
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json)
Hash identifier: lpSWN3Qtgze+ig4myXwi0DQAqvQqW5vzFL0jhpHy6SA=
Subject key identifier: 26:69:83:AC:C7:8F:21:73:9D:18:7F:D3:3A:13:B0:6D:AB:FC:4D:82
Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
Manifest number: 0189
Signing time: Sat 13 Jun 2026 04:27:31 +0000
Manifest this update: Sat 13 Jun 2026 04:27:31 +0000
Manifest next update: Sat 20 Jun 2026 04:27:31 +0000
Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: 5rQlvyWciKQYqzL4kttUNYrdIuECemmeYphUrQhVnqs=)
2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: U8i0qlU1iG7iGGOct1cXwPlwr4Q9fN1z2Du4FOYXcDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Validity
Not Before: Jun 13 04:27:31 2026 GMT
Not After : Jun 20 04:27:31 2026 GMT
Subject: CN=6a2cdc33-b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:00:03:e5:62:1a:02:ab:93:55:27:f2:03:
39:7a:4b:70:8d:06:11:b1:47:4c:c5:e4:c0:6c:06:
4c:c7:44:98:1c:ab:7b:89:d6:92:18:16:75:c5:29:
e5:ab:c5:d3:00:1d:38:1d:59:18:f9:41:7c:21:d1:
3e:ec:f5:f4:f5:f3:44:4d:fe:f8:60:f9:d6:50:51:
14:e6:5c:3b:40:85:e8:0b:d6:6a:f7:91:31:e1:db:
9d:59:fa:62:2a:67:c2:aa:61:58:57:e6:5a:68:16:
52:9d:4d:95:9a:b7:d5:1c:14:3c:55:30:ef:88:d4:
1d:bc:93:3d:2a:10:90:6b:0b:24:d4:db:4d:70:4f:
44:ea:ed:47:11:b6:bc:81:22:11:0f:45:77:30:01:
66:35:8c:94:c6:20:78:99:33:00:f7:e9:1b:36:8d:
24:95:5b:9a:13:1e:6c:00:38:fe:5e:ef:d0:fc:0e:
7f:84:73:02:e5:8c:1b:b3:47:48:fd:e8:32:33:df:
8c:f2:2c:de:51:d1:54:74:85:09:1c:0a:1c:f5:2f:
05:1b:8e:7b:8f:d5:58:ec:11:ee:cd:39:9e:de:8c:
26:ca:2f:9e:81:2a:e7:36:19:cd:80:79:37:50:89:
fa:69:a3:a0:33:dd:a5:f1:9f:e5:e0:f9:77:ba:f5:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:83:AC:C7:8F:21:73:9D:18:7F:D3:3A:13:B0:6D:AB:FC:4D:82
X509v3 Authority Key Identifier:
keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:92:5a:c2:f6:4a:d6:62:5e:be:ea:e6:a3:5f:0c:69:a8:
d9:79:65:65:43:f3:52:a9:c5:85:5a:1b:02:cd:e6:62:4d:59:
4f:be:ee:ec:98:5f:78:93:b8:6d:3c:8d:5e:a6:0d:81:07:7b:
04:75:cf:29:72:b7:b4:07:43:d6:e3:29:ec:48:59:59:7a:5e:
60:2f:b8:34:32:e2:e8:99:a3:09:09:29:7b:05:51:04:6e:e6:
08:82:88:b7:f1:83:41:20:d9:22:0b:0c:e0:a1:c5:d4:78:f6:
0c:17:5a:45:57:8c:73:7f:3c:89:73:29:d6:8a:79:b5:91:3c:
fd:9c:91:2f:e4:65:4a:a3:cd:d0:79:3d:2a:2d:0a:ed:95:ba:
cf:fc:4e:8d:ea:8b:99:03:0d:33:be:c1:fd:23:69:60:f6:40:
b5:76:7d:fe:69:8b:51:25:5d:b5:11:ca:9f:88:5a:ff:17:9c:
80:42:ad:9a:31:62:fb:c5:b5:13:80:e3:fc:dc:d2:f3:72:4b:
c3:59:6e:6d:3e:84:f9:e7:a5:c2:b9:22:de:b5:70:52:a3:5a:
49:f3:ff:75:a3:44:ac:d4:10:cd:f0:7b:20:e1:39:17:5a:1d:
6c:d9:c5:74:ba:e6:f7:cd:10:90:83:5e:d2:5c:0f:29:09:12:
e2:64:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:41:29 2026 by rpki-client