
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json)
Hash identifier: CiKOksefK/OGaqKpFNfubFUKU5siq2XKlzO/KoKxQsM=
Subject key identifier: E2:2E:25:61:B6:08:45:53:61:5E:5B:7C:B8:16:82:5C:09:F3:5E:75
Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
Manifest number: 0183
Signing time: Thu 21 May 2026 04:39:07 +0000
Manifest this update: Thu 21 May 2026 04:39:06 +0000
Manifest next update: Thu 28 May 2026 04:39:06 +0000
Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: DZQgjB2J+cDsm7d+0EONgr/BeCRYeoMS21DrYzE1v7I=)
2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Validity
Not Before: May 21 04:39:06 2026 GMT
Not After : May 28 04:39:06 2026 GMT
Subject: CN=6a0e8c6a-ab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:e8:90:31:7a:49:db:50:d0:55:25:d4:0e:
a0:cb:41:97:03:d3:f7:4c:bd:a1:50:99:dd:de:cc:
14:12:0f:1a:96:36:6b:b6:bc:45:6c:42:8f:04:53:
10:ee:78:dd:33:97:a8:fc:d4:dc:f3:7b:d9:9c:48:
1d:93:66:67:0e:c3:10:6f:c4:26:5a:c3:0d:19:70:
21:20:f8:38:d6:a7:cd:4a:2f:0d:69:a0:39:ac:e0:
85:1b:b9:13:17:75:75:62:84:d4:91:0d:d0:c4:b3:
2b:0e:23:bf:2d:42:2d:31:26:9d:b1:63:ae:8b:ec:
24:96:89:50:30:c8:ee:7b:11:0b:6c:b2:9b:33:09:
fb:2d:24:c8:89:85:66:8c:28:04:25:db:b4:c6:0d:
3f:be:14:95:f3:1a:53:bc:a9:ff:32:30:9d:e6:5c:
25:86:49:c2:a0:d5:77:0f:b0:e0:bc:ba:f8:5e:aa:
a4:65:d7:81:7b:77:51:a9:97:d0:f6:eb:1e:0a:e2:
1d:1d:5a:60:e3:81:6b:e2:9e:87:89:a0:fd:30:8c:
0f:0b:df:b0:a5:d1:e3:5c:63:d2:94:11:33:2f:e1:
8c:4d:cf:91:ea:b7:3a:00:69:c2:98:5a:fb:e7:4d:
90:35:ec:26:cb:2e:4c:fb:5f:f6:dd:91:13:1d:35:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:25:61:B6:08:45:53:61:5E:5B:7C:B8:16:82:5C:09:F3:5E:75
X509v3 Authority Key Identifier:
keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:ce:77:2c:bc:3e:76:c6:9a:ca:93:2e:41:a0:49:ed:90:b1:
33:f6:fc:dc:05:82:d5:b8:57:09:d6:cb:7e:08:80:9b:64:3d:
d1:68:c0:64:81:ad:fd:0a:84:4a:2f:ae:1a:32:f1:3b:18:d3:
92:ac:12:e2:7e:f0:fd:cd:13:fa:e9:c3:c1:3d:e5:92:26:f2:
13:dd:e1:bc:b6:91:66:7f:8f:68:0f:11:38:af:eb:06:44:97:
0c:ed:28:42:ad:e1:47:94:3a:7f:31:35:db:80:ca:d9:be:c2:
f2:9b:1b:fc:79:5d:6e:6f:18:b2:e7:1c:b4:a9:eb:09:6e:69:
8f:34:54:bc:6e:10:6f:20:12:b5:77:26:b7:d6:bc:e9:42:b5:
3e:3f:c0:af:25:c4:89:77:d0:12:55:d3:b4:6d:7f:f4:84:eb:
a1:b2:ff:81:06:b5:3d:e2:00:3a:55:5b:90:9b:f0:fa:c6:8c:
5b:35:c4:09:87:48:65:6b:f0:a5:b9:7c:bc:52:7e:1b:4d:ab:
af:ac:3c:15:8a:aa:37:5a:0a:57:d0:11:ad:50:4a:53:dc:c8:
75:78:17:ea:62:91:b6:e6:31:2d:af:7f:43:05:94:01:6d:3d:
e4:67:35:37:2b:83:b7:6b:20:60:ca:d4:90:67:9b:1b:f6:0d:
bd:df:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:21 2026 by rpki-client