
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier: rsr/ZPYp9/6KRV3OURHhnUCEk+iUBk/sGVwYsvzXOnw=
Subject key identifier: 7F:EB:56:88:6E:2B:5E:ED:11:00:1D:AF:AA:45:89:29:D3:F4:83:CA
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number: 0224
Signing time: Sat 13 Jun 2026 02:58:09 +0000
Manifest this update: Sat 13 Jun 2026 02:58:08 +0000
Manifest next update: Sat 20 Jun 2026 02:58:08 +0000
Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: 4fc9MfSa7K5ZGZ6jiZC1CErNpSZzKPK7ZTwftelkafs=)
2: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: eCvLkEbyNwc9r0JGvwSvHfQB+uiRQQDtRICORSigmQw=)
3: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: L7PzMw/RqglxuX4TAKGHddkS6szpM6BUVLIqh8w+1Fk=)
4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: /+ba2nQszpmA32xw8Q2bNwCocgAiAxht6R/PF25M/+Q=)
5: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 6I5YlsRFDMiAw2+6p+Np4QlkoPsG3b9oYbhxF6uNgBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Jun 13 02:58:08 2026 GMT
Not After : Jun 20 02:58:08 2026 GMT
Subject: CN=6a2cc740-523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:2d:2e:13:da:8a:5a:6f:bf:65:6d:c0:9a:
39:e7:bb:fc:1f:92:85:21:22:09:e6:68:07:3b:7b:
2f:0c:e6:da:5a:a9:f0:52:53:04:5a:62:80:76:34:
f0:69:69:bd:56:59:2d:75:b2:a3:57:de:2e:58:86:
c8:fd:ba:76:4e:2c:41:b5:16:58:65:e0:be:b9:47:
78:1f:41:10:44:3f:d8:61:83:d2:51:1a:3d:2f:35:
01:ab:c8:0b:d4:3a:54:28:0e:bc:a9:51:40:ef:d1:
4f:61:d5:f9:33:2a:6f:c5:87:dc:22:b1:35:f5:4b:
60:a9:df:84:fd:2c:4f:4a:91:10:59:83:30:f9:87:
1b:97:38:34:21:c4:1e:cd:c2:b5:50:b9:16:b6:c9:
4a:f3:89:66:e3:a7:62:b6:30:de:1f:c8:c2:ab:a3:
51:73:cb:e5:77:09:d5:99:a8:cb:54:73:c6:28:33:
b5:fa:a6:26:e6:6b:ba:bf:64:12:90:0b:e3:be:7c:
5e:5c:f6:a6:9c:d0:6e:08:d6:34:69:1a:15:14:82:
b3:fa:c9:76:e3:f9:ed:06:1c:54:4e:99:98:3f:eb:
68:be:fe:7e:55:1e:5c:de:e5:6a:8f:ea:8a:74:3c:
6b:86:60:e3:96:cd:98:25:4d:af:da:51:6a:dd:cb:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:56:88:6E:2B:5E:ED:11:00:1D:AF:AA:45:89:29:D3:F4:83:CA
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ff:44:2d:aa:36:18:02:26:77:b7:f0:e2:36:65:80:c9:43:
3b:1d:27:f3:fe:e7:b1:72:cc:dc:ad:11:10:73:91:ff:60:7b:
ff:0f:45:5e:d5:45:7c:66:ca:12:e3:e5:c3:11:cf:d7:e1:9e:
3d:ea:0b:c7:56:9b:c2:b1:dc:9c:46:61:8f:91:c2:c4:6b:08:
9b:36:b4:b7:c8:e8:4c:8a:99:4a:6a:a8:a8:26:37:6c:99:cb:
f7:3a:11:5a:f9:a0:74:a2:3f:dc:d5:64:e7:7c:19:6e:02:4f:
44:2b:48:3a:b4:63:cf:44:8f:1f:42:52:d1:10:df:74:29:a2:
df:00:a4:1b:59:ed:eb:63:30:3a:47:ff:62:e0:5e:af:e8:ec:
6e:15:f7:47:5f:4e:ae:34:61:5f:c2:4e:39:64:b8:31:66:98:
82:7b:bd:55:3a:97:75:42:85:19:50:c6:a8:6c:7c:0f:51:20:
b5:54:3d:c1:bb:ac:ad:36:27:96:4e:af:c6:47:18:ef:68:2d:
c0:00:d9:ce:6d:61:68:4e:8d:e9:d1:e5:65:bc:00:ea:cb:af:
c7:a0:7e:e0:6b:eb:10:e2:af:cd:d7:8d:e7:bf:56:44:43:e2:
91:1f:05:bf:f9:d9:c9:16:3e:d9:04:48:87:00:d5:10:70:b0:
f2:a4:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:11:01 2026 by rpki-client