
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: CaGkv+AjIsstNNXqrhvB5HNvOV2tMforgPwjUTbkH5s=
Subject key identifier: 3D:12:E3:FC:09:EB:9A:BD:5A:01:5D:B1:AB:E1:3F:D1:69:36:7C:79
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 0105
Signing time: Thu 11 Jun 2026 08:26:15 +0000
Manifest this update: Thu 11 Jun 2026 08:26:14 +0000
Manifest next update: Thu 18 Jun 2026 08:26:14 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: i6XXltJwFIZiCB8wXcOjyW8wpJkuKy8PasC3vpyVHTw=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: y/d4ENW45K+wLuEcJR7g6U0WWFs54zradi3gAEB43Fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 08:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Jun 11 08:26:14 2026 GMT
Not After : Jun 18 08:26:14 2026 GMT
Subject: CN=6a2a7127-bd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:d7:b4:cf:d6:25:61:c3:6f:06:8e:69:ef:
02:bc:74:06:d9:7d:8e:14:08:00:3c:2e:83:7f:7b:
58:9e:1a:89:aa:00:2e:1d:4b:7f:cc:2c:92:5a:05:
98:16:23:0d:fe:ff:28:81:88:b1:81:45:ef:01:51:
b8:33:f8:81:9d:35:18:85:da:3c:f3:cf:1d:78:34:
12:1a:42:19:d0:40:73:d8:22:5d:b5:33:c6:bd:3d:
0e:da:a3:17:d8:48:ce:82:c1:21:06:1c:a7:c7:5d:
83:72:2c:c2:d3:6b:f9:ed:77:3c:6f:5b:ad:4b:96:
0a:0a:b6:1a:75:f5:18:d2:5c:90:72:1a:81:03:21:
4a:99:fa:f7:5c:54:06:de:ff:9d:7b:4d:86:26:c3:
57:84:ac:7a:a4:36:10:ac:0e:6d:85:ac:b9:ae:4b:
2f:0d:29:ef:be:a7:6f:f0:e4:fc:71:66:60:32:d3:
ed:f7:38:bd:50:b5:8f:26:5d:d9:17:03:85:f5:fa:
4d:de:5e:78:6e:13:c7:49:cd:f2:62:54:e5:8c:63:
36:74:50:79:60:83:c3:4c:4d:c6:06:b0:8a:36:e7:
22:51:d5:8e:35:c0:2e:d1:5c:2d:0b:a3:d5:63:a7:
79:6f:fb:8a:d1:05:60:8f:bf:9a:94:b7:8b:8f:a1:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:E3:FC:09:EB:9A:BD:5A:01:5D:B1:AB:E1:3F:D1:69:36:7C:79
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bc:ef:78:8a:d1:eb:31:fe:d7:91:18:b3:a0:52:c1:67:a8:
ab:bb:f8:af:5b:ba:45:56:e9:5e:d8:ec:fd:04:7d:fb:f8:09:
c5:7c:c0:5b:d0:fe:53:0b:18:51:e5:10:99:fb:d9:a4:30:5e:
8b:f0:38:61:f5:80:d8:bd:ce:de:c3:49:36:45:1e:73:ec:a5:
a6:c6:93:4c:00:6d:a2:c7:98:16:b6:15:2a:84:27:12:90:4a:
40:6e:bb:b6:1e:2b:da:ed:39:8f:8c:d6:9b:ce:7e:cc:12:da:
ad:eb:f1:eb:a0:7a:23:8c:15:b7:70:9b:a4:4e:e3:a9:3c:f1:
19:cc:27:6c:b0:55:c5:e6:19:84:88:0a:cd:5b:76:49:17:2f:
c4:82:59:f1:22:72:75:1f:30:18:62:f2:cd:02:fe:6e:2e:07:
b4:a7:c3:c2:9b:e0:40:d4:f7:a1:1e:09:b9:f9:04:4f:4d:48:
e3:df:5a:15:68:11:07:16:e6:72:0b:b2:a0:e4:65:f5:1f:91:
c7:28:ef:ea:08:37:ff:0b:29:d4:8c:06:c0:fc:19:78:3a:fa:
42:62:d8:87:c7:09:5a:ef:25:49:ca:92:12:d7:d6:d5:9b:0e:
ab:67:2a:8e:22:ab:3d:87:7e:5f:02:c0:6b:18:a0:75:e1:ea:
02:72:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:17 2026 by rpki-client