
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: hx6J202lKwjothAgot/+DMm5lJMplPdOZ8LEX/p+uR4=
Subject key identifier: F2:57:3C:08:5B:16:81:B0:49:EC:1D:A8:D9:D3:03:F4:FB:ED:B8:BB
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 013E
Signing time: Sun 27 Sep 2026 05:59:09 +0000
Manifest this update: Sun 27 Sep 2026 05:59:08 +0000
Manifest next update: Sun 04 Oct 2026 05:59:08 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: SDKAEzGrla7QClyjLoBQFfI8CQPHk24lNsxZaYBkOCo=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: JR5JClq7chMyYoSY5HGuRuQlhxcZo3ZwY9LxeSVkDGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Sep 27 05:59:08 2026 GMT
Not After : Oct 4 05:59:08 2026 GMT
Subject: CN=6ab8b0ac-7bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:06:51:70:ae:bc:86:c4:70:2e:ad:0e:80:
9c:8d:48:96:ce:28:85:45:b5:a7:74:37:b6:fb:18:
43:8d:97:44:76:57:43:f3:dc:fd:66:55:2d:0f:65:
7e:7c:ac:fc:c4:96:99:eb:57:b2:8c:a1:b9:dd:1e:
90:7e:d9:09:7f:34:dd:e1:8d:c1:49:3d:3a:d9:9a:
3c:89:9c:e9:32:c6:d1:b3:6f:50:2d:1e:af:a5:0c:
6c:fa:e7:4e:b0:0f:b3:0e:ea:2c:5a:39:f5:94:84:
15:b9:06:31:f1:5f:27:62:b5:6c:a1:3e:e2:eb:e3:
d0:e9:f4:af:08:6f:96:19:00:d5:e2:03:78:c7:ee:
11:01:9e:2d:ba:49:38:4c:1f:f3:3b:0d:09:30:54:
48:2c:c7:9e:a4:8f:84:df:e2:61:55:3f:8e:91:2b:
1a:ba:8d:59:43:92:ce:9e:0b:b9:fd:ae:9a:65:a5:
48:13:d2:cd:7e:27:a4:17:a8:ef:f0:61:b3:71:15:
b8:04:34:00:5f:39:25:9d:87:a1:81:b7:07:0f:32:
18:48:a3:d8:bc:66:a4:52:22:ae:f3:29:b0:87:f0:
8f:b0:21:77:bb:78:ed:56:8b:74:79:0c:63:bf:b5:
07:2a:f2:a4:7a:d4:27:89:4c:f6:e2:cc:a3:46:6e:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:3C:08:5B:16:81:B0:49:EC:1D:A8:D9:D3:03:F4:FB:ED:B8:BB
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6c:6d:66:13:16:38:fc:a3:0b:06:43:ec:cf:eb:3c:2d:88:
b7:ed:b4:41:b8:4a:36:69:99:5c:d9:f1:50:1f:21:5e:20:9f:
03:87:b2:05:a6:56:2b:f6:df:52:72:2e:ce:07:f8:a4:f5:89:
ff:b2:17:39:1d:9d:eb:95:07:a0:c9:46:91:12:18:fb:ab:26:
05:12:67:a4:8f:16:08:0e:8f:81:98:b2:28:c2:fc:03:8b:37:
0b:b8:ba:70:40:b3:a3:d9:e1:ec:a9:16:cf:60:d8:ba:10:56:
5a:fe:d1:0c:c1:af:27:3c:29:4a:4b:06:58:3c:8f:b3:22:00:
83:ed:73:73:5d:10:6d:15:3e:35:4f:c7:88:29:ca:35:ba:0a:
2f:51:92:f9:b3:ec:66:ba:ef:bd:04:f2:3b:7d:37:39:70:ea:
a8:90:fa:7e:5c:c3:19:0c:ea:97:ca:64:87:0b:6f:2d:0a:cc:
7f:0e:88:b1:13:f4:8d:56:b6:13:cf:9c:f8:5c:54:1a:cd:a1:
d9:42:33:cb:99:bd:39:41:a2:c5:54:40:76:66:39:ac:bf:e4:
36:a5:84:e2:48:4a:58:4e:2d:6c:d6:15:80:f2:07:e8:6a:cf:
e0:96:2c:06:fd:a5:f3:1c:c9:06:11:24:c3:22:0b:62:46:11:
16:3f:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:37:04 2026 by rpki-client