
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier: KKFapin6lHFXYqFaj8FFJH/Xo9HTg0LCy8wfJXOw72Q=
Subject key identifier: F9:A6:AE:AA:18:D8:EB:E8:73:06:BC:BA:80:BF:CE:BC:9B:BC:86:F6
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 02D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number: 0294
Signing time: Wed 19 Aug 2026 02:38:25 +0000
Manifest this update: Wed 19 Aug 2026 02:38:25 +0000
Manifest next update: Wed 26 Aug 2026 02:38:25 +0000
Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: jcxw2rPqeIcQ72t2H+H1Z0RTetRHgE9EWVQgNrn+EOM=)
2: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: CcUbFuf1lNiH/+6gAJiToEGq81cMwH8NK/XgCCC726g=)
3: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: UMbEQFIpkJvqmK0HuzuHRzu+g80Gef2sVvm2DbI4gV0=)
4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: CZCiFwljilvMJvt94AUk+cDZYd5AEqR+L8VAnnEflzY=)
5: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: 20nujIzl+CA8w05nEFFC5K5q9fFkxYmC8tuXnrC1GWI=)
6: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: tow/qmOQ/9yiGU7J1jkBreLst3yXf8HbYJ89yXWzR5w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Aug 19 02:38:25 2026 GMT
Not After : Aug 26 02:38:25 2026 GMT
Subject: CN=6a851721-79a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:10:18:9d:65:74:fe:03:6a:67:36:8f:4d:
07:18:30:56:e8:85:06:0e:1d:db:8b:c1:dc:6f:51:
96:b6:6c:26:ac:70:46:a3:5d:0b:4c:eb:64:7e:51:
fe:dd:7e:1b:b7:f9:bb:ac:7c:7a:18:4a:88:97:f1:
ce:03:74:27:9b:23:97:d6:f2:ef:94:1e:4e:46:65:
29:84:c5:26:e8:16:8a:ec:93:46:dc:70:de:a9:53:
15:86:6f:17:16:d8:96:a1:2f:b9:85:ab:30:d9:c3:
0a:fe:44:4a:57:c4:dc:e5:a0:a9:b0:c5:2b:34:a1:
8b:f4:b0:c9:18:ad:7b:bd:f1:b5:6d:81:2f:e4:51:
19:91:8f:f8:ab:2d:aa:cc:38:10:6e:e8:01:74:2f:
0a:cf:3f:c0:87:97:3f:10:3e:1e:bd:76:44:b2:e0:
cf:eb:b5:d1:cd:1d:54:7b:02:41:69:66:6d:85:c2:
7a:03:f7:9c:b2:94:55:df:c7:ba:d1:f6:f4:73:fb:
9a:2e:06:cf:58:a3:9f:05:40:15:02:84:f5:30:0f:
39:63:a0:13:c1:2a:f1:51:6e:b9:06:73:2e:5d:dc:
0b:e3:16:66:0d:b0:97:bb:9c:04:e8:c5:1a:f6:f8:
54:1c:d6:61:1c:ca:54:a0:89:fd:7e:ec:7a:de:5f:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:AE:AA:18:D8:EB:E8:73:06:BC:BA:80:BF:CE:BC:9B:BC:86:F6
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:49:fa:a4:4f:4e:df:01:a3:1c:cb:1f:7d:6f:51:da:3f:
e6:51:0a:5d:b7:0c:f8:6e:e8:f0:36:33:d9:f6:21:b7:db:ad:
d2:34:70:c8:d9:0e:7f:be:b6:67:aa:38:49:e5:14:f9:ea:73:
7d:48:2c:af:59:c3:1b:01:34:e8:2d:a3:10:1f:8a:83:4b:5e:
f7:e5:46:02:81:b3:b5:e4:47:7b:d3:dd:4a:cc:9e:70:3f:77:
31:52:f0:14:26:31:ed:33:d4:e7:cc:96:0d:6c:29:2e:00:55:
7a:83:21:c1:c0:ac:af:c6:6e:2e:12:09:b6:a7:a1:d2:6f:18:
f7:5c:57:05:d5:db:c5:d7:ba:0b:13:35:c9:d4:21:30:71:b1:
fa:56:20:ff:fd:87:49:1d:2d:45:4e:21:94:53:9d:98:02:e3:
9c:63:d9:bd:b7:d2:5d:c2:27:d4:3d:f3:ae:9f:12:63:11:3a:
14:37:0c:2f:8d:77:64:76:3c:63:6f:16:3f:6a:ba:d8:4c:5f:
f5:e5:9c:9c:d6:16:52:66:b6:a5:9c:7a:b8:96:7e:91:4e:79:
0c:df:2b:99:39:da:ac:54:97:88:81:9d:89:ae:b0:62:52:dd:
32:2e:59:f9:4e:1c:95:df:a2:c0:bf:24:4f:e2:26:4b:da:d1:
81:1d:21:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB
MjEzQTUzRTMwHhcNMjYwODE5MDIzODI1WhcNMjYwODI2MDIzODI1WjAYMRYwFAYD
VQQDEw02YTg1MTcyMS03OWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokUQGJ1ldP4Damc2j00HGDBW6IUGDh3bi8Hcb1GWtmwmrHBGo10LTOtkflH+
3X4bt/m7rHx6GEqIl/HOA3QnmyOX1vLvlB5ORmUphMUm6BaK7JNG3HDeqVMVhm8X
FtiWoS+5hasw2cMK/kRKV8Tc5aCpsMUrNKGL9LDJGK17vfG1bYEv5FEZkY/4qy2q
zDgQbugBdC8Kzz/Ah5c/ED4evXZEsuDP67XRzR1UewJBaWZthcJ6A/ecspRV38e6
0fb0c/uaLgbPWKOfBUAVAoT1MA85Y6ATwSrxUW65BnMuXdwL4xZmDbCXu5wE6MUa
9vhUHNZhHMpUoIn9fux63l9UFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmmrqoY
2Ovocwa8uoC/zrybvIb2MB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG
MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3
OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcPZJ+qRPTt8BoxzLH31vUdo/5lEKXbcM+G7o8DYz2fYht9ut0jRwyNkOf762
Z6o4SeUU+epzfUgsr1nDGwE06C2jEB+Kg0te9+VGAoGzteRHe9PdSsyecD93MVLw
FCYx7TPU58yWDWwpLgBVeoMhwcCsr8ZuLhIJtqeh0m8Y91xXBdXbxde6CxM1ydQh
MHGx+lYg//2HSR0tRU4hlFOdmALjnGPZvbfSXcIn1D3zrp8SYxE6FDcML413ZHY8
Y28WP2q62Exf9eWcnNYWUma2pZx6uJZ+kU55DN8rmTnarFSXiIGdia6wYlLdMi5Z
+U4cld+iwL8kT+ImS9rRgR0hhw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:03 2026 by rpki-client