
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: HFkUDCu4quU3KBNBLJ2HnhLSDxasSu9gXfBDR8cgU20=
Subject key identifier: 02:1F:3F:E0:8E:7B:E8:B1:26:0E:1D:DD:98:98:DA:3B:E3:C7:A0:A4
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 074F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 073F
Signing time: Wed 22 Jul 2026 22:27:13 +0000
Manifest this update: Wed 22 Jul 2026 22:27:13 +0000
Manifest next update: Wed 29 Jul 2026 22:27:13 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: HL+ZnGlFyM9u+QfWdFJOe2ykmQiuDOYLtuo0uRZnPmA=)
2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: C0leLcL5XAeuq6qwaXMLO1xziKzhUjhh+w08AfqJr64=)
3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: b8Yrg5yhwwS9mUXMLcQ3eIUl5GT4DbquZ+/h34i5hc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Jul 22 22:27:13 2026 GMT
Not After : Jul 29 22:27:13 2026 GMT
Subject: CN=6a6143c1-1e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:b1:e3:66:d1:3a:af:b1:23:b1:93:84:f3:
cc:6a:d1:d7:ee:15:44:82:b3:26:b8:85:09:8a:cd:
d4:17:5a:3b:5c:86:dc:f5:f8:33:f4:10:d2:8f:4f:
f5:49:61:10:54:a2:7c:84:45:4b:29:bf:b8:00:ad:
54:93:09:d7:61:1d:28:47:28:57:c5:14:50:d3:03:
68:9e:ee:6a:6c:28:63:e0:e1:58:ef:a9:e6:2e:74:
40:8a:31:aa:9a:fd:d1:08:5c:ec:42:46:a5:72:6b:
be:b4:bb:d1:e0:6d:9f:78:7c:da:bf:17:87:cf:68:
70:a0:4e:c0:6a:f6:bd:d8:35:0b:a0:ba:e8:ed:80:
00:82:06:18:16:68:63:49:f6:a3:21:b0:7f:03:46:
38:7a:93:d0:67:45:13:11:d0:1b:e6:cd:3a:bb:1a:
c3:fc:28:34:49:49:d6:0b:eb:c4:b7:43:d6:44:d1:
53:43:8b:7f:0c:77:1a:87:ba:5d:60:72:27:46:df:
ed:96:5c:dc:c2:5f:e0:29:61:68:bf:87:1f:13:01:
4d:2f:5a:12:75:7e:57:da:f4:5a:15:f3:aa:02:3b:
8b:3a:74:0a:fc:bb:3e:a3:22:30:e6:1f:9c:67:9c:
f5:32:00:0e:2d:fd:d4:58:31:8a:f2:a4:01:9e:1b:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1F:3F:E0:8E:7B:E8:B1:26:0E:1D:DD:98:98:DA:3B:E3:C7:A0:A4
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:86:92:8c:f2:ce:d6:ef:c5:fe:f4:e4:1d:d4:43:ff:78:38:
41:ab:c6:5a:de:cb:92:cb:c6:38:72:41:b7:a6:be:3f:5d:11:
ef:f2:72:b1:41:3e:73:68:b6:c0:48:7d:61:94:71:30:7a:36:
9a:cf:90:88:2b:a5:20:42:90:dc:83:cd:40:20:d7:c5:e1:ad:
4a:40:b3:84:cf:87:bc:16:3f:99:d9:87:c1:40:af:3a:25:9d:
52:f4:89:5b:6c:45:2e:82:e8:6f:13:c7:28:c1:0d:d3:ca:e0:
c3:4e:15:66:fc:fe:37:04:9c:1d:8b:eb:d6:07:f1:03:85:e3:
d6:ae:c8:e3:bf:34:09:88:a3:ee:8c:25:11:38:05:5f:28:9b:
cd:42:98:bc:71:53:1f:1f:86:b7:65:ea:97:fa:ad:51:ab:d5:
81:c1:ee:e0:42:7b:00:8e:9d:1a:7f:e3:b9:9c:1c:bf:2c:78:
54:0f:41:bd:0d:42:8f:9c:89:a5:62:a4:0e:27:70:f5:61:cf:
52:7b:5b:05:e1:45:49:12:ce:ed:07:49:c1:5c:1e:7e:4a:e1:
85:83:a6:12:6d:0a:3d:35:74:10:74:34:d9:8a:9e:24:07:ae:
8d:85:be:81:e5:fb:89:e7:98:2b:3b:fd:e7:06:38:3d:c2:ef:
27:71:c2:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw
QTUyOEVEQzAwHhcNMjYwNzIyMjIyNzEzWhcNMjYwNzI5MjIyNzEzWjAYMRYwFAYD
VQQDEw02YTYxNDNjMS0xZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1G2x42bROq+xI7GThPPMatHX7hVEgrMmuIUJis3UF1o7XIbc9fgz9BDSj0/1
SWEQVKJ8hEVLKb+4AK1UkwnXYR0oRyhXxRRQ0wNonu5qbChj4OFY76nmLnRAijGq
mv3RCFzsQkalcmu+tLvR4G2feHzavxeHz2hwoE7Aava92DULoLro7YAAggYYFmhj
SfajIbB/A0Y4epPQZ0UTEdAb5s06uxrD/Cg0SUnWC+vEt0PWRNFTQ4t/DHcah7pd
YHInRt/tllzcwl/gKWFov4cfEwFNL1oSdX5X2vRaFfOqAjuLOnQK/Ls+oyIw5h+c
Z5z1MgAOLf3UWDGK8qQBnhuYbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIfP+CO
e+ixJg4d3ZiY2jvjx6CkMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw
N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL
Y1BrNlhMY0xabWdLVW83Y0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeoaSjPLO1u/F/vTkHdRD/3g4QavGWt7LksvGOHJBt6a+P10R7/JysUE+c2i2
wEh9YZRxMHo2ms+QiCulIEKQ3IPNQCDXxeGtSkCzhM+HvBY/mdmHwUCvOiWdUvSJ
W2xFLoLobxPHKMEN08rgw04VZvz+NwScHYvr1gfxA4Xj1q7I4780CYij7owlETgF
XyibzUKYvHFTHx+Gt2Xql/qtUavVgcHu4EJ7AI6dGn/juZwcvyx4VA9BvQ1Cj5yJ
pWKkDidw9WHPUntbBeFFSRLO7QdJwVwefkrhhYOmEm0KPTV0EHQ02YqeJAeujYW+
geX7ieeYKzv95wY4PcLvJ3HC/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:47 2026 by rpki-client