
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json)
Hash identifier: 3gYDobrqOGmruUdaaKo9y+/dj1Lie9l79OvZtjK/0rU=
Subject key identifier: B9:BA:6B:6A:D6:04:E3:91:5F:0D:28:D0:5D:56:FF:8B:31:83:70:38
Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
Manifest number: 01A4
Signing time: Mon 27 Jul 2026 05:57:19 +0000
Manifest this update: Mon 27 Jul 2026 05:57:18 +0000
Manifest next update: Mon 03 Aug 2026 05:57:18 +0000
Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: Ujbu0eJ5F88C5icIUq5KWFdn+ryuZD6YuiWvDpLIvcg=)
2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Validity
Not Before: Jul 27 05:57:18 2026 GMT
Not After : Aug 3 05:57:18 2026 GMT
Subject: CN=6a66f33f-0602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:6b:58:3c:d7:93:43:59:2e:1d:f6:da:34:
e7:cb:53:34:f2:ad:f4:c6:47:bb:35:e0:76:41:74:
94:56:41:0f:27:bf:77:02:70:8b:1b:07:f1:a1:bf:
2f:08:5a:91:bb:97:cb:6c:30:6c:27:64:35:10:08:
0d:7a:8f:52:9c:8f:1e:be:af:a7:96:e2:a3:37:7a:
b7:fb:3b:c8:26:5e:11:7b:8f:8c:ff:fc:86:ff:8d:
33:1b:47:74:2b:fa:d6:67:53:b4:c8:76:f1:db:75:
3d:b5:48:a8:eb:2d:7d:b6:0b:9c:c2:62:ee:56:56:
16:d1:30:95:5f:cc:e3:5e:c5:be:28:3c:a9:7f:a6:
99:fa:cb:0b:12:46:f3:0f:44:b0:27:d5:99:41:fe:
55:46:fa:10:7c:25:92:0b:43:83:9a:86:52:95:90:
0b:bd:e6:f9:5f:37:9d:e0:14:b6:13:36:a9:29:2b:
16:d6:e8:a3:22:95:51:da:ac:ce:4e:6d:da:38:f9:
93:80:56:aa:c3:10:c0:d5:17:c9:74:c9:b1:f5:92:
11:1a:f6:40:f1:2f:a4:ab:be:33:dd:71:dd:50:e3:
74:e7:72:3f:1c:5b:6f:f0:ef:af:b2:fe:0d:bd:9f:
e5:9e:03:8b:03:4c:98:54:23:b9:8d:d4:18:23:33:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:6B:6A:D6:04:E3:91:5F:0D:28:D0:5D:56:FF:8B:31:83:70:38
X509v3 Authority Key Identifier:
keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:b7:ee:da:d0:00:d7:e6:5b:70:ef:32:f4:a1:c9:79:3d:81:
03:84:93:55:42:b6:79:0f:62:94:bd:67:5c:9c:35:a0:72:be:
c8:7f:2f:1a:67:25:09:3e:2b:f0:1c:05:03:90:36:fc:1c:5c:
b4:c0:17:de:e6:f8:b8:be:26:92:2c:48:d3:e2:65:65:ee:4e:
13:c5:a4:a4:59:5e:89:de:34:00:09:c3:da:f2:56:cd:72:d2:
ee:40:22:28:5e:10:5f:58:fd:83:3e:b8:5f:a7:95:f7:60:e8:
7d:ca:32:11:00:ed:24:b4:ca:12:15:37:e3:1c:5a:41:0c:1d:
4f:fd:f1:49:5a:ef:e7:81:04:cc:3f:fe:07:31:df:f1:9f:8c:
be:74:98:d3:c0:a6:4b:54:c6:f6:f3:6b:7c:35:a7:65:33:77:
3c:3e:33:dc:32:44:02:21:76:37:a3:87:f7:b3:59:a0:31:30:
c6:be:bc:08:fd:4f:66:27:5d:2a:46:2a:69:1d:7c:d8:9d:9c:
b9:ef:2a:52:92:38:e8:0c:b8:5b:20:0b:71:58:21:f8:73:69:
0c:2a:a0:83:30:03:87:f3:9e:67:42:3b:2b:29:63:b9:ff:8b:
2b:13:d7:29:19:45:69:82:f7:d4:89:d4:5e:6a:6e:f5:4f:77:
d6:f6:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:26 2026 by rpki-client