
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: abwWWKEruNUoKKHVWHJmO818iD8WlcQAfVwtA+j5b/U=
Subject key identifier: 49:D6:72:6D:8E:BE:4F:87:71:97:58:2D:4E:C2:A1:67:F3:2C:3D:DE
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 011C
Signing time: Mon 27 Jul 2026 07:51:37 +0000
Manifest this update: Mon 27 Jul 2026 07:51:36 +0000
Manifest next update: Mon 03 Aug 2026 07:51:36 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: xyG57bxdmNXIVo22GaLqFdWippS6miqxQ+obhVVkBSY=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: y/d4ENW45K+wLuEcJR7g6U0WWFs54zradi3gAEB43Fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Jul 27 07:51:36 2026 GMT
Not After : Aug 3 07:51:36 2026 GMT
Subject: CN=6a670e09-245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:65:84:f8:8f:0a:3e:73:19:d7:5e:86:38:
6e:e7:45:62:86:a5:2e:b0:ac:2f:47:0d:8f:72:b8:
27:25:69:45:1d:44:42:25:98:6e:2b:fe:a0:f7:8e:
95:e4:05:ff:7a:a6:d2:8a:33:3a:56:a3:5e:4a:c0:
d2:22:5a:40:2e:ef:43:b0:c0:2c:4d:e2:45:c4:ce:
a5:cb:69:54:43:52:75:1a:a9:13:6f:01:29:68:fa:
61:53:76:32:1c:55:b2:a8:51:5c:f8:8f:15:63:f7:
2b:e4:2b:74:b6:1b:4b:dc:b2:dd:9a:d3:e0:37:8a:
54:14:94:3b:23:12:e1:25:da:07:16:c5:14:9d:7e:
84:f6:4f:d4:9c:d1:47:61:f6:8b:8a:97:c9:dc:d1:
3f:ab:71:30:86:84:d4:60:32:d6:43:d6:b6:18:65:
a2:7e:b8:cc:c1:1a:5e:62:7e:d6:7d:3e:a2:0e:0e:
51:d7:3e:e6:fc:6f:46:ea:b2:2d:11:4c:dc:e5:80:
f7:d1:09:64:78:5c:3a:fe:8e:a4:be:e3:1f:17:c6:
73:4b:60:69:68:a2:46:45:12:fd:01:ee:dd:70:45:
ca:86:0b:0c:0a:a9:03:2d:5d:f8:b3:55:f4:3d:ad:
b5:b4:4a:63:88:97:48:91:43:c3:2b:d9:8b:0a:c9:
c0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:72:6D:8E:BE:4F:87:71:97:58:2D:4E:C2:A1:67:F3:2C:3D:DE
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:44:62:d8:be:5d:0c:2e:4c:f7:f2:ee:c9:79:a1:d2:34:
9d:a6:f9:02:32:cd:c2:f6:49:4c:48:c1:7f:06:35:15:ad:1c:
75:ea:00:00:71:cc:cf:4e:f3:76:f6:4f:5d:c9:66:93:af:91:
14:8a:66:a5:47:b3:c1:ca:7b:4c:b4:92:80:b2:7f:29:db:0e:
4d:b2:75:2d:df:7c:97:f6:a2:65:93:40:a6:66:eb:ed:80:7f:
14:f5:eb:13:73:fd:7e:f9:06:90:eb:2d:9a:e4:3b:2a:0f:0c:
6f:0a:17:8c:40:f9:76:34:b3:3e:5a:0c:7f:fa:0b:77:c5:0a:
31:05:3c:f8:b4:d3:c1:a1:f9:81:cf:dc:99:9c:4f:04:32:aa:
52:38:a7:fd:07:63:3e:d3:d8:86:81:48:0a:67:09:b5:e5:a8:
82:62:8e:6e:8b:ba:25:05:12:b0:bc:b3:32:bb:99:cd:4b:d5:
ca:4b:e1:75:3d:76:1d:b2:3c:84:e2:1d:f3:51:e6:24:29:75:
9b:61:1d:b5:a5:b5:46:f2:7a:1e:8e:60:be:cb:d0:e8:12:4d:
65:11:da:17:7d:7f:51:66:56:68:3e:d7:b6:87:ab:c8:f6:da:
71:67:da:54:d8:10:e4:6e:7f:1f:ee:0f:fd:03:2b:e1:fa:c7:
98:07:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:29 2026 by rpki-client