
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json)
Hash identifier: U05SCFkppXT/e5y36r/uQX4Qws+8RaPEJJC3h0FkOCo=
Subject key identifier: B3:82:1B:63:22:F2:BA:68:21:6F:23:9B:C2:F6:96:78:3B:22:0A:80
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
Manifest number: 08BE
Signing time: Mon 20 Jul 2026 20:58:14 +0000
Manifest this update: Mon 20 Jul 2026 20:58:13 +0000
Manifest next update: Mon 27 Jul 2026 20:58:13 +0000
Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: m3SaXdCPjIKGk4K2L0l4ByfSeRllx5WuJ6uomyAXMHI=)
2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Validity
Not Before: Jul 20 20:58:13 2026 GMT
Not After : Jul 27 20:58:13 2026 GMT
Subject: CN=6a5e8be6-ce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f2:47:3d:5e:63:13:70:61:3e:af:cb:b0:fa:
9a:5e:85:67:15:f0:dc:9d:d7:ef:c1:a3:59:24:82:
08:aa:e5:ac:b9:ed:5a:44:e3:d2:e4:54:ea:57:9c:
5a:28:03:6a:08:cc:d8:04:73:cb:1d:7d:2b:28:e8:
92:4c:18:07:a5:f7:f1:80:a5:9b:5c:a3:0b:6a:c9:
06:f0:90:4a:4c:78:8e:ac:3e:27:b9:33:b0:ff:68:
4e:9b:09:0c:90:b1:5b:78:13:b0:a1:37:fc:fc:3e:
a9:08:5d:8d:28:5a:8f:3b:f4:cb:f4:8c:0f:06:bc:
b6:35:cc:fb:9d:c6:d6:e3:81:86:6c:4c:09:36:c3:
03:d3:f6:e1:32:66:e1:8c:3a:76:65:08:0d:c4:af:
b1:67:96:a3:e9:64:bf:a1:9b:ff:66:e6:49:e4:60:
6b:1e:9d:02:7a:3b:02:e1:b1:d4:01:e9:72:e9:14:
f1:d6:ea:a1:7c:27:02:5e:65:d5:bb:1e:2f:4b:7a:
a5:91:f4:b5:c5:89:fc:39:b9:b5:16:8e:dd:5a:8b:
3d:60:89:47:10:04:7a:94:ea:90:80:33:8f:0b:98:
43:35:72:f3:70:97:61:a9:f4:86:d3:a3:d6:f1:e0:
36:54:85:03:2d:2a:af:fd:0f:a0:9c:9e:b4:45:64:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:1B:63:22:F2:BA:68:21:6F:23:9B:C2:F6:96:78:3B:22:0A:80
X509v3 Authority Key Identifier:
keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2a:28:42:db:6d:84:d2:3a:82:81:a3:6d:34:11:9d:65:b6:
88:f9:51:0f:8e:b1:87:aa:9a:f9:a0:e0:22:2e:a1:3e:1f:b1:
d9:c1:c4:e5:99:54:7c:da:f5:25:5e:c0:31:cc:0e:cc:39:9e:
4e:4b:5d:94:68:d7:5e:f9:32:6a:65:ae:a2:60:b4:d7:c5:85:
8e:f5:e2:34:74:08:c1:a1:e4:96:60:99:a0:e5:e5:b1:6f:37:
6b:c4:d7:fd:d1:2d:ce:7a:ca:33:d4:90:92:e1:63:a3:4b:5f:
fa:3d:55:07:78:61:ca:21:39:74:da:28:cd:1b:84:0f:9d:fc:
e7:62:2f:de:6d:cc:4c:48:6e:c0:6b:e4:89:f3:e7:77:7e:94:
54:4c:fc:f3:2d:b3:bd:25:6e:4a:26:d1:cb:dd:72:e4:90:4b:
c1:12:f3:5c:d7:af:e1:c5:3c:09:42:59:e2:54:4e:eb:7b:fe:
07:ba:40:42:eb:3b:db:97:75:9f:05:6d:95:41:45:3d:3d:bf:
3e:2f:4d:ef:d6:61:8d:db:9a:30:13:44:3e:cd:2f:b8:43:1b:
75:d5:20:48:38:a9:92:41:2a:fc:b1:da:44:c0:8c:b2:a0:cc:
f4:2d:56:71:c0:9e:f5:3e:5f:1f:de:a6:34:f3:07:ee:54:cb:
39:68:92:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1
MTM0RkY5NTAwHhcNMjYwNzIwMjA1ODEzWhcNMjYwNzI3MjA1ODEzWjAYMRYwFAYD
VQQDEw02YTVlOGJlNi1jZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9/JHPV5jE3BhPq/LsPqaXoVnFfDcndfvwaNZJIIIquWsue1aROPS5FTqV5xa
KANqCMzYBHPLHX0rKOiSTBgHpffxgKWbXKMLaskG8JBKTHiOrD4nuTOw/2hOmwkM
kLFbeBOwoTf8/D6pCF2NKFqPO/TL9IwPBry2Ncz7ncbW44GGbEwJNsMD0/bhMmbh
jDp2ZQgNxK+xZ5aj6WS/oZv/ZuZJ5GBrHp0CejsC4bHUAely6RTx1uqhfCcCXmXV
ux4vS3qlkfS1xYn8Obm1Fo7dWos9YIlHEAR6lOqQgDOPC5hDNXLzcJdhqfSG06PW
8eA2VIUDLSqv/Q+gnJ60RWQrxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOCG2Mi
8rpoIW8jm8L2lng7IgqAMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD
RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt
YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmyooQttthNI6goGjbTQRnWW2iPlRD46xh6qa+aDgIi6hPh+x2cHE5ZlUfNr1
JV7AMcwOzDmeTktdlGjXXvkyamWuomC018WFjvXiNHQIwaHklmCZoOXlsW83a8TX
/dEtznrKM9SQkuFjo0tf+j1VB3hhyiE5dNoozRuED53852Iv3m3MTEhuwGvkifPn
d36UVEz88y2zvSVuSibRy91y5JBLwRLzXNev4cU8CUJZ4lRO63v+B7pAQus725d1
nwVtlUFFPT2/Pi9N79ZhjduaMBNEPs0vuEMbddUgSDipkkEq/LHaRMCMsqDM9C1W
ccCe9T5fH96mNPMH7lTLOWiSXg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:07:12 2026 by rpki-client