
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: ZQsEayGcKjxKUbLF+6/Si19MX7BJcnvOdE3RTQMFuIY=
Subject key identifier: 93:45:5D:E7:34:3B:11:16:E1:97:60:BD:A7:08:E2:BA:E5:C5:B3:F0
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: EF
Signing time: Fri 17 Apr 2026 06:09:28 +0000
Manifest this update: Fri 17 Apr 2026 06:09:28 +0000
Manifest next update: Fri 24 Apr 2026 06:09:28 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: xShBSIo0Y5jOpeJBK5mfh8kVixbSuxFHsE3u/dXX/08=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: Apr 17 06:09:28 2026 GMT
Not After : Apr 24 06:09:28 2026 GMT
Subject: CN=69e1ce98-0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:a1:69:e7:a4:de:cb:c3:30:50:93:37:bf:
d5:7e:00:ea:27:a4:30:72:0b:83:47:35:60:7b:e3:
ca:4f:df:a6:03:88:bd:2c:a8:44:2c:f5:d4:92:83:
5a:5e:b1:17:da:fe:13:3f:04:22:d6:c8:7a:d7:f5:
bf:cd:80:fa:20:a7:f8:14:09:56:df:4b:e5:f7:82:
36:45:ba:5c:47:46:68:d8:3b:1c:f5:ab:1e:c0:ed:
66:b4:c9:b3:3b:b7:a9:cf:9f:02:69:d0:9b:a3:12:
01:29:42:81:c4:01:e7:8a:be:3a:2b:62:b7:72:2e:
85:b8:5a:80:e6:f4:35:17:ec:7b:a8:7f:e5:73:eb:
a0:36:09:32:65:fb:52:e3:15:a0:5f:7e:46:0f:56:
91:da:f2:cc:43:9b:10:60:53:9d:60:25:f8:7e:f2:
85:c6:03:20:b6:c3:a8:40:5a:f6:5f:20:70:fe:12:
32:f0:6c:05:7d:ca:84:cf:c7:b8:10:79:48:a0:86:
b8:18:96:4a:29:63:cc:42:9c:5f:fc:c9:18:a5:f8:
ad:b6:39:12:74:9c:0f:a2:94:a7:97:f7:29:b8:5b:
d3:7c:57:6d:08:c0:96:3b:42:7c:6c:cb:4e:a1:9b:
a5:0e:66:05:1e:d4:a9:f0:2b:36:3a:d6:c7:34:23:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:5D:E7:34:3B:11:16:E1:97:60:BD:A7:08:E2:BA:E5:C5:B3:F0
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:76:9d:d8:c1:d1:2f:78:ad:89:0e:6b:e9:36:80:c8:0f:
99:6c:60:aa:aa:eb:60:58:48:0b:78:b7:7a:9f:2a:81:db:74:
74:d1:c9:ec:06:db:6a:0a:0c:56:23:c5:3f:95:9e:09:42:ab:
ab:1a:9a:1b:fa:7a:3e:6d:6c:fa:a6:d6:99:fa:fb:23:fa:1d:
77:66:70:0e:ba:63:5d:23:29:b3:05:1d:15:38:ed:b9:9c:98:
b2:be:72:72:88:c7:67:c3:64:c8:15:b4:2e:e4:31:db:95:92:
90:ae:32:11:48:a2:7a:ad:9d:7c:77:5c:b2:03:a4:9a:de:1b:
60:9c:69:ee:2b:28:29:9b:b3:60:48:da:23:55:8f:2e:67:e8:
57:3c:07:d3:a1:0c:ed:7e:94:df:ac:cb:a1:3c:5a:d4:fa:55:
61:fd:8c:ff:6b:cd:d9:3c:f0:4e:05:d5:d1:73:5b:14:7c:ac:
fe:ed:3f:14:57:0d:66:74:fe:fd:ca:5d:45:32:e9:5b:58:05:
ed:1e:22:15:be:83:2b:41:d9:fa:c6:05:20:ec:43:41:34:6b:
52:a5:45:4e:57:02:f1:4d:cd:72:33:9d:5c:0f:60:e4:ed:fa:
4f:49:f6:a5:53:c9:d8:1d:da:c4:48:74:94:38:c8:f8:6c:9f:
8b:53:27:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy
NUIyOTMxNjAwHhcNMjYwNDE3MDYwOTI4WhcNMjYwNDI0MDYwOTI4WjAYMRYwFAYD
VQQDEw02OWUxY2U5OC0wNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2Chaeek3svDMFCTN7/VfgDqJ6QwcguDRzVge+PKT9+mA4i9LKhELPXUkoNa
XrEX2v4TPwQi1sh61/W/zYD6IKf4FAlW30vl94I2RbpcR0Zo2Dsc9asewO1mtMmz
O7epz58CadCboxIBKUKBxAHnir46K2K3ci6FuFqA5vQ1F+x7qH/lc+ugNgkyZftS
4xWgX35GD1aR2vLMQ5sQYFOdYCX4fvKFxgMgtsOoQFr2XyBw/hIy8GwFfcqEz8e4
EHlIoIa4GJZKKWPMQpxf/MkYpfittjkSdJwPopSnl/cpuFvTfFdtCMCWO0J8bMtO
oZulDmYFHtSp8Cs2OtbHNCNUMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNFXec0
OxEW4ZdgvacI4rrlxbPwMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS
R0h0b1dPdklId1lsc3BNV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh4d2ndjB0S94rYkOa+k2gMgPmWxgqqrrYFhIC3i3ep8qgdt0dNHJ7AbbagoM
ViPFP5WeCUKrqxqaG/p6Pm1s+qbWmfr7I/odd2ZwDrpjXSMpswUdFTjtuZyYsr5y
cojHZ8NkyBW0LuQx25WSkK4yEUiieq2dfHdcsgOkmt4bYJxp7isoKZuzYEjaI1WP
LmfoVzwH06EM7X6U36zLoTxa1PpVYf2M/2vN2TzwTgXV0XNbFHys/u0/FFcNZnT+
/cpdRTLpW1gF7R4iFb6DK0HZ+sYFIOxDQTRrUqVFTlcC8U3NcjOdXA9g5O36T0n2
pVPJ2B3axEh0lDjI+Gyfi1MnYw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:54 2026 by rpki-client