
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: 5aDF0XR6S1lyGddmQieMWZ3gb1hsstUmLkYOa0AbFwg=
Subject key identifier: 8F:CB:DC:6C:CD:16:2D:E4:54:F2:3A:5D:AE:FB:D4:FB:2D:DE:92:0B
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 075F
Signing time: Tue 22 Sep 2026 21:28:18 +0000
Manifest this update: Tue 22 Sep 2026 21:28:18 +0000
Manifest next update: Tue 29 Sep 2026 21:28:18 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: SvMZ8UhgznjV2H5C90DLQJagwdVkyL01nbaKpogmvf0=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Sep 22 21:28:18 2026 GMT
Not After : Sep 29 21:28:18 2026 GMT
Subject: CN=6ab2f2f2-601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:eb:c6:ab:d3:f9:e9:0c:16:38:26:5e:a6:
23:65:5f:4d:0b:f0:b3:98:b9:2b:01:04:dc:02:7d:
73:1f:16:65:e6:a3:0c:d6:0a:ff:42:2c:39:20:9a:
73:62:1e:18:1d:44:e7:12:44:d5:6c:58:61:81:a6:
04:b2:93:9b:ff:0e:96:07:c5:fb:21:ba:8a:a1:30:
61:de:97:3d:5c:98:99:77:da:73:88:16:a6:4c:67:
7d:0f:a8:26:95:4e:45:59:dc:4f:58:c5:31:db:5f:
63:ae:a7:27:18:f1:c8:6f:07:f8:d7:51:89:85:ae:
7c:da:d4:1a:94:14:70:8a:e3:18:32:36:3f:80:1e:
2c:48:34:89:15:c6:8b:07:50:1e:a3:b9:29:cf:50:
c0:7b:91:59:05:92:6a:9c:13:29:9e:d7:b2:31:99:
2b:3e:e8:cf:23:75:df:9e:45:17:82:fe:92:b9:02:
bb:ea:4d:36:78:c9:18:80:fa:0c:17:99:78:f2:9b:
84:03:f5:71:4b:a7:f5:00:81:b7:aa:04:90:eb:0c:
e2:2d:ac:99:89:57:d7:1b:c1:fa:86:37:04:a5:eb:
40:87:47:78:76:4f:24:4d:69:ef:53:d9:91:6a:da:
0a:51:31:ba:1e:13:14:6f:32:3e:d1:38:1e:74:b4:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:DC:6C:CD:16:2D:E4:54:F2:3A:5D:AE:FB:D4:FB:2D:DE:92:0B
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f1:b4:f7:9b:7f:9f:9a:38:f3:9b:db:ea:fe:e8:c0:61:c3:
ff:96:1f:f8:51:9c:b3:c7:57:1e:b7:3d:40:0e:ec:f5:5a:64:
79:7f:9e:ee:d3:88:c1:d3:1c:55:70:4f:a7:b8:bf:43:77:3f:
3e:bc:c7:7f:84:a4:26:a2:28:83:19:7c:1a:be:35:9c:9c:9a:
c2:97:54:a4:b5:65:c6:d3:3e:1e:57:fb:3e:8d:dd:f1:21:e4:
01:22:27:ae:84:73:28:54:38:4f:8b:04:cb:1f:6b:1a:85:05:
58:01:d3:a9:1e:12:e0:a2:6b:0d:dd:c7:5f:00:a3:55:d4:c4:
66:29:12:70:0d:ee:b3:92:ae:c6:e5:f0:32:d5:48:b6:35:91:
27:64:af:ad:6b:35:ad:77:71:ba:c7:df:fe:76:44:1f:2e:94:
b1:8c:b3:b2:59:98:8d:e0:67:12:cb:58:a3:89:bb:8d:78:00:
b7:9c:4e:78:30:64:eb:17:70:98:0b:21:8c:fe:38:bf:01:e2:
f0:04:14:ec:e9:f0:67:94:ce:da:e8:d1:86:1b:dd:e5:36:52:
a2:d5:0a:00:a5:4b:6c:6e:43:55:b6:58:80:60:ba:0b:9f:e7:
e5:47:ba:f0:ae:cd:f9:bd:f0:81:8d:3f:26:a3:f4:16:1c:57:
6f:e2:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:58 2026 by rpki-client