
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json)
Hash identifier: idXInUmu32BHGmxB4U1buXaq9ZFzL4QWjpBRXzDnHbc=
Subject key identifier: 8E:9B:ED:05:6F:64:F3:DE:AA:98:F2:B7:C3:B8:9F:1D:9C:EA:EC:45
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial: 089A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
Manifest number: 088F
Signing time: Sat 18 Apr 2026 20:27:47 +0000
Manifest this update: Sat 18 Apr 2026 20:27:46 +0000
Manifest next update: Sat 25 Apr 2026 20:27:46 +0000
Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: 4QcfPKkdboDEUJlSIgpv28pMO79xNeBBaz3Ik3lc4Xg=)
2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 20:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Validity
Not Before: Apr 18 20:27:46 2026 GMT
Not After : Apr 25 20:27:46 2026 GMT
Subject: CN=69e3e943-7373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:97:c5:18:30:74:e0:f3:e8:7b:ac:f7:07:
bd:5b:bf:20:c6:c9:7f:04:57:33:34:46:72:1b:de:
7b:e9:18:60:a6:07:07:31:0e:63:a4:b4:df:d4:76:
15:f6:a0:ed:e0:8b:c4:fc:9d:66:3d:15:73:bf:d9:
e1:8c:39:f0:08:ff:1a:eb:d5:45:54:5e:95:6f:10:
31:33:a7:7f:95:17:dc:7c:60:2b:c0:38:b6:dc:e5:
8e:de:f2:90:00:07:42:70:08:ed:80:38:a7:b6:ac:
5b:a0:14:3c:3d:01:b6:0a:b3:4c:dc:5c:38:93:e6:
ac:00:5f:e9:e4:5a:99:7d:5f:03:eb:58:2b:5d:46:
03:02:21:dd:18:0e:a5:06:10:42:7b:85:c5:f7:fd:
16:83:c3:7f:02:a6:93:8b:05:da:43:c7:e1:6b:b1:
bc:aa:94:9a:77:29:f1:15:03:c7:5a:2c:df:5d:01:
08:11:8f:02:a1:56:b6:da:ba:62:d2:ac:d5:3f:18:
4a:1a:a9:85:24:93:43:b4:5d:57:97:43:e7:5a:0b:
48:c1:76:53:ed:10:c5:b9:7a:04:57:6d:f9:c6:38:
30:b9:2a:af:22:48:94:d1:a8:07:13:71:e2:8d:ac:
a8:3a:41:2d:b2:43:6a:ca:d3:4a:81:59:9d:ba:35:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:ED:05:6F:64:F3:DE:AA:98:F2:B7:C3:B8:9F:1D:9C:EA:EC:45
X509v3 Authority Key Identifier:
keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:e4:b0:2d:4c:44:b0:dc:89:06:06:38:c7:44:ab:86:36:
35:20:ed:77:7f:2b:b9:a5:38:61:6f:28:20:69:4b:66:ed:49:
e7:13:4a:23:83:6b:e8:98:13:5a:2f:45:e0:f8:11:ef:fd:c5:
3c:54:ee:c7:2e:2b:ca:e1:db:2a:b5:7b:00:e1:49:08:7a:4c:
82:94:29:ef:d7:8c:30:16:70:00:fa:1a:5c:c7:1b:25:89:52:
32:c1:80:a2:0c:41:49:38:a9:03:4a:a3:a5:06:fd:de:1f:49:
a9:fb:e8:73:24:54:68:76:de:94:13:2a:55:1c:26:c0:91:39:
13:ac:f9:b6:e8:3b:42:2d:f3:ad:cf:50:13:ac:30:c8:1a:12:
01:5a:98:dc:09:49:43:44:39:92:d8:47:63:37:a2:e0:86:1f:
fc:cf:be:15:3e:74:79:66:e9:c1:c0:52:49:2f:9d:9f:f4:5c:
e5:19:e5:99:d0:ce:28:c1:e2:d3:d1:7a:24:e1:1a:70:03:dc:
0b:73:c5:b9:34:47:9d:43:22:e1:8e:ab:0d:5d:ab:08:62:89:
94:45:13:e7:88:27:2a:ab:31:b6:65:52:0b:ee:aa:76:d8:f5:
e1:d2:71:62:03:c2:57:3e:d2:8a:8e:cf:ef:f5:6a:11:0b:a4:
b0:6e:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:10 2026 by rpki-client