
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier: WPXCRu6NeUj9V2pJDDI7y+LPfyKKD9Y65+q9OE+Ho0k=
Subject key identifier: 10:DD:CA:D2:7E:91:57:36:C0:77:30:3E:8C:99:50:1A:04:6F:4E:5F
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number: 0259
Signing time: Mon 21 Sep 2026 02:29:28 +0000
Manifest this update: Mon 21 Sep 2026 02:29:28 +0000
Manifest next update: Mon 28 Sep 2026 02:29:28 +0000
Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: 2/8FehdTYE3JUz1qfjv/k5djekVjEdlBylr09uNAJtg=)
2: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: FIImGW7D3wQcguwVtZ5iJ7aLvUHChQOr5SwPoXHVfUQ=)
3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 49k7hYKPHCdkEplr/vlCkM9fSpbYLX28P/Rt2uYRTiE=)
4: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=)
5: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Sep 21 02:29:28 2026 GMT
Not After : Sep 28 02:29:28 2026 GMT
Subject: CN=6ab09688-addb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:b0:87:0c:e2:a9:d9:43:aa:4d:90:d1:68:
0a:8d:51:0d:21:65:af:3a:82:88:3b:c5:72:ac:6f:
fb:3d:9b:cd:12:6a:9a:a9:d7:58:0d:81:c8:75:ac:
66:21:2e:0a:c4:1e:53:c0:62:b0:ac:a9:b5:8a:dd:
bd:85:40:85:f4:de:7e:f4:06:f8:72:a4:fe:54:47:
74:b6:17:ff:9a:e0:33:42:76:36:62:1b:e5:cd:a0:
10:a1:08:b5:37:9a:4b:3a:3a:e4:d8:b0:db:9d:a0:
45:a3:e8:7a:81:20:3d:2c:80:d6:44:a6:c9:d4:6b:
0d:83:d5:e8:1f:11:25:66:af:e3:dc:f4:65:c5:40:
c5:64:39:49:fc:42:5d:26:74:96:38:b6:c4:4d:33:
5c:80:56:d6:fa:73:e0:eb:c6:fe:2b:33:5d:c0:05:
6e:da:f5:b8:c9:01:e8:14:10:cd:0e:67:3f:7f:ba:
7c:62:50:4e:c4:ae:26:3a:07:1b:bc:c0:ca:fe:8a:
aa:f3:ef:b2:f4:01:7d:47:d3:47:19:ef:bc:61:e3:
c1:0e:87:3d:55:f8:6c:d0:5a:6b:16:27:fa:d5:d0:
c9:b7:89:60:ff:52:a7:e1:d0:2a:29:07:1b:1e:13:
4b:0a:73:29:37:c3:e4:3c:c6:14:98:59:dc:2f:9f:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:CA:D2:7E:91:57:36:C0:77:30:3E:8C:99:50:1A:04:6F:4E:5F
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:db:50:bb:43:fb:ed:e2:e8:26:bb:f0:f1:8a:de:12:e8:cc:
78:bf:8f:e9:72:b5:56:45:4d:f6:e8:18:4f:16:b0:f7:10:80:
cc:ee:58:3a:48:66:5b:25:f3:22:77:ef:f0:7b:53:2f:cf:29:
97:d8:38:3f:1a:6c:0d:3f:fd:7d:ac:ed:71:c1:7d:23:93:62:
54:ae:4d:0b:17:09:08:e1:0b:97:c2:3e:cc:a4:54:1f:f3:f0:
61:26:56:c3:05:ee:a1:cf:f6:b0:5e:87:63:2b:65:22:ac:0b:
be:fd:0c:9e:73:be:d3:de:0b:19:8c:f7:26:29:e4:0a:71:1f:
a9:3c:1f:43:85:e7:53:23:82:e0:b9:e9:c1:ec:ce:ea:37:47:
1e:e0:da:22:59:c1:fd:32:34:f0:19:5c:3e:80:ea:f4:6a:2c:
15:34:7a:01:5f:c0:2a:84:28:1b:7b:3a:e7:ca:8e:be:d0:84:
c5:ee:0f:05:d1:3f:04:55:c7:b9:44:82:cf:f8:e9:c7:22:03:
46:7a:50:9d:39:cd:ae:33:b7:ce:61:f9:3a:a2:d0:2c:9c:bf:
40:17:b4:87:a6:21:6c:3a:b6:36:a2:8c:f4:00:f3:cc:91:5e:
af:1a:b7:b3:1d:b8:94:82:60:61:2c:81:e9:d5:98:50:e7:7b:
40:71:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:55:12 2026 by rpki-client