
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier: Nh6caLMTtY0dekMqrXzcnyMZZR2c+40EwuzGzRblAbU=
Subject key identifier: FD:9B:57:BE:92:88:DF:59:73:CA:16:20:1F:00:EB:56:06:D6:B1:77
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0CAB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number: 0C98
Signing time: Wed 20 May 2026 18:33:03 +0000
Manifest this update: Wed 20 May 2026 18:33:03 +0000
Manifest next update: Wed 27 May 2026 18:33:03 +0000
Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: SJXXmKv7EooXga3pPQOR+Mdx/RfZ04O/7z2dUz5k2gE=)
2: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: 6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=)
3: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: jEP65BxvqOk8vKVC/3/YzXiqk8d1hNdREg1GZzlOXko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: May 20 18:33:03 2026 GMT
Not After : May 27 18:33:03 2026 GMT
Subject: CN=6a0dfe5f-f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:dd:a9:cf:bf:c2:c6:14:6b:1f:a2:9b:47:
9a:e8:f0:bb:de:1b:88:d3:14:59:bb:49:40:83:e6:
18:c7:94:c0:54:fa:76:32:18:82:40:57:69:77:fd:
ea:35:81:40:12:d9:bb:68:db:37:e8:04:ca:5e:04:
b8:f7:63:e2:d9:c5:63:92:54:1b:1c:9d:e0:b4:cc:
42:05:05:39:e1:7f:c7:de:96:87:6a:06:f4:bd:1f:
22:64:fc:6a:af:50:87:da:45:fc:4f:2a:2c:16:52:
53:72:9a:fd:da:96:de:52:96:48:28:6d:79:cb:cd:
8f:64:0b:af:48:c2:e4:58:d6:28:47:4c:37:af:7d:
4f:1c:c9:bd:c4:c1:62:20:75:f2:43:87:cd:7e:c2:
b9:5f:ff:5c:39:f1:1b:3e:7b:ee:97:9e:fd:4d:62:
50:f4:ac:23:87:72:f4:e2:7c:7d:c9:fb:7f:75:a1:
86:55:a4:82:c9:ac:a9:e6:b2:c6:b1:28:6e:52:3a:
ba:65:72:3f:6e:aa:92:b3:80:ee:6a:43:d9:6b:cc:
1a:23:36:1e:ac:4f:96:c9:2f:b2:63:1c:17:61:7a:
94:18:eb:5d:84:60:53:40:b2:a3:3e:78:63:05:a8:
50:8f:d9:ae:b2:03:fb:5b:fa:7a:7a:fe:9f:9b:2e:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:57:BE:92:88:DF:59:73:CA:16:20:1F:00:EB:56:06:D6:B1:77
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:ab:0d:4a:d1:5b:36:27:b1:86:11:ad:c1:87:e1:80:35:
c6:76:b9:3d:50:a5:88:1f:9c:c8:b2:fa:96:92:28:be:cf:ab:
3c:f2:3f:a4:c9:90:b8:f4:d3:3d:83:ec:56:c7:6a:b1:51:02:
64:11:07:19:07:45:63:d6:5b:97:5b:a4:21:d8:14:f5:b7:d6:
0f:35:c4:62:45:1a:45:44:00:97:dc:90:97:f1:bd:1a:d5:3f:
38:b3:df:2e:c0:38:cf:52:53:6a:27:56:1e:da:2e:90:c3:49:
5f:e6:22:09:b3:ca:18:4f:4b:4b:78:ad:3f:c2:3e:e0:9c:de:
43:be:ec:49:ac:ec:15:65:5a:9a:26:de:dd:63:4f:66:7d:c0:
7d:f0:2a:09:13:34:86:d8:81:93:6d:31:b1:52:a0:00:9e:52:
b9:21:71:19:35:0f:69:3f:7b:65:09:2a:62:89:e7:a1:b0:1b:
ce:c8:60:7d:63:aa:10:90:e2:af:5a:83:3b:49:12:20:2c:c0:
48:f2:33:9a:e5:60:c6:31:38:a6:df:8a:55:2e:d7:2b:6c:18:
a9:fb:c3:6f:62:e0:1d:62:08:af:10:d4:74:a1:00:03:52:42:
a1:14:26:1c:45:82:de:ef:db:22:2e:79:69:05:d4:e5:ec:47:
26:de:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:31 2026 by rpki-client