
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: KPjC3xDTxarCgMYnykrttGnSjs+nnuxIm5CeACxYG4w=
Subject key identifier: DD:D0:A0:A4:F4:F0:12:D8:EF:1D:40:59:BA:54:02:9F:C8:42:18:76
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 06EF
Signing time: Wed 20 May 2026 22:12:17 +0000
Manifest this update: Wed 20 May 2026 22:12:17 +0000
Manifest next update: Wed 27 May 2026 22:12:17 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: ir6U3ZwhFVwJ099fqzvYhbbOkSXlGGC1h2gcycnyvr4=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: May 20 22:12:17 2026 GMT
Not After : May 27 22:12:17 2026 GMT
Subject: CN=6a0e31c1-9573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:f0:8f:50:5a:d3:12:76:ec:75:c0:5d:9c:
27:e8:79:c9:94:52:1c:63:4e:34:20:53:87:19:dd:
1b:bd:f0:7a:b4:32:35:19:ed:0b:3e:fc:a4:a4:b8:
36:e6:5a:43:a9:60:05:1c:ba:af:fa:a7:9d:ec:a3:
27:3f:27:84:57:d6:f3:b4:d3:9e:eb:c6:3d:78:26:
a8:f3:33:67:7a:bc:01:45:9a:dc:f7:05:48:db:08:
97:7d:a1:67:49:a4:ca:e4:67:97:33:f9:f7:7c:84:
74:58:b5:6d:42:b8:ca:24:8c:d8:3b:8c:8b:a0:8a:
65:cc:95:4a:bc:00:f9:2a:bb:9b:52:dc:2f:3a:41:
13:56:41:64:38:ba:b3:ce:bc:ca:59:ac:96:0b:75:
f8:3b:05:fc:bf:10:e1:ac:64:20:72:46:55:fe:7e:
6d:2c:92:7c:66:a3:51:4d:e3:4b:d0:c4:1a:7d:7f:
e7:f4:75:a7:47:9d:f4:0f:29:65:9a:5e:87:0e:29:
c3:d3:f9:6b:31:91:c1:54:6d:91:0e:15:af:ee:68:
4a:d4:bc:74:83:bf:af:75:91:bd:41:05:8f:63:19:
9b:c0:c8:c5:35:b8:73:5d:95:48:7c:6b:4e:cc:dc:
a3:40:87:9b:d8:be:16:60:79:08:ed:04:1e:81:37:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:A0:A4:F4:F0:12:D8:EF:1D:40:59:BA:54:02:9F:C8:42:18:76
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:c7:c5:96:96:92:61:c8:bc:67:76:6e:a9:56:a4:d2:21:
c1:4c:36:0e:45:48:c9:06:04:cb:6d:39:cf:13:2f:76:df:8c:
b0:56:12:10:8c:13:c1:86:52:b2:8c:b3:1b:7f:6f:a2:16:e0:
db:37:02:b3:8a:37:81:be:f1:7d:56:fd:f2:2b:df:db:ac:b2:
4f:55:e5:b0:c4:ba:73:29:60:6e:80:3b:4c:7b:d7:1d:47:d5:
43:dd:a8:81:92:d2:1b:a9:c9:00:2a:e8:f8:b0:ed:10:ed:59:
54:bd:d1:db:85:1d:b7:c0:49:51:48:c6:93:49:73:b3:f3:e4:
cd:ac:62:e3:ae:52:4a:e8:f4:51:7f:4f:da:4a:6c:e1:66:82:
f4:76:97:ed:ec:fe:a2:ef:e0:46:7c:b6:42:23:37:45:90:b1:
05:7e:aa:5e:5e:f2:99:ba:1b:19:9d:be:c5:17:03:50:d2:ff:
22:95:9f:fc:da:92:87:15:29:81:4e:39:0a:dc:74:f0:b1:5a:
f4:89:5d:aa:20:63:81:74:9b:e2:24:ee:85:4c:71:22:7b:c4:
e5:52:ea:0c:f5:d6:ac:32:a0:fb:e2:c8:17:1f:42:3f:e1:bc:
c5:02:7c:42:6d:4f:61:ca:2a:9e:1e:6c:b3:8c:e0:ad:45:33:
8b:db:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:06 2026 by rpki-client