
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier: Dnp9ADday9XribTrjNl8DX22Ur9KzWv3FnKjQYzmQRU=
Subject key identifier: E8:6D:29:5F:BC:00:95:57:F5:49:DC:33:D1:00:5C:3D:21:AF:B8:33
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial: 0575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number: 0554
Signing time: Tue 21 Jul 2026 00:14:48 +0000
Manifest this update: Tue 21 Jul 2026 00:14:48 +0000
Manifest next update: Tue 28 Jul 2026 00:14:48 +0000
Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: +5u4QOhiia2vWN7sB4LZWq+Dn+tOLsZ7MQX2Z1zrpu0=)
2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=)
3: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=)
4: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Validity
Not Before: Jul 21 00:14:48 2026 GMT
Not After : Jul 28 00:14:48 2026 GMT
Subject: CN=6a5eb9f8-94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:3e:1e:e5:e5:c9:c8:06:c1:5f:73:33:bb:
d0:71:ae:82:c7:ca:db:5a:e4:b6:d1:39:9b:a9:b6:
2f:24:3d:3d:50:79:86:bb:10:bf:4c:78:44:40:c6:
0a:61:7c:24:08:0b:eb:63:b4:06:9a:7b:4b:38:58:
df:57:6a:19:e9:f5:d5:01:1f:03:f9:f6:36:12:40:
6d:fe:8b:7e:9b:e1:1b:89:0c:c6:e2:20:fe:47:86:
45:ce:cc:38:4a:30:85:58:92:b4:ad:7e:dd:bc:75:
67:a0:ad:4b:c6:1c:1f:39:8a:c0:8e:d9:85:af:71:
48:ce:bc:ec:33:46:6b:9a:44:f7:b1:f6:7d:f4:4a:
38:36:f5:54:8d:31:a3:c1:65:c3:04:2c:5c:af:8d:
9a:a9:3e:d1:07:e1:b0:26:ba:a6:ba:6f:76:ce:7f:
af:ec:e5:50:b7:49:2b:6f:50:41:5d:6c:72:fe:27:
c7:e3:e0:44:e0:1f:d9:e2:98:3f:30:aa:f7:08:cf:
e9:2d:8b:a7:1e:1c:a6:0e:75:b3:8a:22:62:42:14:
a3:7e:22:6e:45:7d:6e:14:26:3e:4a:7c:2d:c4:5e:
74:98:bd:6a:96:03:ad:ac:de:8d:2e:1f:af:5c:ae:
f3:79:cd:8f:b1:5a:dd:bc:87:8f:2a:89:17:41:74:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:29:5F:BC:00:95:57:F5:49:DC:33:D1:00:5C:3D:21:AF:B8:33
X509v3 Authority Key Identifier:
keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:9a:a6:56:54:48:64:83:51:87:15:c4:86:46:e9:00:a2:
65:1a:9d:e1:a5:83:83:11:56:ad:ca:ec:80:02:79:bc:32:73:
0d:19:b0:0b:4b:45:7d:f1:82:00:60:ab:8c:d9:9e:af:19:93:
50:f8:03:38:4e:69:70:d3:86:0d:57:18:a9:3e:8d:65:dc:76:
d0:17:e7:c4:26:98:fc:35:44:57:27:fc:d7:1b:5d:11:c7:0e:
b4:8b:54:92:40:7c:76:06:70:cf:28:ee:71:34:dc:67:58:b5:
0d:9f:60:1b:b4:75:17:f3:e9:7e:4b:76:87:a5:67:dd:97:21:
96:82:7b:93:7a:18:44:95:eb:b6:79:8c:c6:7a:df:a0:ea:1d:
3a:1c:79:29:77:e1:bc:4e:14:60:1f:ed:76:98:c4:30:76:af:
32:e8:aa:eb:fb:3c:31:71:d9:62:9e:16:02:ae:58:f9:1e:1a:
00:4b:89:b7:43:98:ea:16:0f:0c:4c:ea:78:3f:36:b8:e9:c2:
06:f7:2a:5e:65:f8:f1:62:d8:20:57:e8:5f:55:7d:6d:fe:4c:
01:fa:3a:33:af:43:fc:2d:36:3d:d9:f1:83:c0:e7:4e:27:da:
1a:0d:c5:5f:85:8b:10:4d:12:c0:d0:c9:6c:07:fd:85:0b:93:
7d:51:a6:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC
NzQ1NkI3MTMwHhcNMjYwNzIxMDAxNDQ4WhcNMjYwNzI4MDAxNDQ4WjAYMRYwFAYD
VQQDEw02YTVlYjlmOC05NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAleo+HuXlycgGwV9zM7vQca6Cx8rbWuS20TmbqbYvJD09UHmGuxC/THhEQMYK
YXwkCAvrY7QGmntLOFjfV2oZ6fXVAR8D+fY2EkBt/ot+m+EbiQzG4iD+R4ZFzsw4
SjCFWJK0rX7dvHVnoK1LxhwfOYrAjtmFr3FIzrzsM0ZrmkT3sfZ99Eo4NvVUjTGj
wWXDBCxcr42aqT7RB+GwJrqmum92zn+v7OVQt0krb1BBXWxy/ifH4+BE4B/Z4pg/
MKr3CM/pLYunHhymDnWziiJiQhSjfiJuRX1uFCY+SnwtxF50mL1qlgOtrN6NLh+v
XK7zec2PsVrdvIePKokXQXQETQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhtKV+8
AJVX9UncM9EAXD0hr7gzMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2
QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0
QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVIqaplZUSGSDUYcVxIZG6QCiZRqd4aWDgxFWrcrsgAJ5vDJzDRmwC0tFffGC
AGCrjNmerxmTUPgDOE5pcNOGDVcYqT6NZdx20BfnxCaY/DVEVyf81xtdEccOtItU
kkB8dgZwzyjucTTcZ1i1DZ9gG7R1F/Ppfkt2h6Vn3ZchloJ7k3oYRJXrtnmMxnrf
oOodOhx5KXfhvE4UYB/tdpjEMHavMuiq6/s8MXHZYp4WAq5Y+R4aAEuJt0OY6hYP
DEzqeD82uOnCBvcqXmX48WLYIFfoX1V9bf5MAfo6M69D/C02Pdnxg8DnTifaGg3F
X4WLEE0SwNDJbAf9hQuTfVGmxg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:06 2026 by rpki-client