
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier: FP9wZxdY40SMQRZ/Myx8grQ2SjMmiYQTXgckWEOgE08=
Subject key identifier: 4C:CA:69:32:5C:1E:FA:E1:6F:51:2F:21:17:8C:0E:F4:68:7E:6D:E5
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number: 0153
Signing time: Sun 19 Apr 2026 04:20:26 +0000
Manifest this update: Sun 19 Apr 2026 04:20:26 +0000
Manifest next update: Sun 26 Apr 2026 04:20:26 +0000
Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: EncnmReQlAFJ0ZkdnZZCBFJ3l8h8ElhHJTQ4L2Y8S8Y=)
2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: Wxf+pnMbRXmK89KrT1cPFUY8XepsRf7BgNp3XpkASBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Validity
Not Before: Apr 19 04:20:26 2026 GMT
Not After : Apr 26 04:20:26 2026 GMT
Subject: CN=69e4580a-4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:5e:12:df:7d:28:07:e6:14:b8:05:70:cf:
47:49:94:7f:5a:3b:d9:ed:ef:1e:fd:f8:3b:7e:df:
d7:78:22:69:9b:58:48:21:10:7d:a3:1f:3e:61:a2:
10:98:3a:91:7e:4d:6e:a8:13:62:4b:10:2e:d7:68:
a1:09:55:94:bf:9d:18:e4:24:ff:d4:e4:89:b5:3b:
80:c7:fe:a4:58:a3:82:bf:86:05:58:b7:ee:75:61:
6a:76:3b:38:52:dc:83:8f:50:f7:59:3f:91:dd:28:
35:87:24:4e:1b:03:98:bd:5c:45:14:6d:06:1f:03:
0e:c6:c7:bd:df:24:73:6d:ff:64:2c:79:b2:97:19:
f7:84:f9:d7:1d:63:1f:80:7c:f3:70:a9:89:94:63:
8a:e6:c1:e8:88:ca:6f:17:6b:13:f9:f8:37:c0:60:
7c:40:e3:f2:56:50:79:02:0e:9b:a1:e1:13:d4:f3:
df:fc:3c:5e:80:d2:3f:18:b3:e2:62:ed:2c:79:4a:
b4:91:f3:1b:72:d9:59:bf:51:82:48:7d:3b:f5:27:
41:f3:4c:ef:6f:25:f1:d5:be:f6:86:c2:c6:6f:2c:
f6:5b:79:d0:c0:d8:22:1a:05:87:4e:9f:87:8e:82:
44:25:13:91:a1:87:db:88:53:a5:49:c8:3c:95:54:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:69:32:5C:1E:FA:E1:6F:51:2F:21:17:8C:0E:F4:68:7E:6D:E5
X509v3 Authority Key Identifier:
keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:18:83:a3:8e:d3:5e:9e:ee:cc:bb:18:2f:1e:22:d3:02:38:
7b:5a:dd:8c:21:07:e2:68:d0:ed:42:a2:61:e7:de:3d:62:2c:
90:c4:21:7c:7b:4c:8c:16:1f:d6:e5:01:38:0d:09:8c:a7:01:
05:87:b6:0b:98:30:15:01:02:0c:31:27:3f:a8:80:6b:f0:24:
d4:f9:6a:15:a5:7c:1c:d3:31:3b:51:09:4d:68:47:7a:7a:cd:
6f:d9:ff:f5:cf:1f:4a:49:2c:46:ca:3e:d5:66:26:c3:25:ef:
e7:a7:78:6a:2c:12:6e:88:c3:68:b7:a2:c7:66:87:0b:d1:a9:
5b:5b:b4:02:eb:71:25:b3:37:74:da:57:0a:93:0a:d6:18:6f:
e2:3a:83:a3:4f:f4:1d:15:5f:aa:fc:7d:5d:32:36:7a:63:97:
2d:8f:59:66:86:64:64:aa:84:bf:e9:97:be:15:37:83:9b:90:
34:c5:ee:6e:e9:2b:4a:9b:bb:93:48:99:38:ff:67:47:7b:5c:
4e:15:1d:8b:15:9e:54:29:14:6c:1f:4f:77:a6:24:ea:7e:8f:
68:1c:9f:c5:cd:f3:55:44:fc:e3:cc:41:17:b7:ab:bb:aa:0e:
d5:c1:7c:56:8a:c0:34:7b:a7:5b:b6:01:07:90:9d:f2:57:e9:
5d:d6:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:00 2026 by rpki-client