
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json)
Hash identifier: wwG2VflrIvTcHhj7mvgXVsxuY8xruKVbAW/AuXZqrTQ=
Subject key identifier: 87:70:C0:85:7A:89:AF:17:FF:08:BF:9D:CA:B5:EA:36:76:49:E5:71
Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
Certificate serial: 0724
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
Manifest number: 071B
Signing time: Thu 16 Apr 2026 21:47:05 +0000
Manifest this update: Thu 16 Apr 2026 21:47:04 +0000
Manifest next update: Thu 23 Apr 2026 21:47:04 +0000
Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 6sUorwBEM1uY0MmqiY7ugmOuu3l6NZCP+KFTc8JkYvA=)
2: AC2C4AA0391F11F1BD3AD0FAB7833773.roa (hash: 0cccYt2m6S2dw6ZuCcBDsMyRl29jhFA8rzAB3dSSO60=)
3: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: 0b0HGaDdSoGabGbuIldgPlVlxVMXsiZt0/dswCWx48E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl
rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
Validity
Not Before: Apr 16 21:47:04 2026 GMT
Not After : Apr 23 21:47:04 2026 GMT
Subject: CN=69e158d8-c11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:c5:1f:46:69:52:79:a0:19:75:46:3a:0b:
d2:6e:81:c0:01:af:95:be:7e:1d:31:f6:3a:07:cf:
d3:fb:12:9d:42:f8:91:e8:63:fc:9d:95:f4:04:8c:
01:e2:36:7a:71:4e:39:5f:29:5d:59:21:7f:c6:10:
c2:c1:e0:7e:5a:c9:aa:a2:f3:c0:e2:74:00:5a:b5:
37:d4:9b:5c:ce:a3:30:76:a2:f6:75:a8:d6:8f:a5:
70:4d:0f:d0:5d:b7:1e:2b:c6:a8:34:da:54:1f:26:
94:96:b1:fd:9f:ca:04:8c:9d:f3:5b:d5:29:4a:1d:
8e:8e:8a:16:06:e0:fe:93:46:48:5e:26:ff:52:b7:
96:f2:42:c0:23:51:7a:94:46:e9:35:52:17:e5:ba:
de:ed:87:8c:ed:9a:82:c3:a8:fd:a1:ca:c8:65:82:
41:1a:86:55:5c:3d:63:61:d9:a1:de:75:53:1f:bc:
32:da:3b:20:d0:c6:33:0b:71:53:43:1a:47:fd:2f:
80:d4:25:b6:eb:a7:48:0d:1d:44:24:2b:ce:a8:9d:
97:f5:19:b1:77:1e:48:78:5b:86:f2:08:37:45:92:
95:c9:68:36:ba:a8:4b:a9:78:31:e1:4d:3d:9a:73:
bb:43:f2:33:81:d9:9e:49:51:54:51:65:b7:fb:d5:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:70:C0:85:7A:89:AF:17:FF:08:BF:9D:CA:B5:EA:36:76:49:E5:71
X509v3 Authority Key Identifier:
keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a2:7c:93:38:79:70:2f:4a:62:4d:7a:9f:f4:85:d6:42:88:
19:2f:60:24:3f:5a:4a:dc:27:1e:c5:f5:58:10:61:c1:99:58:
b4:fb:38:0f:1f:e9:bd:15:50:8c:81:98:72:ad:df:0d:3a:24:
3a:96:d8:75:fb:ec:63:cd:f6:c1:ad:5d:51:e6:f6:9c:7e:68:
ca:e6:0d:6c:f2:1c:c7:f5:13:17:97:1d:53:28:02:cb:57:d7:
8e:63:56:53:ed:19:72:9d:59:cb:f8:22:1a:7d:f1:d8:51:5c:
82:03:b2:23:91:bd:08:ac:87:89:80:a0:2e:ce:b0:79:4b:a6:
e1:8e:27:3c:b3:1a:61:22:ec:a4:ed:42:2e:03:3d:86:66:65:
6c:ea:d1:42:a7:b8:fe:38:94:2a:d7:98:72:77:05:f2:e3:5f:
34:43:d6:9e:5d:b8:3d:89:0d:36:c5:84:66:90:e5:89:65:0f:
be:c4:97:ac:62:58:3e:90:56:23:3a:35:cd:2c:d4:ec:e3:2a:
e7:fd:a2:57:60:9e:03:73:b3:0e:e8:ca:30:ef:40:6f:52:e3:
3a:4e:94:f1:7c:5b:36:2f:8a:09:2f:b2:bc:15:70:2e:cc:c9:
78:af:68:d6:7a:ed:47:97:dc:82:e0:1b:b6:03:c9:39:59:f7:
9a:50:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:53 2026 by rpki-client