
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier: TiGQwIIPfFLQ30QRv8/nCS2xhqed+yyQjxDrOYV2Exo=
Subject key identifier: E5:B1:42:C1:55:EA:D0:A6:90:A5:FA:7A:95:C2:73:A6:4B:E6:A9:38
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0F28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number: 0F01
Signing time: Mon 06 Jul 2026 17:58:17 +0000
Manifest this update: Mon 06 Jul 2026 17:58:16 +0000
Manifest next update: Mon 13 Jul 2026 17:58:16 +0000
Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: mi28MJOSerZYQO+6x97UAC0CTtLF7HZwU9UT4P2Ky0w=)
2: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
3: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
4: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 17:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3880 (0xf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: Jul 6 17:58:16 2026 GMT
Not After : Jul 13 17:58:16 2026 GMT
Subject: CN=6a4becb9-6b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:c1:06:14:87:6b:f5:c7:09:3d:35:0e:a8:
04:0c:43:9d:05:28:63:f8:4c:40:ca:79:61:6b:d9:
c3:b4:2e:4b:6e:7c:29:90:e0:11:13:d1:9a:56:2e:
37:1b:86:2e:37:ee:43:b7:ca:93:1e:2b:28:47:63:
f1:47:34:01:72:98:a7:92:06:53:1c:b7:2f:d0:73:
5a:c4:6a:ce:04:f8:79:c6:e1:15:19:a2:0b:06:4e:
67:2b:91:e3:e7:aa:93:40:53:ed:b2:9c:db:49:f0:
6d:05:f9:2d:f6:74:aa:55:a8:f0:3f:09:66:40:00:
f6:58:ea:75:03:8d:ea:aa:e1:82:04:71:5d:14:6a:
bb:b9:07:97:62:cb:f3:cc:ae:d2:94:ce:5f:8d:2e:
16:79:bd:c3:6e:35:e5:de:67:1e:b2:92:54:f6:ac:
b4:2e:d2:d6:e6:b8:3c:d5:95:fd:f0:82:87:bb:5a:
3b:85:ab:93:1d:3c:7c:27:f8:cb:5e:1b:6b:a1:60:
f7:84:82:fb:1b:d1:eb:37:11:6d:18:ef:a4:36:a9:
06:3c:c1:5f:65:ec:b4:85:cd:89:76:a6:f4:7b:46:
e8:5f:e9:f1:08:ec:ef:37:73:dd:e5:56:09:44:b6:
65:9d:30:0a:ce:a4:ed:a1:03:5d:ec:6e:6c:0e:96:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:42:C1:55:EA:D0:A6:90:A5:FA:7A:95:C2:73:A6:4B:E6:A9:38
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:55:3c:97:9a:21:39:75:4d:f3:9e:c3:ef:d8:bf:a9:f1:81:
fd:75:ec:9d:bd:71:23:6a:8a:e9:f9:c0:61:cb:c0:78:08:4d:
fa:0e:86:9e:f6:2f:8c:6a:a0:1c:cc:55:97:62:5c:4a:77:48:
4c:47:67:c7:4c:90:a9:1a:6e:dc:95:24:b1:41:8d:5a:f9:e1:
07:c2:3a:d3:57:ab:1a:a6:3b:99:70:15:46:c0:e9:87:70:f1:
c8:84:dd:31:1d:93:c8:0e:99:af:c1:d6:79:b3:be:a5:a6:e9:
77:3e:17:16:a1:e3:00:4e:10:8b:03:84:0d:20:51:2e:ff:14:
2c:e0:c9:e7:ac:81:e2:dd:ab:33:2d:88:d3:5d:b4:c8:7b:d4:
f9:0b:43:92:75:20:7a:27:4e:c7:53:22:21:97:0b:be:c1:97:
d4:3d:10:41:94:e4:e4:25:00:1f:8d:ff:21:8a:95:37:39:66:
f4:bf:d3:82:22:f5:55:99:26:7f:41:34:c3:47:2c:08:4b:ed:
ad:e0:15:2f:cd:2c:25:96:9e:dc:ea:cd:7c:aa:39:7c:27:24:
f1:13:d4:4a:3e:b3:1d:06:f0:2d:3a:d0:41:84:25:c7:a1:ff:
7a:8e:46:63:2d:c4:aa:b7:ac:83:79:d8:74:97:ad:4a:b3:3c:
c8:68:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:41:36 2026 by rpki-client