
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier: TLc6TZnvM5OuaCrPhbKnhI+msHb5LSEhx5MVrYINfAI=
Subject key identifier: 30:70:71:71:9C:E4:D6:76:1E:0D:B2:12:59:24:EB:82:5B:14:31:D2
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial: 05A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number: 07DF
Signing time: Tue 18 Aug 2026 23:30:58 +0000
Manifest this update: Tue 18 Aug 2026 23:30:57 +0000
Manifest next update: Tue 25 Aug 2026 23:30:57 +0000
Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: otl4wlWVdbfYhYOmKpXHx5iSQ6XyOCC8fJOiAv5AM8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Validity
Not Before: Aug 18 23:30:57 2026 GMT
Not After : Aug 25 23:30:57 2026 GMT
Subject: CN=6a84eb31-362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:a9:a8:3d:96:96:4c:c4:02:3b:ea:35:19:
29:01:ff:f1:b0:5c:51:81:41:65:eb:f2:a0:a0:65:
a1:c9:50:4e:3d:db:be:c5:ee:49:49:57:68:4a:3d:
d0:2e:80:b9:a8:34:2f:23:2f:8d:df:e8:47:b5:d6:
d5:70:10:3d:b6:4e:25:6a:5e:5b:a9:11:c1:50:0b:
86:2b:73:21:51:43:a9:f8:a8:09:3a:05:7b:a3:6d:
d1:50:51:07:7c:3b:75:9c:ce:b6:49:86:11:24:13:
19:37:c9:46:34:2e:0d:ff:ac:a2:c1:43:a2:8b:15:
d5:d7:ec:ef:c3:1e:30:4f:e5:af:01:e3:f9:cb:ff:
5e:a3:cb:c5:75:43:3d:e3:8e:47:61:d4:81:b5:39:
8a:b8:52:00:97:d1:e0:ad:90:ad:d6:65:0c:d3:e6:
9c:2e:c2:68:c7:3f:64:dd:ac:d4:b9:a2:bd:00:49:
3b:5c:2d:5f:fa:8f:ce:42:5e:98:08:d3:34:d8:74:
31:0f:11:25:c4:e3:97:cc:fb:4b:37:82:7d:56:c2:
15:30:44:f4:5b:2a:a4:b4:4f:ad:72:04:8a:ff:02:
bf:78:db:a4:46:bf:c3:86:e2:19:94:b4:5c:89:dd:
b6:0e:78:fc:e9:74:69:fb:f0:0a:94:bd:62:ef:4d:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:71:71:9C:E4:D6:76:1E:0D:B2:12:59:24:EB:82:5B:14:31:D2
X509v3 Authority Key Identifier:
keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:6d:f7:36:72:32:f1:d9:ca:8f:67:53:bd:24:5d:b3:fa:
0e:70:80:63:20:08:17:3a:01:54:52:d4:72:f3:58:c8:13:6a:
28:d6:1d:c0:18:d2:32:fd:11:26:3d:f1:a7:01:4f:af:2e:55:
18:60:41:cc:c5:46:2b:a4:ca:13:03:19:d8:91:33:58:95:25:
ba:0a:9a:3c:4c:c6:95:9c:19:bd:c3:e7:1b:13:7f:5e:41:ef:
42:47:60:3e:33:63:61:1e:14:85:29:43:23:3e:13:2e:af:e0:
63:87:73:e7:cc:d9:4b:fd:ce:7c:39:ec:0e:6d:15:14:c3:68:
b7:af:14:c6:31:21:0f:07:27:7d:b4:f6:c1:cb:73:21:28:17:
de:9b:f2:70:39:67:49:43:f0:96:3d:c7:67:36:6b:8a:2d:7e:
f4:14:c2:68:00:6e:95:f2:7b:d7:fc:30:9b:65:69:cd:15:d1:
cb:82:c8:dc:e7:ae:5c:20:1c:a5:94:72:db:b9:1c:99:25:ed:
c4:f2:49:12:85:d2:39:77:13:84:08:c6:7e:2e:af:68:84:8a:
91:81:52:c4:24:51:ca:2b:b1:d3:cc:f5:4a:8a:43:76:77:79:
a9:f4:71:31:cf:f8:cd:8a:12:59:c4:13:90:39:e1:18:a7:65:
06:c0:a4:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF
MUIyM0JDMjcwHhcNMjYwODE4MjMzMDU3WhcNMjYwODI1MjMzMDU3WjAYMRYwFAYD
VQQDEw02YTg0ZWIzMS0zNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjEKpqD2WlkzEAjvqNRkpAf/xsFxRgUFl6/KgoGWhyVBOPdu+xe5JSVdoSj3Q
LoC5qDQvIy+N3+hHtdbVcBA9tk4lal5bqRHBUAuGK3MhUUOp+KgJOgV7o23RUFEH
fDt1nM62SYYRJBMZN8lGNC4N/6yiwUOiixXV1+zvwx4wT+WvAeP5y/9eo8vFdUM9
445HYdSBtTmKuFIAl9HgrZCt1mUM0+acLsJoxz9k3azUuaK9AEk7XC1f+o/OQl6Y
CNM02HQxDxElxOOXzPtLN4J9VsIVMET0WyqktE+tcgSK/wK/eNukRr/DhuIZlLRc
id22Dnj86XRp+/AKlL1i700GkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBwcXGc
5NZ2Hg2yElkk64JbFDHSMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2
NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMxNt9zZyMvHZyo9nU70kXbP6DnCAYyAIFzoBVFLUcvNYyBNqKNYdwBjSMv0R
Jj3xpwFPry5VGGBBzMVGK6TKEwMZ2JEzWJUlugqaPEzGlZwZvcPnGxN/XkHvQkdg
PjNjYR4UhSlDIz4TLq/gY4dz58zZS/3OfDnsDm0VFMNot68UxjEhDwcnfbT2wctz
ISgX3pvycDlnSUPwlj3HZzZrii1+9BTCaABulfJ71/wwm2VpzRXRy4LI3OeuXCAc
pZRy27kcmSXtxPJJEoXSOXcThAjGfi6vaISKkYFSxCRRyiux08z1SopDdnd5qfRx
Mc/4zYoSWcQTkDnhGKdlBsCkaA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:02 2026 by rpki-client