
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: I4NyA1MEXyN5Ibg89375NVPjNaIbWQXIpk3Gkiwy4xw=
Subject key identifier: C8:7F:E4:3C:FD:A5:36:11:17:94:65:E0:31:D2:03:60:66:8C:3C:75
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: 011D
Signing time: Wed 29 Jul 2026 07:12:02 +0000
Manifest this update: Wed 29 Jul 2026 07:12:02 +0000
Manifest next update: Wed 05 Aug 2026 07:12:02 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: 3QJNoAQAawXP7aPEJBquNs00mWFYUnfzYLlHGUjNWvY=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: y/d4ENW45K+wLuEcJR7g6U0WWFs54zradi3gAEB43Fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Jul 29 07:12:02 2026 GMT
Not After : Aug 5 07:12:02 2026 GMT
Subject: CN=6a69a7c2-d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:09:2c:39:ba:7b:dc:d0:8b:09:f3:2d:ee:
f5:cb:ba:44:82:9e:3b:bf:b5:db:58:39:bc:bd:6d:
7d:ee:25:6a:94:b3:ce:74:c0:b0:6b:e3:5f:04:74:
eb:ca:67:c1:32:45:79:37:b0:76:aa:ba:39:d7:a4:
60:b0:0c:a2:49:78:2c:b0:58:e2:77:41:76:13:15:
07:a7:a2:9c:24:04:c1:b8:ed:0f:47:54:be:25:5e:
53:84:7f:a4:be:d6:ae:03:45:b4:95:4b:24:a9:b8:
ca:ee:5f:ba:88:c5:83:ae:ee:3d:19:04:3d:fb:10:
78:be:32:80:13:d0:24:c4:47:ca:e1:7d:14:47:cd:
5b:d9:ed:1d:dc:72:b5:35:30:f6:06:19:20:c4:3a:
4c:62:cf:4e:6e:bc:76:4d:27:36:3f:18:b2:5c:59:
f3:ab:e9:82:30:71:56:cd:af:ee:05:98:e9:7f:eb:
06:d8:28:07:ca:13:0c:9f:a8:d0:26:b3:a5:1b:c8:
ef:42:9a:32:2b:63:37:21:f9:b1:14:1c:85:b0:9a:
a7:21:fe:67:cc:bc:88:2a:cb:85:d7:5c:08:fe:c5:
46:ad:b0:b7:28:d6:76:34:e4:8d:98:16:23:db:3e:
9a:87:8a:f8:4f:54:fa:95:a4:b6:1a:4b:a8:01:45:
f6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7F:E4:3C:FD:A5:36:11:17:94:65:E0:31:D2:03:60:66:8C:3C:75
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d1:5d:da:a0:85:ab:e3:73:81:1a:26:4d:3c:9c:88:3e:0c:
75:62:2d:2b:66:27:33:da:e9:ee:86:7d:fd:59:83:aa:86:fb:
5d:fe:72:b6:10:bf:4a:ca:c1:a7:dd:e1:ae:c0:f9:44:90:77:
bf:b6:a5:14:61:16:b8:91:ab:e7:7f:aa:f7:b0:6e:5e:f8:fb:
7e:10:a3:9b:51:a3:ae:96:44:28:36:3e:7f:1b:66:df:51:eb:
90:2a:bf:ad:08:7b:ef:c5:b8:48:aa:09:a3:80:4f:77:d5:78:
98:36:00:c9:d5:c4:3c:40:28:4b:c3:d1:70:e4:56:03:4e:6e:
40:2d:6e:70:a6:f4:32:5e:9a:34:8e:76:34:c2:36:95:ca:de:
8f:dc:21:9b:54:66:3e:79:cb:9d:a6:04:36:35:4f:d4:7b:0d:
c4:c9:29:ae:be:18:ea:d2:ed:81:2e:70:7f:80:8a:53:9c:ba:
cf:04:30:4f:7a:84:24:31:1e:40:b1:04:6b:19:c6:20:29:31:
b8:db:87:a6:50:42:68:04:e6:db:48:c8:39:6f:2a:b3:0e:73:
3b:02:75:d0:9f:e2:4f:7d:a9:8d:62:bd:31:69:98:eb:31:a8:
47:b1:f9:2d:8c:6e:25:a4:60:d9:14:b2:f0:7c:f4:a2:ae:de:
7d:05:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:59 2026 by rpki-client