
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: R1E66I0Ll/n3TWvdC2xf8GzPXw5lSoI3wknfDDxJj6c=
Subject key identifier: 2B:45:94:41:AD:79:E4:2C:34:84:8D:25:7D:E8:89:B2:53:43:A8:23
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: 0122
Signing time: Wed 29 Jul 2026 07:11:52 +0000
Manifest this update: Wed 29 Jul 2026 07:11:52 +0000
Manifest next update: Wed 05 Aug 2026 07:11:52 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: fY128rQLPWK1mybOgwzQReP+LWVep4Bv3kCB1QIU5+g=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: Jul 29 07:11:52 2026 GMT
Not After : Aug 5 07:11:52 2026 GMT
Subject: CN=6a69a7b8-25dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:4e:36:c6:80:f7:cf:4d:89:16:1b:ed:d0:
52:4e:16:e1:87:aa:e0:19:29:7d:bf:0b:0b:8e:be:
96:00:f2:20:2e:d3:9c:66:fa:46:20:ba:df:5d:38:
d3:72:19:13:6c:6a:5a:4a:bc:1c:70:d7:a7:8d:18:
4e:e5:63:5a:6d:1e:2b:1e:26:1c:ed:28:d0:03:bb:
e8:07:59:c0:d7:34:c6:82:0e:88:9e:37:39:a8:06:
d3:ed:d8:d6:43:aa:d5:56:de:04:7a:1e:2f:ba:9e:
dc:d7:a7:68:02:76:8e:64:c7:8b:b7:a3:67:f2:e5:
56:a7:3b:72:08:86:a5:4b:08:e6:7a:1e:9f:ee:8f:
8f:10:7d:fb:08:61:41:86:ad:f3:48:a9:57:ce:45:
21:79:b7:a3:44:a4:38:8b:19:58:ed:b0:57:9a:16:
d5:9f:e0:f6:45:1d:61:14:62:a5:f7:ea:cc:fd:d1:
b6:ae:68:88:56:74:c9:01:19:e5:02:92:42:f4:90:
72:df:05:a1:b5:bc:14:78:50:16:82:b6:76:36:fc:
53:f6:1e:c1:06:99:cc:55:4f:f0:9d:0a:fe:90:c3:
3d:e0:a3:41:93:c0:8c:5d:ed:df:a0:b2:aa:d3:38:
f2:b0:fe:0b:03:c6:b7:f6:df:4c:67:e0:75:28:bb:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:94:41:AD:79:E4:2C:34:84:8D:25:7D:E8:89:B2:53:43:A8:23
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:15:8d:db:35:f8:6d:93:a8:a2:e7:1d:ef:95:32:4b:a9:f0:
d8:1e:9c:7e:e6:35:5d:25:ea:01:6c:dc:2c:58:03:42:fc:73:
73:28:58:89:6f:91:13:9a:b5:f0:98:1d:37:56:15:c1:6b:5f:
54:f4:79:d9:a6:6e:6c:e7:32:78:d4:eb:4b:fb:c7:36:2a:5f:
ac:ba:7d:28:8e:4d:3d:67:1e:2b:24:d8:9b:0d:35:a5:ef:21:
62:fd:4e:79:d6:c9:3e:31:13:72:25:b0:da:4c:2c:4b:ad:07:
44:5f:3e:92:81:44:8e:5c:e0:c2:3a:27:bf:23:ab:49:b6:31:
5e:30:32:5e:64:3b:83:4f:7b:01:82:13:76:ad:f6:3d:dc:a1:
1c:f5:97:87:97:0a:42:70:5e:e4:88:66:f1:a1:39:34:5d:15:
82:ee:8b:43:c4:b5:4b:8b:70:86:64:61:e3:f6:da:87:a0:56:
ad:40:1f:c4:32:9d:b5:b7:8a:57:91:a5:99:98:8d:9a:a1:f2:
38:cf:4a:f9:b2:b9:f4:3f:f2:88:87:6c:48:eb:29:2c:ab:4b:
e2:d7:22:98:33:b5:f5:74:8e:04:28:2d:49:e7:bb:74:12:c7:
57:ec:f7:f7:f2:2a:a9:32:b2:f1:85:92:86:46:98:d4:6c:2d:
df:48:ff:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy
NUIyOTMxNjAwHhcNMjYwNzI5MDcxMTUyWhcNMjYwODA1MDcxMTUyWjAYMRYwFAYD
VQQDEw02YTY5YTdiOC0yNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8jdONsaA989NiRYb7dBSThbhh6rgGSl9vwsLjr6WAPIgLtOcZvpGILrfXTjT
chkTbGpaSrwccNenjRhO5WNabR4rHiYc7SjQA7voB1nA1zTGgg6Injc5qAbT7djW
Q6rVVt4Eeh4vup7c16doAnaOZMeLt6Nn8uVWpztyCIalSwjmeh6f7o+PEH37CGFB
hq3zSKlXzkUhebejRKQ4ixlY7bBXmhbVn+D2RR1hFGKl9+rM/dG2rmiIVnTJARnl
ApJC9JBy3wWhtbwUeFAWgrZ2NvxT9h7BBpnMVU/wnQr+kMM94KNBk8CMXe3foLKq
0zjysP4LA8a39t9MZ+B1KLuhYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtFlEGt
eeQsNISNJX3oibJTQ6gjMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS
R0h0b1dPdklId1lsc3BNV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAthWN2zX4bZOooucd75UyS6nw2B6cfuY1XSXqAWzcLFgDQvxzcyhYiW+RE5q1
8JgdN1YVwWtfVPR52aZubOcyeNTrS/vHNipfrLp9KI5NPWceKyTYmw01pe8hYv1O
edbJPjETciWw2kwsS60HRF8+koFEjlzgwjonvyOrSbYxXjAyXmQ7g097AYITdq32
PdyhHPWXh5cKQnBe5Ihm8aE5NF0Vgu6LQ8S1S4twhmRh4/bah6BWrUAfxDKdtbeK
V5GlmZiNmqHyOM9K+bK59D/yiIdsSOspLKtL4tcimDO19XSOBCgtSee7dBLHV+z3
9/IqqTKy8YWShkaY1Gwt30j/fw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:14:12 2026 by rpki-client