
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: Hs/jPprXsnkxeDs/mydCrD59wDCVxFBIJ8CABt/BRuY=
Subject key identifier: EE:FD:37:24:40:DC:80:1B:A0:0E:A6:5A:BD:E6:BB:08:69:FB:50:5A
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 014E
Signing time: Thu 29 Oct 2026 06:00:16 +0000
Manifest this update: Thu 29 Oct 2026 06:00:16 +0000
Manifest next update: Thu 05 Nov 2026 06:00:16 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: crTKlX/LCBC9Xrasij5oFRTEpinXDokueZZ/RH2fPdg=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: JR5JClq7chMyYoSY5HGuRuQlhxcZo3ZwY9LxeSVkDGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Oct 29 06:00:16 2026 GMT
Not After : Nov 5 06:00:16 2026 GMT
Subject: CN=6ae2e0f0-caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:2c:16:a4:bd:6f:a8:0f:9e:24:1c:36:e0:
87:96:91:a2:eb:e6:90:8c:d0:d1:e4:82:07:c2:04:
1f:57:de:37:01:3e:9f:02:ee:2d:d9:c1:7c:00:72:
05:db:e9:1b:85:0c:8c:1b:9b:54:40:36:58:e6:60:
7c:07:cb:8b:ec:89:b4:7f:cf:63:b0:c5:92:ea:3d:
d5:b0:69:1a:62:01:b0:88:35:3d:e5:45:81:b0:b3:
1e:62:37:e0:a8:c6:15:0f:21:72:05:5b:50:62:eb:
85:e8:a3:4f:69:a5:f2:78:22:e3:9d:c7:de:c9:31:
b4:7e:27:f0:c0:22:6e:65:65:17:ba:83:c1:e3:dc:
91:a9:12:ce:a1:86:83:e8:67:0b:a2:b2:c4:2f:55:
01:75:f4:65:0d:bc:c4:0b:01:d0:51:99:e1:be:e5:
da:dd:72:22:ae:8e:0c:47:69:06:44:a5:33:f1:5a:
3e:76:cd:7d:1e:72:20:40:c1:2d:f9:db:73:3d:92:
b1:16:de:33:5b:26:07:b7:37:01:11:e1:83:c4:7e:
79:db:37:1b:d6:cf:a1:38:68:c7:22:fe:e4:8c:17:
16:fc:ab:01:03:3a:69:87:b3:5f:41:08:3b:68:bb:
a0:55:1b:c3:4b:63:3e:ee:e8:6e:88:cd:99:3f:32:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:37:24:40:DC:80:1B:A0:0E:A6:5A:BD:E6:BB:08:69:FB:50:5A
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:7b:e3:53:1e:58:bf:ca:a0:45:2d:2f:32:90:58:95:2e:
e8:9b:38:b5:94:4f:d2:2b:19:83:93:71:36:26:7b:8e:87:31:
d8:0c:52:cb:a5:6b:08:1c:0e:17:86:b3:4f:1c:71:50:02:2c:
5d:be:0a:f9:99:95:cf:60:4f:29:c1:d7:b6:72:e7:a3:04:81:
2a:e3:33:b1:84:56:6a:4b:01:0e:0b:29:9d:34:bd:13:9d:ca:
0c:f3:52:47:12:e8:e8:04:48:92:72:5c:f1:e5:26:45:8b:86:
68:f0:b1:f6:46:bd:16:c2:50:10:85:fd:13:7b:d7:ed:30:5b:
ce:14:8d:3d:f6:19:97:8f:ee:72:1f:dc:28:bb:88:38:b4:ad:
61:de:74:c3:22:03:ba:d4:6c:f6:1a:f8:38:64:01:1e:b8:d3:
01:88:62:80:58:c8:4e:91:c6:15:0c:10:84:db:97:a1:69:ad:
9a:98:32:ce:e4:3f:05:01:84:4c:79:f7:45:0d:e1:ee:d8:80:
fe:c8:b7:d6:65:3b:97:e6:6c:2a:4b:27:ac:51:e0:6e:97:5c:
52:8d:24:00:80:a4:67:b6:16:6c:10:4f:b1:c8:0a:80:51:42:
54:d3:62:89:f2:9e:3e:18:f6:48:21:41:14:f3:0b:7b:fb:e9:
0d:b4:be:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY4NzAxMTAvBgNVBAUTKDVENTVGMTUwOUI2RjAzNDI0RDI5NDRGODExRjg2OTkz
ODA5OUJCQkMwHhcNMjYxMDI5MDYwMDE2WhcNMjYxMTA1MDYwMDE2WjAYMRYwFAYD
VQQDEw02YWUyZTBmMC1jYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2e0sFqS9b6gPniQcNuCHlpGi6+aQjNDR5IIHwgQfV943AT6fAu4t2cF8AHIF
2+kbhQyMG5tUQDZY5mB8B8uL7Im0f89jsMWS6j3VsGkaYgGwiDU95UWBsLMeYjfg
qMYVDyFyBVtQYuuF6KNPaaXyeCLjncfeyTG0fifwwCJuZWUXuoPB49yRqRLOoYaD
6GcLorLEL1UBdfRlDbzECwHQUZnhvuXa3XIiro4MR2kGRKUz8Vo+ds19HnIgQMEt
+dtzPZKxFt4zWyYHtzcBEeGDxH552zcb1s+hOGjHIv7kjBcW/KsBAzpph7NfQQg7
aLugVRvDS2M+7uhuiM2ZPzLx3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO79NyRA
3IAboA6mWr3muwhp+1BaMB8GA1UdIwQYMBaAFF1V8VCbbwNCTSlE+BH4aZOAmbu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Rjg3MC9DOTI0MjQ2QUQ3
RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi9YVlh4VUp0dkEwSk5LVVQ0RWZocGs0Q1p1
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Rjg3MC9DOTI0MjQ2QUQ3RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi9YVlh4VUp0dkEw
Sk5LVVQ0RWZocGs0Q1p1N3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHgJ741MeWL/KoEUtLzKQWJUu6Js4tZRP0isZg5NxNiZ7jocx2AxSy6VrCBwO
F4azTxxxUAIsXb4K+ZmVz2BPKcHXtnLnowSBKuMzsYRWaksBDgspnTS9E53KDPNS
RxLo6ARIknJc8eUmRYuGaPCx9ka9FsJQEIX9E3vX7TBbzhSNPfYZl4/uch/cKLuI
OLStYd50wyIDutRs9hr4OGQBHrjTAYhigFjITpHGFQwQhNuXoWmtmpgyzuQ/BQGE
THn3RQ3h7tiA/si31mU7l+ZsKksnrFHgbpdcUo0kAICkZ7YWbBBPscgKgFFCVNNi
ifKePhj2SCFBFPMLe/vpDbS+bg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:41:39 2026 by rpki-client