
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier: PAcBAUTLWQYYSokwdYOgqASK3Neu+CMQE8pXAqQ9gI8=
Subject key identifier: F8:8D:01:E5:A4:6A:F8:FE:8A:C7:4F:93:B2:B7:19:36:5A:3E:4B:35
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial: 0CF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number: 0CE7
Signing time: Sat 18 Apr 2026 18:11:36 +0000
Manifest this update: Sat 18 Apr 2026 18:11:36 +0000
Manifest next update: Sat 25 Apr 2026 18:11:36 +0000
Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: +pPvS7wCDZX2SZXqQn9Xq4mDWJqvnsuTz61HKl+xbCA=)
2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3315 (0xcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Validity
Not Before: Apr 18 18:11:36 2026 GMT
Not After : Apr 25 18:11:36 2026 GMT
Subject: CN=69e3c958-d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:6b:ca:0e:e4:32:8b:80:80:78:b4:d0:36:
d8:6e:91:a5:66:da:2d:63:86:d9:ce:69:77:57:3f:
ad:af:83:2e:be:2b:8d:0e:32:99:cc:b3:95:62:1e:
b8:66:a7:bc:44:64:17:7d:bc:51:2e:cb:0c:7e:03:
ab:92:7a:99:c9:77:b2:4c:93:13:0f:8a:01:67:cb:
b9:95:cb:94:48:34:75:d3:fd:7d:fb:5b:1d:24:db:
8a:3e:ba:12:d6:22:f2:04:98:d4:31:5b:47:11:93:
b3:7d:46:33:71:b2:93:e5:5c:3b:9c:a2:36:fe:73:
56:c6:ad:98:63:b9:6b:19:0f:50:39:f5:0e:af:2a:
7c:c7:4d:1b:b2:e9:0e:3e:2f:76:40:1e:e8:65:e9:
73:d7:af:a1:85:52:9f:e2:6b:6b:d4:c2:76:fe:82:
aa:b0:33:41:5b:b2:01:13:d2:ec:d1:87:03:64:a3:
5b:b6:ca:b7:cb:31:94:cd:ea:b7:9a:84:61:67:e7:
c7:52:f6:e5:d2:92:dd:46:70:1f:5f:12:91:ac:d7:
b8:d2:d6:54:82:c3:07:3c:84:5e:36:ef:45:fa:0c:
3c:e4:01:be:e2:ea:3c:c9:92:bb:37:4a:34:3c:cf:
58:d8:5f:b7:1d:4b:23:e7:ba:20:7c:9e:27:fd:c3:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:01:E5:A4:6A:F8:FE:8A:C7:4F:93:B2:B7:19:36:5A:3E:4B:35
X509v3 Authority Key Identifier:
keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ae:b3:d8:a5:1f:c5:2e:ac:d1:35:01:68:9f:63:49:25:7a:
13:15:f6:c7:bc:6e:a2:8b:21:d4:44:85:e6:aa:92:f8:1d:50:
2d:8b:0c:72:36:62:fe:38:69:cf:e0:d1:13:3a:ff:f1:f8:ef:
52:fb:d3:49:61:9c:60:f4:1c:45:03:9e:f9:73:19:58:72:ea:
52:2b:98:86:30:f6:a0:0e:47:78:9f:03:58:50:d0:30:56:ad:
da:f2:02:38:42:aa:a3:58:b5:a4:ff:22:05:ee:1a:97:96:e8:
87:33:c0:d3:0d:81:eb:f7:e7:ce:70:86:ce:fd:f0:51:e7:b1:
c4:48:a6:b1:a1:a1:27:76:c6:dc:be:d5:36:e7:09:cb:2a:7d:
a4:88:e5:9b:d8:20:06:c2:a0:bd:a4:76:0c:ac:fe:d8:a1:8b:
09:e5:6d:04:27:89:29:85:ac:25:e8:2a:7d:e3:4c:eb:d6:95:
6b:bf:41:ac:f7:1c:f1:0f:c4:42:2e:78:e0:53:d8:8a:99:df:
8d:22:9d:f0:34:06:d7:12:dd:fe:c5:ff:71:cd:db:2c:51:92:
d7:15:22:e9:e7:ac:9b:d0:77:ca:05:18:56:22:0e:c0:70:9e:
9a:80:e0:84:ff:99:09:8a:1a:71:6e:1f:58:5b:f2:5f:da:c9:
09:5c:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:33 2026 by rpki-client