
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier: kM3xii06xwcXKgsSvlCvqPQ1CtF/X5E4o4/h1pz9mvI=
Subject key identifier: 4C:37:70:90:64:56:A9:4E:5C:04:BD:29:6A:4F:7B:C7:24:72:67:B8
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial: 13A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number: 139C
Signing time: Tue 18 Aug 2026 17:07:44 +0000
Manifest this update: Tue 18 Aug 2026 17:07:44 +0000
Manifest next update: Tue 25 Aug 2026 17:07:44 +0000
Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: IB5EBjLOMUgcoFFW8bvwFFMlp4gdsCU/KN41iPTHS+s=)
2: E2B16FF23C8911F1A9897A359C833773.roa (hash: i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5025 (0x13a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Validity
Not Before: Aug 18 17:07:44 2026 GMT
Not After : Aug 25 17:07:44 2026 GMT
Subject: CN=6a849160-bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:2c:e1:56:c5:67:be:8d:85:f7:42:67:6b:
f2:7d:b1:21:ac:02:59:ae:6e:1d:43:42:ff:4c:e5:
16:3b:39:c3:e2:d8:56:99:b1:7c:d4:b6:6f:a7:52:
03:6c:ad:24:5f:20:77:81:fe:50:11:ba:64:01:b0:
6b:81:fd:9c:9d:59:40:57:d1:cb:82:e4:90:cc:bc:
7f:64:fc:e1:f1:d3:d4:de:18:a3:65:45:1c:a2:e6:
f9:d6:17:a2:17:c1:4e:dd:81:f7:b8:b6:5e:2c:73:
e6:1c:3e:8c:73:d8:6b:56:fe:e9:5c:d9:da:fa:95:
32:17:80:c8:a4:27:d3:fd:aa:b1:6b:cd:34:5c:e3:
f7:d8:30:dc:39:74:dd:07:5f:87:bf:81:48:bd:fd:
09:a5:ce:1c:9b:8c:18:9f:6e:8d:bd:5b:b3:f7:54:
73:ea:54:e3:0d:23:d9:56:5a:64:8e:48:57:54:e1:
51:fa:50:42:7f:40:c1:ba:42:27:17:98:78:ca:39:
da:47:9c:43:82:9d:1f:37:4e:78:24:01:f6:9f:5a:
44:9e:82:ac:73:b0:82:7e:6e:eb:70:78:75:50:05:
79:5a:08:ab:74:2c:92:05:a9:f9:a5:04:2c:90:31:
74:85:fa:b6:08:51:b8:80:a7:a3:51:cb:41:43:05:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:70:90:64:56:A9:4E:5C:04:BD:29:6A:4F:7B:C7:24:72:67:B8
X509v3 Authority Key Identifier:
keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c8:09:ac:8f:6b:4d:75:e2:fe:ae:ee:e6:40:d8:fd:b9:10:
96:2a:f8:36:60:a4:f3:b6:dd:eb:43:9c:80:79:62:7d:4b:ed:
93:fe:e9:54:ab:4d:8c:b0:0b:5f:c5:e1:96:89:b6:fd:7d:5c:
ba:34:45:a5:ec:61:ce:92:53:93:58:ed:f2:13:63:55:b5:79:
43:5e:dd:4e:11:1d:56:59:4d:8b:65:1b:82:be:64:18:93:c3:
35:75:cd:cc:33:7e:6b:7d:98:51:e1:c3:db:b8:a1:4e:d7:03:
63:23:a7:79:ca:d6:77:77:45:37:26:71:b6:29:65:2a:2d:60:
46:dc:a2:74:44:a7:48:42:a5:7f:35:78:6c:0a:d1:8c:28:2e:
6b:01:46:85:0f:16:ef:fd:b1:9e:09:17:7c:e0:5a:f1:2b:63:
4e:8a:97:9c:00:e5:96:6a:59:6a:5c:06:68:b2:7d:52:b9:6a:
e0:5d:52:79:1b:41:fc:a8:c8:28:5a:d9:e1:82:b8:7b:db:32:
60:67:d2:93:36:c7:9e:f4:a7:ed:02:b5:45:f9:bc:cc:de:8c:
46:71:a1:ac:84:a4:66:53:57:e6:1b:5f:f1:19:12:a8:98:4f:
24:f2:3a:f8:5f:de:67:36:94:7e:6e:d2:33:c3:d4:ee:09:1e:
db:bb:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:18 2026 by rpki-client