
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: esXhJRteBOMrNgokfMj58cNyEjG1Of2EglQgWea1Wlg=
Subject key identifier: F2:8B:8F:1E:31:3D:85:A3:E6:F9:85:28:D6:43:83:0A:25:27:38:80
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 07BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 07BB
Signing time: Tue 18 Aug 2026 21:44:18 +0000
Manifest this update: Tue 18 Aug 2026 21:44:17 +0000
Manifest next update: Tue 25 Aug 2026 21:44:17 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: Dae+hrcvUT24RDSngL/AxHz4SvhbHlNiOhPN/zb396Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Aug 18 21:44:17 2026 GMT
Not After : Aug 25 21:44:17 2026 GMT
Subject: CN=6a84d232-9af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:f0:7e:ca:7c:0e:ed:a2:a3:5b:a5:bb:6e:
ae:32:46:ed:f0:33:74:b3:f8:72:6a:c9:a5:bb:f3:
25:1a:20:b2:c7:99:4f:f9:50:e6:c1:a3:37:c0:23:
74:bb:1d:6e:80:52:51:b6:58:91:bd:59:87:01:9e:
b1:d1:07:8e:c8:1f:90:7e:f6:9d:0a:83:29:de:f5:
03:62:1f:8d:db:e5:60:11:4b:09:68:79:ec:59:ff:
dd:54:16:1d:07:d7:d4:b2:d6:18:89:ba:76:30:48:
d3:e4:42:6e:76:72:ea:8f:f6:f3:98:06:49:e8:f3:
6c:b8:a4:98:e5:cd:45:13:b6:2c:0d:e5:72:01:94:
77:47:a9:9d:4c:8c:a4:cf:09:1c:53:37:aa:8c:9c:
98:45:57:ff:41:18:9a:06:fc:db:e8:b4:76:21:07:
38:e8:96:a5:80:58:09:c2:18:aa:aa:fd:41:0c:9c:
ec:43:c0:35:5d:dd:dc:e5:15:8f:77:04:ae:6b:6e:
99:9d:74:e4:4f:f0:78:f7:4e:6c:cc:7a:d0:d2:e2:
39:4b:3f:1d:46:4e:38:5c:b1:07:59:2c:57:4f:a7:
cc:0f:a7:6f:c7:42:38:7a:21:3d:37:ec:57:98:89:
8e:63:1f:60:0f:70:4d:77:9d:fa:55:06:a9:be:21:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:8F:1E:31:3D:85:A3:E6:F9:85:28:D6:43:83:0A:25:27:38:80
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c7:a7:4b:f7:f0:28:c1:60:64:b5:3b:c2:5a:a7:e9:4d:a6:
ac:dd:65:f8:41:56:43:f4:88:22:b9:a9:89:33:cf:19:96:2d:
f7:9b:99:dc:cb:47:d5:32:71:ad:ba:67:6d:ab:08:2e:cc:3c:
a3:8e:ad:b3:e2:fe:cf:fb:de:72:26:e4:cb:08:d7:d7:62:f3:
d7:cc:f2:37:a6:59:bf:2a:b3:aa:46:50:48:db:a5:92:1e:12:
5f:7b:73:ac:c6:3f:cd:00:c9:e9:a2:4c:52:8d:6d:73:ce:35:
be:1f:57:ec:a0:84:44:7a:60:43:69:9e:ca:a7:61:f0:2f:23:
9f:d9:8f:3f:c1:08:cb:0e:54:51:64:b3:26:89:6d:9f:b2:11:
53:7f:23:f6:5e:ec:f5:03:b8:59:02:d9:ff:9d:8d:72:02:f6:
d6:4b:63:35:88:c8:22:02:bc:a3:3c:56:b2:3a:1a:f2:44:45:
0b:53:8c:a4:15:40:61:a6:14:62:80:bd:9f:50:f3:30:b7:5e:
61:42:ef:2a:c7:4c:d0:3a:9f:c3:8b:f9:2d:22:6d:16:0a:43:
bf:38:f0:da:d5:59:39:95:dd:14:2c:98:28:b3:a7:98:01:15:
d7:89:b6:c6:18:32:95:f1:5e:c9:e1:68:a6:d6:a0:e1:46:57:
88:99:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:10 2026 by rpki-client