b:32:
f4:e3:b9:d4:06:d3:bc:14:b6:83:f4:14:75:55:3f:
65:b4:b9:80:da:87:33:22:1c:41:a4:e3:5e:ea:fa:
04:e5:e1:c4:7b:17:2c:ad:cb:d2:c9:10:d3:af:93:
1c:fc:7b:11:15:e9:cf:91:da:40:15:62:ab:e7:75:
49:cd:d0:78:c7:34:fe:b5:1e:fe:e2:99:26:2e:98:
61:54:c8:8b:70:75:13:2a:77:4c:1e:bf:c4:cb:30:
89:3f:87:33:a7:f2:d5:91:be:15:1d:f9:df:32:15:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:4E:DB:89:D6:BD:C7:A0:B7:48:ED:45:B5:27:51:0C:92:BA:4A
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:8b:af:16:03:dc:8f:c9:a1:80:96:8f:94:8b:a3:cb:75:
87:57:2b:16:5f:74:2d:13:88:b9:f0:4a:0d:86:c0:c7:79:f0:
0a:ed:38:c8:5d:fc:5e:f7:06:ea:7a:c5:bc:75:b7:c8:38:ec:
3d:0c:ab:cd:11:27:aa:6b:2e:c0:69:f0:21:18:48:04:37:6e:
02:47:d8:d1:12:a0:73:57:db:11:c4:bf:b8:4c:f6:0e:38:7b:
b6:91:e8:d5:59:ff:d6:8b:49:41:d4:4c:2a:1a:20:b4:c6:eb:
40:6c:51:33:14:f1:c2:fb:52:2a:5e:7e:31:65:51:16:64:e3:
17:04:b4:07:fb:38:4e:35:16:15:ba:cf:b5:01:ed:b7:96:90:
92:13:21:1c:98:97:b9:8a:47:10:c0:40:c7:7d:6d:19:78:bd:
b4:41:e7:fe:9a:56:53:18:04:4f:db:5e:d0:01:ff:8f:e3:0d:
28:ca:e8:4c:b8:d4:2b:66:78:62:d7:98:7d:25:34:0d:a2:a8:
e8:57:99:c7:d8:96:6d:21:2c:73:70:bd:64:44:5f:5b:45:86:
ef:7e:26:11:8b:f6:ff:c7:58:9c:e6:63:3b:85:fd:42:a7:18:
c1:5d:b6:15:df:6f:00:7e:f3:be:ec:52:6c:42:c7:7d:26:d2:
36:a2:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:58 2026 by rpki-client