
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: 87sSHpxOzcoM7KVN354M5l9R1JE0wKXWDO43O4VQlo8=
Subject key identifier: 66:34:5E:8F:A5:10:06:A4:28:18:E7:7E:AC:DD:98:3F:AA:D6:73:FE
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: 0144
Signing time: Wed 29 Jul 2026 06:39:33 +0000
Manifest this update: Wed 29 Jul 2026 06:39:33 +0000
Manifest next update: Wed 05 Aug 2026 06:39:33 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: M02xfSqVVP46Hylgi9/n0g2g+6gmeqiV69ZZ1cLfIag=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Jul 29 06:39:33 2026 GMT
Not After : Aug 5 06:39:33 2026 GMT
Subject: CN=6a69a025-1ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:c2:9a:19:5a:9e:0a:3a:57:db:15:44:8f:
f8:1c:b1:2d:55:78:12:7d:97:95:ed:47:c5:5f:b4:
03:40:09:2b:1c:ce:9d:2f:31:68:c5:c8:7a:fc:41:
2c:ab:5e:2e:17:9b:dd:d9:09:ff:b6:66:f1:b2:4d:
0d:5f:62:3b:f1:11:6d:f0:81:2b:77:ce:e7:82:bf:
97:96:5b:00:b8:e2:cd:1a:54:31:49:c5:37:b0:85:
0c:5e:a7:a7:35:95:fd:7c:6f:23:f4:06:37:32:6e:
a8:be:0b:51:89:d1:97:c5:22:2b:19:a8:22:fb:8b:
51:81:20:bb:0a:a9:02:c6:99:b8:b1:06:98:29:d2:
bd:f5:85:c0:68:ac:aa:82:fc:6c:12:32:33:7d:80:
e3:b4:64:d6:ea:92:77:a8:57:3e:0c:09:99:37:a8:
8b:b8:a5:b7:69:5f:ea:4c:e4:0e:03:4a:7b:87:f7:
1a:9d:b1:49:eb:1c:69:b4:49:80:66:4b:91:16:82:
3c:36:d7:be:56:4c:79:29:fe:e6:44:1e:52:35:3b:
46:f8:f8:b1:7a:75:76:04:db:e9:fd:36:87:27:53:
63:ce:84:07:59:55:f3:67:0e:5c:96:a5:24:b6:7d:
4e:d2:c5:30:36:c2:2e:d7:15:89:93:95:9b:b3:48:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:5E:8F:A5:10:06:A4:28:18:E7:7E:AC:DD:98:3F:AA:D6:73:FE
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8e:36:1d:a2:64:92:fa:2b:2b:66:8b:9a:c8:4f:7d:e5:44:
b0:dd:25:c5:63:33:13:6a:26:0d:f9:5e:f3:73:e2:c4:4a:78:
21:9a:4b:6c:d3:0b:8c:ba:b2:b7:94:60:a8:9d:8d:61:79:59:
05:96:c2:8e:c7:a2:af:50:c4:c4:63:98:e3:a4:47:b8:e1:96:
9d:ca:53:44:f2:da:39:d9:17:4d:bb:80:08:4f:5f:43:07:80:
15:11:89:41:0f:db:77:51:62:99:48:f8:89:d3:dc:4d:6d:26:
90:d1:66:6f:43:10:a6:d9:a4:ae:9d:21:22:62:21:17:db:76:
e8:53:57:51:f3:f8:9f:c0:a5:08:1f:c7:ea:b5:eb:31:fe:af:
30:7d:6c:be:9c:87:62:1b:a1:0b:0a:27:36:c5:bd:fa:83:2e:
ef:93:de:77:8a:b4:26:d3:cc:c6:d0:b4:8b:51:16:b5:6a:de:
37:e1:2f:b9:ef:3f:1b:d1:de:13:9a:2e:99:63:0d:43:a3:d7:
03:b6:12:6f:cc:a4:fa:66:b1:d1:db:18:41:bf:74:3e:75:cc:
82:e2:d9:60:77:33:23:17:62:c6:ca:17:a4:e8:8d:1d:18:56:
1f:82:21:df:72:32:21:78:fe:72:4d:96:8b:92:c7:96:75:b2:
0f:c7:4d:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG
RjMwN0M4NkYwHhcNMjYwNzI5MDYzOTMzWhcNMjYwODA1MDYzOTMzWjAYMRYwFAYD
VQQDEw02YTY5YTAyNS0xZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuonCmhlango6V9sVRI/4HLEtVXgSfZeV7UfFX7QDQAkrHM6dLzFoxch6/EEs
q14uF5vd2Qn/tmbxsk0NX2I78RFt8IErd87ngr+XllsAuOLNGlQxScU3sIUMXqen
NZX9fG8j9AY3Mm6ovgtRidGXxSIrGagi+4tRgSC7CqkCxpm4sQaYKdK99YXAaKyq
gvxsEjIzfYDjtGTW6pJ3qFc+DAmZN6iLuKW3aV/qTOQOA0p7h/canbFJ6xxptEmA
ZkuRFoI8Nte+Vkx5Kf7mRB5SNTtG+PixenV2BNvp/TaHJ1NjzoQHWVXzZw5clqUk
tn1O0sUwNsIu1xWJk5Wbs0hnDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGY0Xo+l
EAakKBjnfqzdmD+q1nP+MB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE
OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl
enJHV0hST2dWLXpfTUh5RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP442HaJkkvorK2aLmshPfeVEsN0lxWMzE2omDfle83PixEp4IZpLbNMLjLqy
t5RgqJ2NYXlZBZbCjseir1DExGOY46RHuOGWncpTRPLaOdkXTbuACE9fQweAFRGJ
QQ/bd1FimUj4idPcTW0mkNFmb0MQptmkrp0hImIhF9t26FNXUfP4n8ClCB/H6rXr
Mf6vMH1svpyHYhuhCwonNsW9+oMu75Ped4q0JtPMxtC0i1EWtWreN+Evue8/G9He
E5oumWMNQ6PXA7YSb8yk+max0dsYQb90PnXMguLZYHczIxdixsoXpOiNHRhWH4Ih
33IyIXj+ck2Wi5LHlnWyD8dNLA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:08 2026 by rpki-client