
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json)
Hash identifier: k5nJ3Grdn9lG6lPg6Awwr5GPlSXcLl6uf4ncqHwO3qA=
Subject key identifier: A6:7D:18:90:7E:5F:B4:25:34:E8:BE:06:B3:DC:9D:74:08:D9:E9:A2
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
Manifest number: 05E5
Signing time: Wed 19 Aug 2026 01:20:30 +0000
Manifest this update: Wed 19 Aug 2026 01:20:29 +0000
Manifest next update: Wed 26 Aug 2026 01:20:29 +0000
Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: VdniC6z/Xx/ZkujMFmmIrJV9wrETbNyKoA2ZKMSXGUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Validity
Not Before: Aug 19 01:20:29 2026 GMT
Not After : Aug 26 01:20:29 2026 GMT
Subject: CN=6a8504dd-b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:ad:40:ff:f3:7b:d4:90:93:be:20:ee:ac:
02:95:31:78:90:7e:03:6b:ce:b1:5d:c8:9a:cc:fa:
a2:19:2f:56:bd:79:1b:4f:05:a2:30:4a:a6:35:3b:
30:27:11:ea:e5:70:d0:1f:cd:be:04:e9:4a:17:40:
9c:82:56:26:17:0e:8e:e2:03:93:38:c4:49:19:23:
ec:f2:5d:a7:e6:bb:35:99:ce:fb:a8:f7:3c:be:28:
71:7e:83:43:dd:09:ad:21:c8:1e:e8:aa:5e:67:5a:
cf:e5:15:33:f5:28:4a:a6:5e:48:fc:21:33:89:d3:
18:6b:05:f8:f2:58:02:fb:01:01:78:ed:ad:b0:6d:
82:5d:5d:7d:e5:12:aa:9c:c1:4c:85:cb:60:a2:4c:
83:39:30:ab:b9:72:32:c0:ac:4a:0f:f1:38:0d:c4:
00:c7:53:52:7b:cc:c6:dc:14:30:bc:24:c9:9d:cb:
af:10:49:75:da:95:0a:88:c0:f1:aa:b8:9a:f5:87:
84:fa:96:3c:01:54:95:71:c2:12:87:06:6c:82:fb:
f0:92:9e:a7:4d:72:17:22:d3:14:08:a8:1a:98:48:
d5:14:69:d4:a2:99:2f:5d:9b:0e:1e:3b:3a:d0:5b:
6d:c6:6a:4b:92:9c:9e:34:70:08:49:ee:d0:07:13:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:18:90:7E:5F:B4:25:34:E8:BE:06:B3:DC:9D:74:08:D9:E9:A2
X509v3 Authority Key Identifier:
keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:7c:07:31:b2:ae:c9:6a:41:8b:0c:07:d5:60:68:7a:46:1a:
88:5b:08:ab:5b:70:4f:f3:d0:33:e2:60:c3:0e:40:63:a7:cd:
a1:36:df:b3:04:fb:b3:39:e8:bc:12:b7:10:8c:c3:04:db:a2:
32:a5:2e:27:82:0a:92:b3:c5:3b:af:9a:ef:02:05:48:15:2e:
40:c3:cb:23:52:28:50:b8:e6:79:0a:6a:e3:8e:83:86:34:19:
19:e9:3a:53:ed:a4:3c:b9:64:96:85:8b:2e:26:90:76:d7:66:
e8:31:ed:06:60:b9:5b:07:54:18:60:31:58:1c:db:25:2b:c8:
4c:4e:b5:9a:3f:78:b3:9d:23:14:40:0a:2a:bb:ae:9c:36:b3:
8c:04:71:73:58:f7:04:d7:73:7e:d4:e9:4e:11:35:4a:53:62:
c6:93:d5:d8:1e:6d:ff:51:f2:1f:18:16:ae:e7:f4:d1:0f:44:
5a:2b:e7:e7:96:df:8b:52:c1:e0:05:e2:10:84:bb:70:93:6f:
90:77:ae:40:ee:ec:ac:e6:9b:dd:0d:7a:8c:07:bf:cc:a1:68:
99:71:2b:a3:78:a1:8a:e2:a1:0a:8b:fe:3d:5d:62:17:48:91:
51:2c:0e:7f:d3:98:55:5a:22:ba:00:b5:ee:b9:27:9f:5f:4f:
9a:56:26:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:50 2026 by rpki-client