
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: zu4en3mMcDggYIVgzJiImGWZfh75JELnEfh530/rE4Q=
Subject key identifier: 68:56:E4:36:EE:B2:05:0C:11:F7:25:1B:55:6F:03:55:F3:65:B3:8B
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 0205
Signing time: Fri 17 Jul 2026 04:03:13 +0000
Manifest this update: Fri 17 Jul 2026 04:03:13 +0000
Manifest next update: Fri 24 Jul 2026 04:03:13 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: 7gJcByx/FACOKS4piCCq6+lTGd8J+muNRj2L6sJk8V4=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Jul 17 04:03:13 2026 GMT
Not After : Jul 24 04:03:13 2026 GMT
Subject: CN=6a59a981-b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:8b:2e:97:59:c8:47:c2:07:89:5d:2c:de:
67:32:93:cd:17:11:d1:ae:38:88:53:6f:f3:b8:cc:
6f:9d:4b:38:1f:27:80:55:8d:e7:df:60:d2:91:7b:
0b:a6:39:7b:00:0b:30:f6:0c:36:a8:6e:8a:8b:63:
d0:85:e3:c8:28:c1:da:13:b6:6c:6f:46:43:dc:7c:
99:93:c9:f5:26:5a:44:43:76:96:f0:d2:48:bc:0b:
5c:16:de:dd:2e:01:94:4a:7d:82:07:b3:d1:0f:3e:
9a:d8:b4:6d:5a:ce:29:d0:b3:16:d3:bf:f2:26:20:
b5:5a:00:20:aa:ed:44:b4:d0:4b:c1:37:f9:7a:af:
a3:00:fb:01:c3:4f:d9:27:4e:15:18:1a:33:b5:94:
21:6b:66:19:7f:e2:cd:1a:8a:27:f9:33:08:3c:96:
36:d0:f8:b5:5c:a9:bc:08:fb:37:1c:a4:23:c0:49:
94:e9:8f:2b:a3:60:76:99:ee:62:f9:cf:33:4c:cf:
ea:63:83:ce:65:b9:7d:40:2b:e4:c4:58:1e:4c:b5:
7f:c6:b9:ea:d6:da:63:f2:79:fe:d8:0b:4b:06:e6:
ed:9c:cb:d8:d0:26:d7:b8:c9:b7:69:ed:f5:15:f2:
43:5a:00:16:26:ad:43:9d:c5:29:bc:c1:5d:16:59:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:E4:36:EE:B2:05:0C:11:F7:25:1B:55:6F:03:55:F3:65:B3:8B
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:39:fb:50:56:ce:df:65:41:f3:72:db:15:03:05:95:99:51:
7c:85:9b:ed:53:e4:14:80:c6:f6:b0:fa:06:74:39:f4:5f:1a:
d4:23:54:63:23:b6:f6:59:de:63:f0:2e:87:c0:5c:98:00:35:
81:b2:a0:d4:d8:c3:ee:40:7e:e2:63:d5:5f:7b:df:52:bb:a2:
87:ad:12:ad:98:96:90:c0:88:8b:cf:27:f1:6b:56:8d:ed:7f:
68:73:2d:ef:31:51:12:36:1e:b7:eb:0f:d1:54:5e:94:56:94:
28:1e:64:09:c5:3b:6c:e6:40:15:a1:d1:ad:7c:e4:02:16:33:
84:2c:ec:b3:31:9b:17:66:b9:d9:17:90:26:ee:2d:58:5d:6e:
27:2f:56:22:fe:b5:43:d9:46:0f:4e:84:fb:21:1b:77:d2:c7:
68:c8:62:95:a1:01:d8:5a:5a:f9:5e:7b:37:3c:aa:47:0c:42:
14:3e:59:1e:51:88:73:be:e2:f7:8d:94:a9:fd:42:75:e3:e9:
b4:2e:71:07:7b:f2:b0:c3:c1:73:62:4b:8d:2c:49:c4:7a:38:
d2:fe:b5:9a:de:2a:1b:76:44:ba:6e:72:c1:f8:ec:5a:40:77:
a8:d8:86:d3:44:53:3c:77:c4:68:82:bf:12:b9:a3:7e:79:f6:
34:d3:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:04 2026 by rpki-client