
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json)
Hash identifier: vj5CyguFzbypQqtFMEP6wzqllMT1zzv0OsPXO5tYf6A=
Subject key identifier: 58:18:89:E2:98:23:F9:5C:6C:F0:A7:70:BD:23:86:14:16:E1:DD:DD
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
Manifest number: 0285
Signing time: Mon 02 Mar 2026 01:23:25 +0000
Manifest this update: Mon 02 Mar 2026 01:23:23 +0000
Manifest next update: Mon 09 Mar 2026 01:23:23 +0000
Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: UlfRUDfmztmAiSu99Y5qvOxLXkJ4bZXRZI44swJq7yI=)
2: 01A55FE8EB8811F09418252C556F56BC.roa (hash: cFB/8Vgkj4i8BlW9emUOHcyZlqasNRUOsxhp6QEZNAo=)
3: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: EqT4x+M1dS0lAoKnprnpqiEWavrDyHejbJDUqIhSKBc=)
4: 8A537D0CEB8811F09D1C7947556F56BC.roa (hash: HXOczdbG3jBtr/wzTx6ipHvHkHT1tt95ne5sa0eRBf8=)
5: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: DxSoqS3b+Y/gdSbATN2rSyfLU8qRKds7oUL0VnUHIkU=)
6: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: DoI1H5cBVDVpM0o3Z6TBBwhDvf1Ij5PjDVqCV737dgA=)
7: 6121C23230AC11F08C150767C4F9AE02.roa (hash: yFAyH86XSQnek6ohQ/lpmbhrJ7zT+NkCgAJN/G3hbEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Mar 2 01:23:23 2026 GMT
Not After : Mar 9 01:23:23 2026 GMT
Subject: CN=69a4e68d-3281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:5b:ac:fc:c3:e8:eb:e2:83:d9:36:fd:d8:
af:3b:0b:5e:e8:68:dc:dc:4f:5e:82:2e:ea:d4:d4:
fe:07:d1:eb:88:a5:3c:00:ff:b9:e8:5b:fc:97:53:
15:6c:cf:9b:c7:1d:80:97:39:cb:51:39:f5:ca:e5:
28:dd:b8:db:23:0d:bd:0e:1b:03:e3:6f:ee:cf:27:
86:13:0f:cd:5d:57:c1:9b:b5:34:09:df:4f:b9:27:
fa:80:40:34:30:fe:b8:4f:45:e5:b3:05:41:f3:57:
f4:8c:b6:3f:51:51:31:b0:49:93:43:c3:dd:a3:85:
0a:9b:f7:82:f2:b7:5d:bd:56:3e:f4:f4:58:96:3d:
96:11:d9:f0:c7:0b:92:d1:e0:e0:6f:e3:3d:d9:69:
60:d6:a2:7c:02:ca:ba:9a:81:5b:34:9c:69:60:99:
5d:9f:f7:da:ca:45:37:78:c5:d1:05:d4:d8:7d:04:
d5:bb:26:71:e5:df:a0:9a:f8:ad:31:60:82:7c:55:
72:a2:1b:ea:53:52:ed:09:3e:a7:76:5f:84:62:ca:
9c:ad:1d:ef:76:7a:1a:26:4d:a2:92:ba:bc:ac:ce:
d8:43:ab:dc:e1:74:e6:b3:00:67:53:5e:36:f1:60:
60:11:f1:f5:e8:d9:88:d2:30:a0:fb:bd:f0:fa:84:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:89:E2:98:23:F9:5C:6C:F0:A7:70:BD:23:86:14:16:E1:DD:DD
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2e:96:6b:53:43:0b:7f:b3:9d:6f:ec:44:c3:59:9b:20:88:
45:d0:55:9c:8c:50:16:57:fc:9d:96:90:65:e8:e2:47:65:8c:
ed:e2:b4:69:cc:5e:96:bb:be:32:02:73:43:48:c8:52:5e:fa:
91:7e:a7:97:65:d3:3d:e8:70:ee:19:b8:88:02:65:e4:86:8b:
97:be:3d:60:bf:f2:53:66:d9:01:41:8d:f5:6a:17:3e:66:2b:
1f:ea:e9:0b:6e:e0:7b:55:01:f9:c8:f1:6d:a8:f2:92:80:1a:
92:29:81:04:32:d9:60:92:02:16:1a:44:bb:91:89:a4:59:76:
1b:c5:fa:6a:a4:fa:c1:dc:f4:c0:71:ab:46:33:ff:65:21:84:
eb:84:29:bc:05:46:81:c2:31:7e:48:4f:6b:ba:a8:c5:17:34:
0e:9d:c8:9d:bc:21:eb:4f:61:f8:dd:d8:5f:75:a2:5d:8a:6c:
02:78:2b:8a:a7:28:74:c9:e6:97:75:a1:a6:d0:d8:ce:b4:b3:
61:35:74:e1:36:5c:2e:91:e2:00:16:1d:61:c4:5b:8e:d9:a4:
05:89:2d:63:f3:9b:95:39:75:f0:24:56:b2:b3:2e:df:9a:14:
3f:14:72:15:a3:23:db:72:a5:d4:2e:e3:19:1a:4d:ac:24:88:
9b:00:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:56 2026 by rpki-client