
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier: dmEuXPJ+xUs9V1z7d4dF+K3Zkyopxsx3ry1cCsLgjC0=
Subject key identifier: 82:A4:6E:24:44:BF:B6:6B:7A:56:C2:D9:BA:08:7D:03:78:70:C3:F5
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number: 02A5
Signing time: Mon 21 Sep 2026 01:57:59 +0000
Manifest this update: Mon 21 Sep 2026 01:57:59 +0000
Manifest next update: Mon 28 Sep 2026 01:57:59 +0000
Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: 4N08+5k7gHJ1TVJ97rDIbSZBmDxZa+m2tIlr78jWcSQ=)
2: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: 20nujIzl+CA8w05nEFFC5K5q9fFkxYmC8tuXnrC1GWI=)
3: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: tow/qmOQ/9yiGU7J1jkBreLst3yXf8HbYJ89yXWzR5w=)
4: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: CcUbFuf1lNiH/+6gAJiToEGq81cMwH8NK/XgCCC726g=)
5: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: UMbEQFIpkJvqmK0HuzuHRzu+g80Gef2sVvm2DbI4gV0=)
6: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: CZCiFwljilvMJvt94AUk+cDZYd5AEqR+L8VAnnEflzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Sep 21 01:57:59 2026 GMT
Not After : Sep 28 01:57:59 2026 GMT
Subject: CN=6ab08f27-954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:37:79:19:3c:fe:a5:8f:e9:2e:cc:f6:0b:
83:b3:3e:40:e7:45:0b:c9:ba:71:e5:35:55:5f:75:
f1:04:64:d1:6c:e0:2b:7b:c8:aa:3c:ae:39:ba:38:
ab:f9:da:d2:c9:d3:ef:42:02:1e:a7:2c:38:ff:e2:
1e:83:d6:37:9e:3d:0c:4f:1c:b9:e8:8b:96:31:0a:
06:21:ca:59:8b:0e:a6:39:65:75:98:a5:50:1c:57:
63:ec:d4:99:43:ef:3e:8e:8a:20:6b:4f:c8:28:f2:
60:70:3c:5d:03:f3:1f:91:6f:45:51:61:40:6d:20:
a2:aa:12:b4:c7:74:ab:45:76:10:1a:0f:d2:3c:1d:
01:63:c0:3c:28:77:3e:97:0c:96:29:4a:9c:d3:60:
b6:58:bc:08:a8:88:f0:d6:3e:38:f8:6e:e8:d0:6b:
9a:66:d3:94:1b:eb:79:1a:0c:a5:f9:a9:82:40:31:
6e:52:ae:0c:0d:76:45:b3:cc:91:28:48:34:02:70:
f1:e2:e5:86:c4:9b:2d:89:5a:c8:a6:b1:e9:d7:79:
64:6f:a0:65:dc:d0:6f:9b:86:3a:47:32:c4:b8:b5:
58:b8:72:1b:29:8d:97:a5:b2:b4:b3:c9:d6:da:ef:
92:b0:23:05:6f:eb:dc:4b:b8:e7:fc:81:47:a4:40:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:6E:24:44:BF:B6:6B:7A:56:C2:D9:BA:08:7D:03:78:70:C3:F5
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bd:e3:76:f0:54:00:63:48:e9:24:d6:f5:01:88:85:0f:3d:
6c:f6:4c:3c:66:9e:bf:f5:58:27:ac:38:d7:a6:d2:3f:0a:77:
d0:aa:ba:ab:72:8f:ce:54:1c:ae:fb:f4:76:1c:fc:a7:d6:f5:
df:63:0f:03:cd:08:f5:ac:a3:8d:35:61:72:bb:ca:35:fb:69:
87:1f:f5:5f:f1:55:a7:00:c7:e5:9a:82:21:ea:76:f6:47:14:
01:39:b6:01:0b:08:bc:ff:5c:12:3c:92:6a:2a:a1:bb:78:71:
34:5c:ff:8b:29:5b:f8:17:fd:01:05:fa:d1:11:29:71:82:f7:
28:62:f3:d5:4b:32:f7:5e:c5:53:b9:72:a2:14:0e:41:12:e6:
07:c0:61:cf:89:01:66:6d:09:db:d4:ab:a8:bc:ef:fa:21:e3:
b4:ac:71:5c:0e:c4:7f:36:ab:ba:0f:16:8a:af:71:ab:16:ae:
a5:f5:6b:cf:24:34:54:dc:33:9c:d0:23:10:74:52:f3:02:28:
75:cc:d0:a2:16:7b:d3:24:01:e1:7c:39:f8:c3:96:9b:0b:c7:
c3:c9:11:3e:86:5c:68:4c:32:2d:75:b3:2b:c3:f6:15:b3:41:
3e:8a:55:65:75:36:e8:b7:2e:be:df:a1:41:ec:06:4e:73:75:
25:32:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:13 2026 by rpki-client