
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json)
Hash identifier: BD05cHxZdAeyYb+BU1Mhr4OKbMBwj18D8LsUzmd6GKo=
Subject key identifier: B0:7A:AA:19:8C:0C:0D:19:79:57:7C:38:DC:24:FB:85:75:20:5B:8A
Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Certificate serial: 0D44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
Manifest number: 0D38
Signing time: Thu 24 Sep 2026 18:09:18 +0000
Manifest this update: Thu 24 Sep 2026 18:09:18 +0000
Manifest next update: Thu 01 Oct 2026 18:09:18 +0000
Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: ZNGIQQcpsPIuR/D2nWHuq5SZP/KtIqkKw8ChQWNNuWk=)
2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: v4JJqmVnA1Gl+V2/Swavhny8pf1dKrgrSE3o8it+IXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6
Validity
Not Before: Sep 24 18:09:18 2026 GMT
Not After : Oct 1 18:09:18 2026 GMT
Subject: CN=6ab5674e-3f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:df:03:df:ed:12:55:8e:2b:b6:21:d5:c3:
c0:40:5b:76:3a:16:2d:f3:2e:1f:65:b1:a9:d3:27:
23:14:ac:f5:30:77:ec:80:6b:23:7c:78:df:34:4d:
f7:0f:d1:08:1e:e7:4b:26:e8:2b:5f:41:c5:eb:6e:
80:20:78:9c:e2:22:16:f4:4d:76:6a:2f:57:eb:28:
d0:a8:42:f9:14:38:31:22:2b:b6:b5:36:22:8b:6f:
34:06:b4:6f:ee:3d:e4:ac:ec:44:da:50:e3:67:5a:
3b:6d:36:e7:8b:09:74:b8:b1:26:63:30:a9:73:f5:
61:51:64:ae:0f:3e:88:e2:58:61:65:33:af:f6:5c:
40:6a:fd:6a:a9:de:4e:18:9c:07:a9:45:d1:7f:e8:
ec:58:4a:db:69:9e:e1:d3:05:49:3d:fd:67:6c:16:
8e:ec:7a:19:11:ea:87:15:09:ff:8f:7c:df:92:b1:
e6:96:ac:12:f4:73:3d:6b:1f:a1:c2:27:51:73:d8:
a6:b8:ae:bf:30:2a:d0:0e:ba:c0:da:d1:e0:a1:03:
0d:0e:67:df:17:15:fd:e2:08:2f:93:67:35:bf:03:
c8:6b:11:f0:e8:a1:68:91:90:da:a0:8f:08:1e:0b:
7f:9d:90:e5:4a:e6:b7:09:d5:17:44:82:88:5f:25:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:AA:19:8C:0C:0D:19:79:57:7C:38:DC:24:FB:85:75:20:5B:8A
X509v3 Authority Key Identifier:
keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a3:2b:7a:e2:83:b5:48:36:c2:49:16:c8:3a:36:67:bb:76:
df:6c:6a:cb:29:e4:9c:2c:73:49:82:8b:06:21:a5:c6:04:06:
25:17:c1:d9:b7:a9:78:21:4b:b3:2e:18:9f:da:a0:eb:9c:d2:
5b:df:89:53:93:24:87:b5:ce:27:b8:ca:0a:63:8c:e3:62:f6:
28:45:2e:2a:7a:b0:1a:01:3e:84:7e:06:07:bc:ee:2f:b6:68:
32:bf:f4:40:2d:01:e3:36:6b:78:28:7e:b0:7d:de:bf:7e:44:
38:63:d5:8f:1c:11:cc:16:96:01:15:ba:8c:8d:a6:48:b6:8f:
81:11:e0:25:1c:f8:18:f6:af:d5:11:fd:06:0f:ae:74:dc:5b:
f3:78:93:c6:5e:37:93:b9:5c:32:2d:03:07:85:60:3f:8b:4a:
24:18:d1:03:0c:3f:e0:63:5e:99:f6:7d:47:2b:62:da:00:8d:
60:c7:52:82:fb:51:f1:f1:7a:9f:29:62:a4:c9:51:f3:c1:b2:
77:4a:29:0a:4b:46:0a:ba:27:b9:ec:c1:89:a1:7c:85:f2:d8:
02:de:88:d5:de:f9:5c:d7:37:34:6a:a8:90:76:dd:80:0b:21:
93:5d:1f:c5:dc:9b:16:e8:b4:d8:13:c6:21:5e:7a:c7:02:00:
c2:22:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:31:55 2026 by rpki-client