
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier: QEnSxyVQRgXPJkHcP9DtIr2KXTpqT5GtVcxfRg+UTFE=
Subject key identifier: CC:C6:72:04:CD:00:E1:40:26:2F:F5:69:E7:95:C6:EB:73:76:1D:47
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial: 0D31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number: 0D25
Signing time: Tue 18 Aug 2026 18:28:15 +0000
Manifest this update: Tue 18 Aug 2026 18:28:14 +0000
Manifest next update: Tue 25 Aug 2026 18:28:14 +0000
Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: vc53LON45G3mNByPv4/WGwWdJpAYm88Bapb+heCACcI=)
2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Validity
Not Before: Aug 18 18:28:14 2026 GMT
Not After : Aug 25 18:28:14 2026 GMT
Subject: CN=6a84a43f-ba43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:b6:11:51:eb:b6:5e:a3:a8:0c:59:46:3e:
b9:e0:29:c3:aa:1c:5f:90:91:5d:9f:38:07:8d:0a:
46:ba:36:ed:13:5d:cb:db:df:54:76:d3:ba:fb:7d:
b8:92:27:67:fe:97:11:6d:bc:8d:9b:4e:00:52:ed:
24:e8:63:04:91:78:24:01:ea:56:9e:8e:60:1d:ac:
e1:8a:51:bf:06:14:68:7e:03:61:4e:da:62:a4:d2:
a5:b9:a8:f7:1d:5e:88:37:93:4c:df:12:23:7e:dd:
ce:90:da:2f:a8:2d:c8:58:9f:1a:92:52:5f:f9:22:
8b:cf:93:45:44:65:3b:e8:8a:4f:39:0b:ab:53:90:
ae:61:3d:de:d6:67:d5:72:6c:54:75:a5:98:78:77:
6a:57:4e:e3:f6:07:d5:04:11:df:9d:a9:2f:23:25:
ea:cf:6c:e5:93:23:db:2d:99:01:e2:1f:11:7f:d6:
d0:38:0e:74:eb:0b:55:48:85:34:70:63:f1:9b:db:
62:5b:39:8c:f1:c8:3a:81:13:ea:02:8a:7d:6e:62:
d1:8b:7b:c7:8b:78:b4:d1:8e:76:70:7b:40:fb:ab:
3d:1a:0c:d0:c2:2d:57:9a:30:6d:1b:be:c8:b7:1e:
24:87:c0:50:0e:59:d7:63:64:7d:d5:e5:5f:1f:46:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:72:04:CD:00:E1:40:26:2F:F5:69:E7:95:C6:EB:73:76:1D:47
X509v3 Authority Key Identifier:
keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:48:e8:90:72:6c:d8:b0:c9:4a:c9:e6:57:18:b6:72:a1:
f9:c7:b8:49:82:7b:62:40:fa:a6:5c:8b:6a:65:07:c5:d9:37:
d2:ad:c0:0c:c1:cd:db:d8:80:db:e0:35:5f:0d:4f:c1:7b:d7:
38:44:8f:72:05:7a:67:1e:dd:e9:67:91:2e:23:f2:60:5a:8e:
80:e3:72:43:07:d1:46:0b:d3:20:d0:be:ee:ca:01:bf:6e:34:
38:97:ed:17:1c:15:22:6b:2e:bf:e6:24:72:a3:ae:68:96:52:
51:e3:1e:2e:42:cd:9b:be:a0:bc:7f:12:bc:08:5b:bc:6d:b9:
a9:d6:dd:b0:af:f0:78:1d:a0:a0:7f:82:8e:e8:4b:55:a5:0c:
23:39:3c:25:d0:12:bf:9f:f3:24:78:6a:26:45:3e:85:e4:fe:
ce:46:4f:fa:9b:8d:a2:99:bb:5c:66:24:08:b8:5e:c0:df:c7:
f1:9f:35:2c:df:d6:25:25:9f:34:31:ef:f7:cc:3f:cf:f4:61:
9a:b5:03:dc:88:20:b0:9d:09:2b:c4:45:1b:d2:79:c4:05:93:
7e:a1:79:bb:dd:ef:6a:7d:19:5b:07:31:f4:fd:9f:34:79:78:
a9:e5:fe:b6:38:ec:5e:eb:20:68:e2:6a:3c:ef:85:b9:54:97:
43:80:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:59 2026 by rpki-client