
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json)
Hash identifier: EC3NLu74qovs0QkhI0OOm9dIl3RvRcRGP58Rn3SCsEU=
Subject key identifier: 55:B6:6E:D5:75:0E:C2:8D:70:31:0E:20:DE:D0:49:76:10:12:79:E1
Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
Manifest number: 01A5
Signing time: Wed 29 Jul 2026 05:25:00 +0000
Manifest this update: Wed 29 Jul 2026 05:24:59 +0000
Manifest next update: Wed 05 Aug 2026 05:24:59 +0000
Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: VT2bj/Cd2tv/G2GsN+MlCrGHc+Pac7aDgjrxMkxOuLM=)
2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Validity
Not Before: Jul 29 05:24:59 2026 GMT
Not After : Aug 5 05:24:59 2026 GMT
Subject: CN=6a698eac-a30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:c7:ba:2c:bb:97:d5:f9:6b:60:90:8c:d4:
75:ef:74:6d:b3:c0:ac:3a:33:01:34:e9:20:8b:48:
04:63:5e:9b:16:fd:61:b5:35:dc:b5:e4:b4:a6:39:
8e:8a:1d:cf:e8:f9:e7:78:ec:87:f0:12:73:73:85:
9f:35:63:a5:aa:19:33:7a:ee:ad:a7:7a:69:ee:c0:
a0:5d:31:70:8e:24:ef:9a:ea:52:4a:db:90:fb:6e:
06:5a:3e:1f:a8:43:06:30:a6:83:d4:24:2d:84:25:
96:ab:b8:09:e9:b8:d0:b9:1b:37:6b:6c:26:f0:1e:
a2:bc:6c:00:b9:2e:6d:3d:2d:81:d4:57:a9:7a:d9:
56:f8:73:44:7d:1a:e2:76:d6:c8:7e:16:33:a3:56:
5f:38:4b:42:7d:70:73:21:00:6c:ec:8c:6f:4e:86:
bd:23:f8:97:f8:d2:3b:01:02:d2:42:6e:11:13:d7:
96:67:a2:9d:41:ea:65:79:5c:ed:bb:0b:8d:04:9d:
c9:62:88:f7:52:d1:38:eb:6d:2e:77:83:f3:9e:d1:
f3:e9:51:65:2b:a9:fb:4f:6f:ac:8f:87:90:0e:49:
31:ff:16:32:d4:cc:d5:ac:3f:79:21:29:6c:b2:dd:
3a:c3:fe:f5:62:19:04:51:61:1a:ba:45:9b:16:a6:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:6E:D5:75:0E:C2:8D:70:31:0E:20:DE:D0:49:76:10:12:79:E1
X509v3 Authority Key Identifier:
keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fe:64:05:a5:6d:c6:28:22:0f:c2:1c:3e:fd:31:04:0d:8f:
3a:d5:62:ec:a5:85:ed:31:09:8a:e1:24:08:3f:68:1a:4d:5b:
72:df:cf:e7:f7:53:30:8e:d1:e2:1d:c8:66:3e:27:62:8e:c4:
0c:1d:d2:4a:e2:f9:60:55:bc:be:63:c2:42:ad:78:f1:3f:f3:
cd:a3:8f:e1:52:55:c4:52:0f:50:6a:ee:7b:a6:bc:56:d9:fb:
92:bf:94:75:78:62:48:f5:b5:91:fe:6f:aa:5f:27:df:a9:14:
ec:98:48:3b:fe:39:e8:ce:bb:5b:de:9a:67:6b:0a:1b:77:a9:
21:25:18:ce:bd:d7:a7:28:48:33:a8:bb:d9:2e:66:45:12:ac:
66:2a:47:66:32:c0:08:0f:8f:4a:b0:62:96:10:19:c4:f9:9e:
38:db:a8:54:a7:8e:9d:cf:18:72:bb:9b:00:fe:56:f8:ab:c8:
16:48:c5:64:c6:62:83:56:22:03:68:f7:ad:30:fd:0b:cf:8d:
64:93:f8:30:b6:77:08:10:4e:13:b3:7b:c7:24:13:db:9a:ff:
f4:95:53:0c:8c:20:d8:f5:15:0d:16:04:f9:71:44:b4:6f:63:
18:ef:75:12:18:cf:3b:73:66:b9:93:0a:20:e6:e2:5c:27:cc:
84:66:23:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF
MzJCQzlBNDIwHhcNMjYwNzI5MDUyNDU5WhcNMjYwODA1MDUyNDU5WjAYMRYwFAYD
VQQDEw02YTY5OGVhYy1hMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDjHuiy7l9X5a2CQjNR173Rts8CsOjMBNOkgi0gEY16bFv1htTXcteS0pjmO
ih3P6PnneOyH8BJzc4WfNWOlqhkzeu6tp3pp7sCgXTFwjiTvmupSStuQ+24GWj4f
qEMGMKaD1CQthCWWq7gJ6bjQuRs3a2wm8B6ivGwAuS5tPS2B1FepetlW+HNEfRri
dtbIfhYzo1ZfOEtCfXBzIQBs7IxvToa9I/iX+NI7AQLSQm4RE9eWZ6KdQepleVzt
uwuNBJ3JYoj3UtE4620ud4PzntHz6VFlK6n7T2+sj4eQDkkx/xYy1MzVrD95ISls
st06w/71YhkEUWEaukWbFqbLBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFW2btV1
DsKNcDEOIN7QSXYQEnnhMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG
ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk
ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL/5kBaVtxigiD8IcPv0xBA2POtVi7KWF7TEJiuEkCD9oGk1bct/P5/dTMI7R
4h3IZj4nYo7EDB3SSuL5YFW8vmPCQq148T/zzaOP4VJVxFIPUGrue6a8Vtn7kr+U
dXhiSPW1kf5vql8n36kU7JhIO/456M67W96aZ2sKG3epISUYzr3XpyhIM6i72S5m
RRKsZipHZjLACA+PSrBilhAZxPmeONuoVKeOnc8YcrubAP5W+KvIFkjFZMZig1Yi
A2j3rTD9C8+NZJP4MLZ3CBBOE7N7xyQT25r/9JVTDIwg2PUVDRYE+XFEtG9jGO91
EhjPO3NmuZMKIObiXCfMhGYjrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:13 2026 by rpki-client