
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json)
Hash identifier: hGu4XvAe4gD37I3J59PWpa050CJp8B+2DWCf+ywxAI8=
Subject key identifier: 15:78:85:6C:34:6E:61:EB:9E:B4:E7:65:59:E8:1F:A6:B0:B9:6D:4F
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
Manifest number: 01FC
Signing time: Wed 25 Mar 2026 02:42:35 +0000
Manifest this update: Wed 25 Mar 2026 02:42:35 +0000
Manifest next update: Wed 01 Apr 2026 02:42:35 +0000
Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: xQ6K65xau5HYG7qfwPkisum13DeOmTIgbMftQxpFg8A=)
2: 2F5D72E695EC11F0BF295042C4F9AE02.roa (hash: /+ba2nQszpmA32xw8Q2bNwCocgAiAxht6R/PF25M/+Q=)
3: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: 6I5YlsRFDMiAw2+6p+Np4QlkoPsG3b9oYbhxF6uNgBY=)
4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: L7PzMw/RqglxuX4TAKGHddkS6szpM6BUVLIqh8w+1Fk=)
5: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: eCvLkEbyNwc9r0JGvwSvHfQB+uiRQQDtRICORSigmQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Mar 25 02:42:35 2026 GMT
Not After : Apr 1 02:42:35 2026 GMT
Subject: CN=69c34b9b-3799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:57:45:07:5e:61:97:07:89:ad:4a:4a:18:
b0:fe:e5:a6:b9:1e:46:b7:4c:38:99:ba:fb:00:5c:
d5:d9:fc:95:69:a3:d1:0b:2c:cf:ad:9b:78:dd:aa:
38:78:36:c8:44:af:a2:11:b5:27:38:93:d0:50:a4:
e3:79:75:0c:e4:2c:05:f9:1a:0e:b6:32:43:09:36:
f2:2a:60:84:d5:ac:b6:8d:94:02:a9:bc:9c:18:b4:
dc:01:5d:94:8e:9a:76:e1:a9:bd:ef:0a:83:75:a8:
b7:11:11:68:ce:99:46:75:7a:a0:a7:d1:c4:0c:4d:
5f:ab:ff:ab:1e:9a:d3:7f:fe:d8:a5:89:30:1b:14:
1d:34:f2:bc:3d:dc:8a:49:3d:55:90:90:f6:ec:be:
0e:82:69:e6:06:f0:80:f1:ac:2b:66:1b:2a:4f:40:
f5:9b:87:62:95:25:3f:50:f5:06:40:b3:33:a2:11:
d0:03:d0:fe:63:a3:11:ca:07:7c:7b:10:87:79:76:
98:27:60:09:fa:ac:97:43:dc:9a:8f:ec:be:f8:2d:
87:b0:df:f4:2f:43:f9:0c:1c:74:f1:5d:69:e1:7d:
98:5d:c0:c8:3e:98:2b:55:65:7d:96:cc:02:a1:8e:
de:33:15:64:4a:06:d4:a2:bb:1b:78:a2:50:1d:9c:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:85:6C:34:6E:61:EB:9E:B4:E7:65:59:E8:1F:A6:B0:B9:6D:4F
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:fa:46:23:e3:8a:1c:5c:c5:1f:f6:fb:4e:0a:3e:47:a7:
6a:5b:8f:cd:97:24:b6:11:0b:f2:4b:1c:e2:f6:15:90:05:f2:
9a:8a:f7:05:79:0d:44:2c:ed:b5:9e:9c:1d:5c:2b:3e:63:12:
e8:98:5a:92:fe:46:45:39:f8:67:05:d8:52:03:9b:40:b6:bd:
2c:53:58:35:1b:70:63:0b:3b:b1:85:9d:41:e9:ee:c5:4c:d8:
d3:fc:cf:77:e7:ff:f9:c2:8d:f7:5e:52:0c:0c:19:f8:35:95:
d6:da:e3:0d:d0:67:38:bb:3f:d7:6f:04:35:2c:94:e4:59:9b:
8a:b5:90:42:9d:72:34:21:52:86:09:c7:8f:18:c2:5c:45:d8:
41:65:f9:92:3e:2e:7a:21:c4:96:e8:ae:c0:d3:bf:5f:7e:50:
97:ac:7b:31:6f:76:8c:72:47:f0:36:8d:db:f4:7f:2b:72:34:
cf:20:ab:96:fb:8c:d0:b5:17:99:cc:f3:6d:ea:d6:82:bd:e8:
d0:63:5d:82:9d:86:9a:6b:4c:b3:46:83:45:e6:9c:18:da:c6:
84:85:df:a3:03:23:19:a7:9a:b1:82:8f:5a:e2:ce:21:da:27:
b4:20:9c:af:18:93:2f:33:73:84:a9:c6:f8:30:50:5b:60:b3:
0b:10:d3:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjYwMzI1MDI0MjM1WhcNMjYwNDAxMDI0MjM1WjAYMRYwFAYD
VQQDEw02OWMzNGI5Yi0zNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHVXRQdeYZcHia1KShiw/uWmuR5Gt0w4mbr7AFzV2fyVaaPRCyzPrZt43ao4
eDbIRK+iEbUnOJPQUKTjeXUM5CwF+RoOtjJDCTbyKmCE1ay2jZQCqbycGLTcAV2U
jpp24am97wqDdai3ERFozplGdXqgp9HEDE1fq/+rHprTf/7YpYkwGxQdNPK8PdyK
ST1VkJD27L4OgmnmBvCA8awrZhsqT0D1m4dilSU/UPUGQLMzohHQA9D+Y6MRygd8
exCHeXaYJ2AJ+qyXQ9yaj+y++C2HsN/0L0P5DBx08V1p4X2YXcDIPpgrVWV9lswC
oY7eMxVkSgbUorsbeKJQHZzhgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV4hWw0
bmHrnrTnZVnoH6awuW1PMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx
ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeqz6RiPjihxcxR/2+04KPkenaluPzZckthEL8ksc4vYVkAXymor3BXkNRCzt
tZ6cHVwrPmMS6Jhakv5GRTn4ZwXYUgObQLa9LFNYNRtwYws7sYWdQenuxUzY0/zP
d+f/+cKN915SDAwZ+DWV1trjDdBnOLs/128ENSyU5FmbirWQQp1yNCFShgnHjxjC
XEXYQWX5kj4ueiHEluiuwNO/X35Ql6x7MW92jHJH8DaN2/R/K3I0zyCrlvuM0LUX
mczzberWgr3o0GNdgp2GmmtMs0aDReacGNrGhIXfowMjGaeasYKPWuLOIdontCCc
rxiTLzNzhKnG+DBQW2CzCxDTsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:38 2026 by rpki-client