
$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier: St+3rf3vNRC5VQbIj0PXgweVdyp1jxJfdm7rRMJeoGk=
Subject key identifier: FC:55:A1:92:DA:36:A3:4E:CD:B1:C4:1C:DF:3B:D3:6B:90:A7:1F:B5
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial: 035E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number: 0356
Signing time: Mon 27 Jul 2026 02:05:31 +0000
Manifest this update: Mon 27 Jul 2026 02:05:30 +0000
Manifest next update: Mon 03 Aug 2026 02:05:30 +0000
Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: TZrkOPgnIwq/OeGPcDhFURmo+jC5/lQCTr5MPyaAQiQ=)
2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: UXJt+xcfv/i8WG3b7wQH9Ws6PGkhvXG+Ll5zWVJ+tgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Validity
Not Before: Jul 27 02:05:30 2026 GMT
Not After : Aug 3 02:05:30 2026 GMT
Subject: CN=6a66bceb-46bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:bb:0e:d4:82:19:e6:f5:cb:0b:a7:b9:3c:
7d:a8:50:97:95:7a:94:d4:60:a3:62:5d:c5:c4:ba:
88:ad:5f:4e:ed:82:dd:86:4d:7f:b2:ca:cf:08:57:
29:f1:bf:86:09:6e:7e:c2:8b:9f:79:47:49:1c:6f:
59:5e:58:e2:3b:4f:50:e9:e9:44:56:8a:a2:93:61:
bd:6c:3d:d7:3f:06:41:9c:99:5f:2b:ea:c5:22:39:
e9:41:38:fc:cb:83:89:1f:f9:27:7f:9b:d1:5e:6c:
ff:44:20:8e:ae:fb:c4:ac:67:f6:05:b5:45:0b:66:
d0:de:7c:e8:ed:8a:da:b3:c5:3f:14:b7:02:21:ff:
4a:6b:55:fa:c1:c7:0b:30:03:1c:7e:9d:a0:90:96:
3f:97:e4:6c:1e:a7:11:d9:47:07:5b:16:65:c7:0d:
27:6b:2c:3e:bc:a3:ef:22:b1:12:0b:15:2d:f4:5f:
35:b8:37:d2:a0:8e:b0:d0:72:16:2c:16:87:76:4e:
ee:b1:cd:84:5b:05:37:6b:09:a1:84:b3:ba:38:d8:
66:4d:f8:e7:dc:5c:70:7d:ed:cc:3b:90:0e:a1:69:
2c:a7:40:6d:ed:fb:ac:af:2d:a5:ce:2a:da:90:8b:
ec:8e:aa:3e:ee:32:e5:40:0c:7a:ee:31:9c:d5:65:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:A1:92:DA:36:A3:4E:CD:B1:C4:1C:DF:3B:D3:6B:90:A7:1F:B5
X509v3 Authority Key Identifier:
keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4a:10:81:d4:a6:cc:74:b8:4c:ce:68:f4:1b:c9:fb:16:5a:
22:ff:33:df:57:d5:52:aa:03:45:4b:cb:bb:f0:06:95:04:fb:
5a:5f:6c:a6:86:73:c5:f3:3f:92:f1:32:26:a2:fd:5b:c1:c8:
b5:fb:12:9b:28:b5:10:f5:ed:2a:47:31:6c:23:11:82:a6:72:
f5:4d:c8:ef:d2:11:fd:a5:7d:65:2c:e8:70:f2:e0:52:02:29:
a9:70:fa:79:f5:20:ae:4b:7d:cb:c6:8e:8c:8c:30:93:35:53:
dc:88:b9:f5:a6:89:52:2a:ae:d5:e7:ec:1a:4e:1f:8a:2f:03:
37:9e:4c:39:96:66:8c:65:ab:d5:cd:99:e7:c4:e3:d8:cc:ea:
67:28:7a:fd:c3:5d:aa:0d:cf:09:1f:75:c7:41:09:ca:4b:7d:
03:99:af:0a:52:2a:1c:24:b9:cf:4e:6f:79:1c:b3:10:cd:17:
9a:ea:14:60:87:70:e2:c2:01:0a:a5:31:12:27:da:8a:ea:9e:
ee:8d:2d:38:9a:35:e7:df:0f:76:26:a5:bf:5e:7d:33:94:cb:
e2:8c:83:54:ca:73:39:de:fa:38:f4:87:b3:0a:cb:e1:e0:dd:
b3:21:e9:c3:1b:ce:a8:b8:e8:79:22:e1:44:8a:1a:ea:16:a0:
d9:02:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:03 2026 by rpki-client