
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft
File: x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft (raw, json)
Hash identifier: yb7QwwuFf8f94U1Qy3OwtObGdlYXMFMBZuoBjmoGx80=
Subject key identifier: 26:E9:DF:C8:FE:0E:FB:9D:6C:0C:B1:70:CE:7D:E0:DA:A8:55:ED:4B
Authority key identifier: C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11
Certificate issuer: /CN=A917CD13/serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft
Manifest number: 0F
Signing time: Wed 19 Aug 2026 09:50:10 +0000
Manifest this update: Wed 19 Aug 2026 09:50:09 +0000
Manifest next update: Wed 26 Aug 2026 09:50:09 +0000
Files and hashes: 1: x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl (hash: XiElIXhrMf1IiaPahICRbAf1KIt2HB4Y8ZNxUQSli+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl
rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD13, serialNumber=C7E7DF9D8097F1E474E72E83C91313E19C5B5C11
Validity
Not Before: Aug 19 09:50:09 2026 GMT
Not After : Aug 26 09:50:09 2026 GMT
Subject: CN=6a857c52-8973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:8d:fc:5c:f2:e0:84:13:d9:f6:98:07:c6:
69:9b:2c:77:db:fc:67:62:2f:61:98:17:79:ef:c0:
36:e3:f7:9d:79:fe:41:61:f6:04:5c:24:e2:ae:db:
22:9a:53:4d:72:25:aa:0c:a2:91:16:e5:38:7e:29:
65:85:d2:09:09:0c:76:05:f6:f3:70:a8:b7:4d:ff:
4c:96:d8:0f:9d:fe:5f:19:7b:71:b1:b6:ae:6c:16:
43:51:9b:15:d7:3a:8a:16:98:a0:86:c5:48:d4:50:
27:82:4c:1b:ad:a5:a6:93:62:f7:30:88:d9:3c:26:
86:1c:ff:fe:9a:f0:dc:28:fa:bf:42:51:0e:98:df:
93:03:0d:9c:2a:5a:b4:e1:a1:36:34:26:0c:16:25:
69:c9:a2:03:00:78:e1:45:94:3f:5d:ff:19:70:38:
0b:30:00:c6:d4:c0:07:0b:2a:e1:d0:3a:31:92:0c:
bf:5e:24:a8:a3:03:08:47:85:44:03:84:a8:b2:70:
75:77:05:fe:82:6b:cc:4c:73:14:43:87:13:bb:e4:
2f:5a:8a:d4:97:e5:aa:ab:f1:e6:4b:80:57:6c:8b:
38:11:92:8d:7b:fd:84:fa:d2:6c:92:7c:f3:b0:a8:
b9:bf:84:9d:c2:72:ba:25:c9:86:1b:6a:b1:a6:37:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:DF:C8:FE:0E:FB:9D:6C:0C:B1:70:CE:7D:E0:DA:A8:55:ED:4B
X509v3 Authority Key Identifier:
keyid:C7:E7:DF:9D:80:97:F1:E4:74:E7:2E:83:C9:13:13:E1:9C:5B:5C:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-ffnYCX8eR05y6DyRMT4ZxbXBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD13/CDC50166897411F1861B2EE96D11F970/x-ffnYCX8eR05y6DyRMT4ZxbXBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:3f:86:a1:46:09:64:b7:53:b6:50:3a:36:6c:24:c1:e1:
9a:dc:e5:35:16:2a:4b:5f:2e:f6:66:fd:f9:0f:06:25:d5:13:
74:ec:45:16:e6:40:66:eb:37:51:69:62:32:21:42:8c:09:d2:
6e:18:81:8f:2a:db:48:ae:49:46:52:ec:0b:bf:4e:5c:ba:41:
15:12:60:a6:6b:96:ca:53:97:4c:75:2b:6f:cb:cd:ac:ec:68:
29:05:a4:09:a9:d2:6d:b4:fd:0a:a7:c6:b5:15:7b:de:1d:fb:
8e:da:9a:89:31:ba:fe:fa:9b:02:e9:81:6e:4d:b9:12:2c:d8:
7c:1a:a7:3c:0c:b7:6e:eb:4e:8a:66:46:de:3e:77:96:dc:e1:
59:7e:a0:57:e0:a0:58:28:00:41:1b:c9:c4:42:4e:c1:39:f2:
6a:c9:59:bb:81:08:81:73:cc:db:3d:30:75:e6:9b:d3:55:21:
1f:3a:f2:12:b8:d2:83:58:30:af:1a:87:26:1f:36:95:0f:69:
62:2d:e6:3d:cb:2f:34:f2:f2:6a:b4:e7:e8:74:9a:9f:41:77:
c6:ba:9c:e7:5f:fd:54:34:b2:19:87:5d:3f:d3:90:1f:0c:42:
2e:3d:3f:9a:08:bd:f3:4c:53:a7:0b:92:32:0b:8e:be:95:40:
ee:15:32:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Q0QxMzExMC8GA1UEBRMoQzdFN0RGOUQ4MDk3RjFFNDc0RTcyRTgzQzkxMzEzRTE5
QzVCNUMxMTAeFw0yNjA4MTkwOTUwMDlaFw0yNjA4MjYwOTUwMDlaMBgxFjAUBgNV
BAMTDTZhODU3YzUyLTg5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCd/I38XPLghBPZ9pgHxmmbLHfb/GdiL2GYF3nvwDbj9515/kFh9gRcJOKu2yKa
U01yJaoMopEW5Th+KWWF0gkJDHYF9vNwqLdN/0yW2A+d/l8Ze3Gxtq5sFkNRmxXX
OooWmKCGxUjUUCeCTButpaaTYvcwiNk8JoYc//6a8Nwo+r9CUQ6Y35MDDZwqWrTh
oTY0JgwWJWnJogMAeOFFlD9d/xlwOAswAMbUwAcLKuHQOjGSDL9eJKijAwhHhUQD
hKiycHV3Bf6Ca8xMcxRDhxO75C9aitSX5aqr8eZLgFdsizgRko17/YT60mySfPOw
qLm/hJ3CcrolyYYbarGmN0HjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJunfyP4O
+51sDLFwzn3g2qhV7UswHwYDVR0jBBgwFoAUx+ffnYCX8eR05y6DyRMT4ZxbXBEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDRDEzL0NEQzUwMTY2ODk3
NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVSMDV5NkR5Uk1UNFp4YlhC
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveC1mZm5ZQ1g4ZVIwNXk2RHlSTVQ0WnhiWEJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
RDEzL0NEQzUwMTY2ODk3NDExRjE4NjFCMkVFOTZEMTFGOTcwL3gtZmZuWUNYOGVS
MDV5NkR5Uk1UNFp4YlhCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBRBj+GoUYJZLdTtlA6NmwkweGa3OU1FipLXy72Zv35DwYl1RN07EUW5kBm6zdR
aWIyIUKMCdJuGIGPKttIrklGUuwLv05cukEVEmCma5bKU5dMdStvy82s7GgpBaQJ
qdJttP0Kp8a1FXveHfuO2pqJMbr++psC6YFuTbkSLNh8Gqc8DLdu606KZkbePneW
3OFZfqBX4KBYKABBG8nEQk7BOfJqyVm7gQiBc8zbPTB15pvTVSEfOvISuNKDWDCv
GocmHzaVD2liLeY9yy808vJqtOfodJqfQXfGupznX/1UNLIZh10/05AfDEIuPT+a
CL3zTFOnC5IyC46+lUDuFTKg
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:42:02 2026 by rpki-client