
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier: Ln931+lb0KzCxZuGnajew3VrKm8AqT6S891aGGSUFco=
Subject key identifier: 82:4C:BC:5A:4C:BD:F3:C5:E8:94:D3:6D:37:50:75:88:CF:BE:2F:65
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 0280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number: 025A
Signing time: Wed 23 Sep 2026 02:18:01 +0000
Manifest this update: Wed 23 Sep 2026 02:18:01 +0000
Manifest next update: Wed 30 Sep 2026 02:18:01 +0000
Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: o06S3pmlEIXzKiSP86XrYkV1aEaW81RZMKqe18xSlpU=)
2: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=)
3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 49k7hYKPHCdkEplr/vlCkM9fSpbYLX28P/Rt2uYRTiE=)
4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=)
5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: FIImGW7D3wQcguwVtZ5iJ7aLvUHChQOr5SwPoXHVfUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640 (0x280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Sep 23 02:18:01 2026 GMT
Not After : Sep 30 02:18:01 2026 GMT
Subject: CN=6ab336d9-e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:ea:63:ff:d6:bd:31:45:db:b2:b6:7c:fb:
ab:2b:83:de:47:7b:25:ef:2a:f1:50:e8:e9:f2:7f:
3d:85:b5:82:7e:58:62:0f:42:9b:12:42:2f:de:36:
6b:7d:b8:2d:f8:16:55:cf:f8:bb:1b:64:89:2e:53:
7e:b0:2a:89:c6:69:cf:c3:3f:a9:21:3e:67:1f:a7:
57:48:6c:f1:bb:79:af:69:ac:6d:ea:89:2f:cf:28:
4c:b5:a6:29:b9:e6:07:66:f2:c4:8d:8e:9a:b9:ef:
57:32:ee:75:d3:f4:b4:12:e0:ab:8e:72:06:da:d4:
04:3c:74:06:32:89:75:7e:4c:bb:e2:25:b9:ad:92:
31:9c:ea:2d:4d:d1:36:61:13:29:f9:f7:62:40:48:
c9:ff:b2:d7:86:f4:0e:f6:45:39:88:4e:ac:30:89:
45:93:a0:4b:78:8e:93:b2:1d:dc:e4:15:50:32:b1:
be:df:f5:1a:51:42:b0:af:d8:2a:69:bd:b1:fd:60:
c1:d4:4a:4f:e9:c4:d7:4a:c4:96:fe:fd:90:27:5f:
8f:e1:5c:d5:dd:3b:bf:66:5b:75:1b:56:42:42:0b:
cf:17:e5:c8:06:03:48:af:33:a2:bb:e3:50:05:36:
b4:c3:81:91:4f:06:f7:1d:3a:8b:29:4d:8d:6a:1b:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:BC:5A:4C:BD:F3:C5:E8:94:D3:6D:37:50:75:88:CF:BE:2F:65
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:89:4c:8c:7f:40:52:0c:2c:45:10:8f:15:bb:4b:73:31:6d:
c0:bd:88:c5:99:37:8e:15:a0:17:f8:71:cb:56:ae:b5:5e:e1:
7c:d0:2c:c4:d6:64:8d:f5:49:2c:51:7f:c0:cc:b4:94:05:5e:
c4:61:9a:d1:b2:ea:33:8c:4e:2f:bc:11:7f:16:3d:a8:cc:71:
1b:f5:26:a2:c9:a8:47:f9:99:f9:fa:be:ec:98:d8:fc:c8:1f:
b7:fa:b5:35:f7:9c:35:f3:85:62:27:b9:fa:27:2f:a4:39:d1:
ab:3f:64:bc:14:15:63:d3:6d:ca:7e:21:48:cb:72:d0:ff:38:
5c:52:e8:93:b2:2b:d8:80:b4:e7:f3:a9:9a:0e:51:3d:b5:b5:
f9:d5:88:10:e7:32:47:b7:78:3d:56:e4:61:70:c1:38:75:c9:
af:de:b5:e6:f7:3b:8d:39:e7:4e:0c:db:d8:be:f0:58:e5:3e:
45:49:fb:18:06:a8:c9:b2:47:af:98:47:5b:d1:08:53:5d:2c:
62:3e:a7:b2:cd:dc:4c:c1:c5:53:17:fe:47:4a:81:3a:2f:79:
e1:2a:44:c9:7b:1d:77:d0:6e:7c:dc:15:bd:0b:f8:4a:70:78:
c3:c8:5e:75:77:bb:e7:41:68:7e:24:20:9e:88:d0:b8:66:2d:
8a:1c:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:22:20 2026 by rpki-client