
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: LX2vWq83BAcmPJs2yI/+5rTQRomln4kIH/yGABkKhXY=
Subject key identifier: 43:4F:49:23:3F:E3:85:C9:C6:E2:C1:2C:BC:83:2B:B4:0B:13:53:29
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 06E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 06DE
Signing time: Thu 16 Apr 2026 22:07:48 +0000
Manifest this update: Thu 16 Apr 2026 22:07:48 +0000
Manifest next update: Thu 23 Apr 2026 22:07:48 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: +4nFWpPQikNwJWNV3ELm47GhL0CmVisrj4P/xgDLZkI=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766 (0x6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Apr 16 22:07:48 2026 GMT
Not After : Apr 23 22:07:48 2026 GMT
Subject: CN=69e15db4-6373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:ce:ef:64:75:f7:bd:5b:d9:02:ee:94:38:
70:39:ce:dd:d7:2d:fa:7f:92:3c:90:00:da:a3:3b:
89:0d:16:41:bb:ac:0c:f7:b1:6c:61:e7:f6:88:f6:
6b:02:06:fa:a4:1d:db:f9:28:d5:39:e0:de:c7:eb:
e2:fe:aa:d3:f0:8b:23:17:77:27:f9:b3:9f:62:27:
32:dc:e3:80:93:03:4e:37:91:75:79:53:5b:bc:3e:
48:22:d7:5a:5a:89:3a:81:f2:f0:38:5d:16:b4:dc:
21:09:16:8e:46:0d:23:dd:9f:c4:68:31:ab:19:08:
66:d1:73:53:54:22:db:55:16:d1:1f:d0:af:8f:e8:
e9:96:a4:ee:f2:c3:36:8f:12:02:bd:4f:8c:94:0d:
51:9f:bb:25:a0:aa:4b:ab:c4:26:aa:4a:c5:cf:74:
eb:c9:27:20:c7:2c:6c:eb:71:f4:ee:84:28:f6:f6:
e5:a2:8a:ee:7c:0f:e0:63:c8:84:91:38:64:fb:1d:
7a:57:17:09:52:d4:d2:5a:12:67:dc:7a:05:05:a2:
b1:23:e7:7f:0e:36:f7:ee:17:5e:cc:52:3e:a0:82:
90:7e:8d:21:f1:97:0c:3c:17:7f:26:bf:a6:49:ab:
2c:4c:0a:45:ff:35:4b:ef:fa:9f:21:8c:fd:c5:fa:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:49:23:3F:E3:85:C9:C6:E2:C1:2C:BC:83:2B:B4:0B:13:53:29
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b2:bf:7e:b3:5d:dd:24:56:3c:39:2f:4a:bd:04:57:73:f6:
6f:f3:c3:38:69:bc:af:a2:6e:3e:9f:b1:4c:4b:95:3c:47:96:
35:ba:c8:35:53:a2:4a:d9:b9:f4:0d:f2:a6:0f:10:50:8b:bc:
73:23:34:84:0d:76:48:3b:7d:b9:15:12:8d:81:81:91:f2:81:
62:46:fd:52:87:b9:bd:d6:4f:5f:d4:af:26:87:ff:ee:59:8b:
b3:f7:da:de:a3:34:15:37:b8:a7:04:b0:4c:54:bd:cd:81:c2:
08:9c:26:d3:a3:b7:2b:09:cb:db:fa:61:58:f7:ec:9d:25:a9:
08:99:e1:57:02:e5:25:16:a0:a2:b8:13:a3:09:de:80:58:37:
0b:5f:9c:62:31:ce:e0:99:02:66:b4:45:7b:74:78:c2:28:bb:
d2:b4:8c:ba:85:3d:72:f0:64:bd:22:9e:f0:e7:81:5c:a3:6b:
f7:03:cf:3a:f5:5a:c1:76:5f:23:91:bf:4f:01:73:37:06:40:
92:31:75:d3:5a:8d:33:9b:6e:bf:b4:27:d5:d8:d6:80:a4:03:
85:99:1c:f3:cf:ae:15:31:01:be:02:4c:55:e8:ca:59:3d:b2:
57:bb:75:ce:ae:3d:51:1c:c8:8c:07:88:07:2d:e3:3c:38:90:
07:6a:ff:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw
NzhCNUYwMkIwHhcNMjYwNDE2MjIwNzQ4WhcNMjYwNDIzMjIwNzQ4WjAYMRYwFAYD
VQQDEw02OWUxNWRiNC02MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3K3O72R1971b2QLulDhwOc7d1y36f5I8kADaozuJDRZBu6wM97FsYef2iPZr
Agb6pB3b+SjVOeDex+vi/qrT8IsjF3cn+bOfYicy3OOAkwNON5F1eVNbvD5IItda
Wok6gfLwOF0WtNwhCRaORg0j3Z/EaDGrGQhm0XNTVCLbVRbRH9Cvj+jplqTu8sM2
jxICvU+MlA1Rn7sloKpLq8QmqkrFz3TryScgxyxs63H07oQo9vbloorufA/gY8iE
kThk+x16VxcJUtTSWhJn3HoFBaKxI+d/Djb37hdezFI+oIKQfo0h8ZcMPBd/Jr+m
SassTApF/zVL7/qfIYz9xfoOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENPSSM/
44XJxuLBLLyDK7QLE1MpMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1
QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl
QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAebK/frNd3SRWPDkvSr0EV3P2b/PDOGm8r6JuPp+xTEuVPEeWNbrINVOiStm5
9A3ypg8QUIu8cyM0hA12SDt9uRUSjYGBkfKBYkb9Uoe5vdZPX9SvJof/7lmLs/fa
3qM0FTe4pwSwTFS9zYHCCJwm06O3KwnL2/phWPfsnSWpCJnhVwLlJRagorgTowne
gFg3C1+cYjHO4JkCZrRFe3R4wii70rSMuoU9cvBkvSKe8OeBXKNr9wPPOvVawXZf
I5G/TwFzNwZAkjF101qNM5tuv7Qn1djWgKQDhZkc88+uFTEBvgJMVejKWT2yV7t1
zq49URzIjAeIBy3jPDiQB2r/8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:56 2026 by rpki-client