
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier: TNfm5fxM8LQ1t14KQwzITG69z1+3S6QTRKGJAnUN8+s=
Subject key identifier: 97:40:62:81:CD:55:0F:6B:E1:2E:B0:F0:A2:EE:94:E3:C0:7E:A0:EA
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number: 02BF
Signing time: Tue 21 Jul 2026 02:23:44 +0000
Manifest this update: Tue 21 Jul 2026 02:23:44 +0000
Manifest next update: Tue 28 Jul 2026 02:23:44 +0000
Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: hv6GpqknQml1EA3yWDU3IfmqPcvpZlxIjnNZz3eAZOI=)
2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: 18O7Lp0T09zqzj1uz2UvboEJEAG8f//RjAML5YNM31g=)
3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Jul 21 02:23:44 2026 GMT
Not After : Jul 28 02:23:44 2026 GMT
Subject: CN=6a5ed830-2fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:28:55:0b:7e:1d:8d:c4:ad:87:6e:80:5b:
52:00:b9:01:3d:ff:eb:b4:76:e3:80:7c:d2:6e:59:
fa:09:97:6f:bb:6d:da:c6:03:29:c8:25:11:d0:87:
47:7d:25:28:a8:e5:65:60:f6:66:bb:54:02:ce:92:
15:74:78:60:58:0e:4d:51:af:0a:12:b1:5d:1e:fe:
bf:0a:5e:65:57:74:0e:f8:c3:80:8d:9a:b7:e3:0c:
20:9b:ba:d0:db:16:2b:82:41:43:cb:0e:b1:79:24:
fa:e1:96:6d:d6:7a:27:c7:76:b3:ca:9e:c5:67:35:
f0:50:02:05:56:c9:b4:b3:05:dc:fc:ed:5d:2e:73:
e7:a6:b9:c6:95:b1:7d:40:09:ce:24:13:d1:f9:84:
ed:82:ba:6a:ac:ee:95:12:83:c0:bb:0e:6b:e1:84:
ff:c0:08:40:04:38:68:3a:71:7c:3e:eb:a8:f2:dc:
03:01:d4:57:4c:21:ec:d1:5f:79:9b:3e:10:83:13:
34:8b:8f:9f:1f:15:de:08:de:1c:44:c2:fb:6f:2f:
a7:1d:a0:9f:ff:c0:6e:50:a7:42:94:37:de:9f:68:
47:ae:7f:94:13:b2:49:11:59:46:ef:4a:8b:07:3b:
f7:12:dc:3a:ae:74:7f:f5:f4:12:b4:7b:b5:fd:27:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:62:81:CD:55:0F:6B:E1:2E:B0:F0:A2:EE:94:E3:C0:7E:A0:EA
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:0d:95:f3:db:03:a6:f4:b5:f2:74:d9:84:58:27:af:05:be:
3a:85:ba:fc:b6:0a:e9:68:48:5c:6d:d6:9c:28:18:ab:55:b3:
b3:a5:0c:3f:59:e7:a1:b2:2e:79:66:f2:81:3d:18:ad:85:5e:
bf:b3:1e:ab:59:73:51:27:43:90:d8:c5:c8:fa:8b:52:f1:1f:
45:21:c4:6d:b5:61:89:0a:27:35:5f:9a:85:d6:86:03:7e:7c:
78:6d:b8:ea:00:ad:39:6f:d2:b1:a9:94:07:6e:25:0a:b0:5c:
79:b5:b0:91:37:cd:12:15:77:40:53:7c:63:20:61:66:44:72:
fc:6d:04:df:9a:31:54:81:40:e3:b3:b6:f2:0e:20:32:3d:9c:
66:4f:97:4c:90:b2:20:ed:e6:70:19:9c:02:f5:02:65:0b:75:
87:d3:66:ce:f7:31:b2:60:7b:93:66:1a:57:6f:2c:ff:30:6e:
18:7a:ad:98:3d:9e:1d:01:ca:0d:9c:b1:92:a3:e3:71:3e:d4:
d3:06:38:4b:2e:dd:ee:68:af:f6:c2:cd:4c:f5:2e:22:b3:53:
ef:82:94:d5:4e:ca:7e:ce:9b:a7:95:83:00:2b:81:7b:e5:a8:
a2:ab:a5:b5:06:bd:17:8f:8d:8d:a8:d6:34:49:61:6e:a0:4d:
9d:31:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:37 2026 by rpki-client