
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier: urMKAyF28+1P4XCxEabnvQ94aye7gxT3yHkLAdE7u00=
Subject key identifier: 56:41:F6:E3:4F:E5:62:F8:AE:7C:10:4D:01:94:39:76:93:7E:29:C3
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number: 013B
Signing time: Tue 03 Mar 2026 04:34:40 +0000
Manifest this update: Tue 03 Mar 2026 04:34:39 +0000
Manifest next update: Tue 10 Mar 2026 04:34:39 +0000
Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: C0LG/NiyidlOvygQ73+JnBkq7v1jjwcXM88cpS8VeP0=)
2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: Wxf+pnMbRXmK89KrT1cPFUY8XepsRf7BgNp3XpkASBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Validity
Not Before: Mar 3 04:34:39 2026 GMT
Not After : Mar 10 04:34:39 2026 GMT
Subject: CN=69a664e0-49ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:01:96:a2:d0:26:ad:88:ca:7b:fe:41:11:
25:75:2d:5a:d8:8f:b3:9d:a3:5b:48:3e:1d:67:5b:
af:bf:4f:0f:1b:80:c5:80:71:80:17:dc:6b:fa:ed:
58:7e:d4:bc:8a:92:4e:68:e6:cb:4c:66:8b:79:29:
72:9a:4d:1b:b9:48:6f:8d:4b:e4:df:af:fd:58:20:
ef:28:5f:ac:f2:65:8c:22:98:14:84:1c:60:24:a6:
f4:91:7d:a8:c4:9b:a8:2f:b5:dc:a8:c2:0f:ef:f3:
9d:d3:d4:b2:59:a7:e9:1d:93:7c:0e:18:6c:5e:e9:
a5:f6:83:11:68:2b:49:c4:36:b1:d3:d7:71:e5:e2:
8e:b9:09:78:2e:0a:95:e8:21:bd:57:6e:c0:fa:ea:
da:e1:92:20:94:b8:9c:e2:5a:7c:ca:d8:4d:18:08:
b5:2d:d2:0a:b8:d1:9c:02:4c:14:8f:49:6d:79:ba:
d2:ae:79:97:19:c9:8e:31:52:9e:d8:7c:ff:e8:a4:
7c:ca:b3:fa:e7:9f:6d:44:83:ff:a2:22:c4:09:26:
8e:98:90:70:2d:91:d0:7e:1a:a4:29:30:0b:11:94:
a3:1a:88:5b:98:13:9b:76:f1:a4:16:8a:5f:9a:aa:
14:d9:be:17:78:75:ca:87:b0:34:8c:24:4e:49:32:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:F6:E3:4F:E5:62:F8:AE:7C:10:4D:01:94:39:76:93:7E:29:C3
X509v3 Authority Key Identifier:
keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:ff:3f:54:5f:68:8a:c0:10:ee:26:e1:ad:00:ba:45:3f:
3f:69:f4:5d:d1:95:50:ca:f1:c1:0e:3b:62:74:d8:7a:cb:64:
3d:54:92:90:11:b2:26:77:98:0f:44:66:78:8a:49:07:60:41:
59:84:0b:8c:e5:65:b7:15:10:2a:4d:64:62:f2:7b:d3:e9:4e:
ec:7c:98:2d:3e:a4:db:b1:22:63:c4:63:fc:97:8a:cd:88:1a:
57:0c:6e:56:84:76:29:74:86:ed:cb:46:34:67:0f:af:5a:61:
dc:af:f2:38:c4:64:01:a9:e3:42:ac:a9:9b:e9:2d:32:42:71:
c0:97:88:47:2d:08:b1:4d:e2:91:7c:5d:92:ce:55:c0:e3:52:
e3:58:e5:c7:c6:19:0e:2c:42:69:a9:af:b0:39:3c:ec:84:db:
59:46:f2:4a:9d:c8:a1:84:9f:58:ce:59:1f:7f:31:37:00:90:
eb:87:73:71:cf:bb:ed:98:ef:db:44:93:bb:a0:b5:dc:38:5f:
6c:6e:9a:74:2d:a1:96:47:e7:2b:4d:be:37:c9:d9:4e:a9:81:
c6:0e:b6:16:33:4b:63:53:91:7a:51:cf:03:20:c2:04:92:0d:
92:2e:d4:87:14:5e:36:c0:40:f1:ef:17:41:29:0d:57:36:9e:
6e:cf:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client