
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: /+FSv9gd4w2mwSf9yuuMBCP2XDmZM2y6bcxaIUUWuU0=
Subject key identifier: 19:48:B9:F0:25:7F:0E:57:47:C1:78:17:E6:0C:D5:B5:A7:C2:8F:F5
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 0717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 070F
Signing time: Wed 22 Jul 2026 22:44:21 +0000
Manifest this update: Wed 22 Jul 2026 22:44:21 +0000
Manifest next update: Wed 29 Jul 2026 22:44:21 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: /7/3C+GlJ/gYamltNcaFq+S1qbyrDnpWFAk0aIhonSY=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Jul 22 22:44:21 2026 GMT
Not After : Jul 29 22:44:21 2026 GMT
Subject: CN=6a6147c5-a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:35:2a:86:c1:7d:9e:19:a6:d9:a1:fb:f9:
7e:d6:fe:48:8b:62:cf:85:7b:ef:f9:5a:40:73:a7:
a0:e0:5b:4d:4e:7c:6f:62:b0:10:11:78:08:a9:9f:
51:e6:13:48:60:2c:f9:99:ae:84:e1:ff:28:2a:db:
92:58:a6:b8:9a:be:5d:a5:fc:f9:db:9b:9b:2b:4b:
73:41:7a:ec:d2:2a:76:fb:10:ca:d3:cf:a0:ac:aa:
80:e2:8f:2f:dd:31:1d:69:60:3f:f0:d9:cd:b8:9d:
06:82:b5:3f:a5:bc:03:ca:08:9d:88:6c:a0:a6:e6:
f6:9e:16:ca:47:90:63:67:5f:30:9a:da:77:7a:52:
6b:8e:f9:1e:b6:4a:8a:2e:b4:1f:be:69:dc:98:71:
e8:1b:f8:a1:13:19:0d:bc:4b:c5:cc:54:bd:29:b7:
6d:0a:16:91:e1:9e:b7:00:f7:fa:eb:45:1b:24:2f:
86:41:a1:bb:4c:25:cf:c4:d1:be:27:51:a3:89:93:
e7:0c:ac:ba:f7:1b:4e:c4:f1:15:41:84:90:cb:93:
c5:5d:d8:d5:04:48:99:f7:41:86:22:e8:78:25:ad:
ff:b9:e6:08:53:6a:bb:46:f1:4c:28:58:80:c1:fd:
3d:ab:13:d0:fc:28:be:fb:c3:57:cd:3f:fb:38:a5:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:48:B9:F0:25:7F:0E:57:47:C1:78:17:E6:0C:D5:B5:A7:C2:8F:F5
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:80:83:2c:eb:ac:3b:42:95:78:62:c6:ae:f5:7a:6a:55:
a7:06:23:3d:cb:60:69:b7:40:03:51:0c:80:4c:a2:6f:47:2c:
ec:3f:6a:80:72:06:78:08:63:b5:3c:dc:60:41:3d:68:b2:08:
0f:70:a6:f8:5d:86:b4:5b:b1:df:ac:52:e5:1d:3b:2c:fc:1c:
bd:12:b4:1d:93:65:2b:c1:70:dc:e0:1b:e3:f8:f3:20:13:14:
d5:36:0a:7e:fc:18:35:a9:a8:6b:7d:85:e5:33:fb:62:89:5e:
6d:95:39:e1:03:a7:48:a1:e9:44:b8:1b:a1:b6:a8:08:54:05:
a7:52:65:41:f2:da:16:33:b6:60:fa:d1:cd:75:3c:8c:23:f3:
84:54:ee:be:98:eb:f4:49:b2:35:90:98:f2:7a:02:a6:68:48:
b8:ec:ce:4f:4a:b6:e7:9d:ad:ff:bd:e4:2f:e4:a5:61:8c:c8:
6c:4b:80:ca:4e:6d:47:04:87:4a:4d:14:81:9c:ac:25:b0:05:
ed:b1:b8:f3:f8:a7:75:2c:0a:f6:ec:4f:09:bf:2d:a8:fb:1f:
31:9d:3d:52:36:10:2b:19:44:95:1e:51:4e:2a:bf:04:88:4a:
f6:ae:40:c9:e5:7a:d1:a0:54:e7:63:6a:68:dd:72:7d:d1:8d:
57:9a:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:27 2026 by rpki-client