
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier: xfJT0aMpixOwF2h35tqllWE6eUQNn31Vv78rqG6ek48=
Subject key identifier: A4:21:E5:FF:90:68:DC:E8:F0:4C:1E:D7:0E:FC:EB:CC:68:44:5A:23
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0CA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number: 0C94
Signing time: Tue 12 May 2026 18:35:13 +0000
Manifest this update: Tue 12 May 2026 18:35:12 +0000
Manifest next update: Tue 19 May 2026 18:35:12 +0000
Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: igcqM9li3SMXCBMXjOH/tB4TY5+qEVFl10wKzvBNpuw=)
2: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: 6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=)
3: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: jEP65BxvqOk8vKVC/3/YzXiqk8d1hNdREg1GZzlOXko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3239 (0xca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: May 12 18:35:12 2026 GMT
Not After : May 19 18:35:12 2026 GMT
Subject: CN=6a0372e1-0d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:c3:54:21:87:95:47:9e:45:f5:fe:0b:ce:
e6:d9:01:c1:ab:e2:13:f7:6e:25:83:ed:08:d7:16:
73:95:76:3d:77:18:bd:d4:de:60:bf:88:e4:0d:00:
ed:5e:c4:8f:cc:34:b6:ca:0f:43:91:43:92:4d:a4:
91:85:be:bf:9b:78:96:4e:96:5e:ec:7b:e4:d8:15:
16:4d:75:df:35:f1:7b:6d:9e:b8:2c:d4:fe:d1:5f:
7a:f5:85:01:20:8e:c6:1c:61:1a:bc:92:ad:b4:b1:
4a:04:ae:e3:43:ed:d4:5c:b6:e9:ee:42:30:8e:09:
6c:e4:3b:1e:c0:46:77:b0:05:f7:29:84:40:e9:52:
99:39:da:c1:56:b1:8a:c0:a2:0f:f8:84:ae:22:ba:
a9:dd:1e:93:d6:c2:07:3b:86:71:d3:07:64:ee:80:
3a:d5:74:3e:2e:37:b9:65:80:a1:65:f7:48:2c:a4:
6d:44:b2:46:5b:dc:00:2a:f5:0c:76:d7:ca:e8:cf:
14:c3:2e:eb:1a:9c:e8:c0:02:05:82:db:12:6f:77:
43:65:95:ed:55:62:6e:e0:53:0a:86:8e:98:fa:28:
0a:60:98:df:14:ce:a4:0c:5f:95:5d:c0:9b:77:2d:
ea:bd:bc:ff:a6:cb:1c:b0:29:82:cd:2d:12:a9:5d:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:E5:FF:90:68:DC:E8:F0:4C:1E:D7:0E:FC:EB:CC:68:44:5A:23
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:01:29:3b:f5:01:09:88:68:49:ea:0f:dc:11:bc:be:3d:d5:
8b:c1:63:55:6e:ef:6b:6d:f7:3d:88:fd:37:6c:b1:4d:05:64:
25:62:91:09:7d:43:19:75:06:93:47:d5:e6:59:15:d3:f7:67:
44:b7:24:72:5a:bf:3f:14:28:c9:4b:d8:20:4f:f6:25:91:08:
47:94:98:87:c5:4b:02:fb:09:29:ba:49:ab:d0:f6:dd:c8:43:
6e:4b:c6:13:93:e4:2c:b0:a2:cc:f8:2b:79:59:c0:25:38:60:
be:fb:aa:1c:5b:cf:5f:7a:8d:bf:f1:4c:94:ca:97:23:95:b0:
7f:e6:d6:b5:89:06:a4:ce:2f:59:58:63:85:35:b1:fc:39:5d:
18:67:14:eb:3d:cf:41:c4:af:55:a6:ee:df:47:a6:9d:4b:bb:
f9:90:f5:26:7a:69:31:a1:2f:40:97:63:a0:64:09:a1:ec:12:
5f:4d:f2:79:11:57:ab:51:6c:fa:19:a5:c6:8d:12:27:59:f0:
90:34:7b:92:df:30:39:2d:27:39:70:1c:db:7c:0b:20:af:36:
aa:4a:a3:a6:66:43:4d:01:4f:1f:d9:4e:05:6b:0e:32:47:3e:
b5:e2:56:74:db:3d:77:70:ef:b3:22:2a:f2:ca:5d:f5:ce:66:
c9:1f:fd:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND
OEZEODU5MzkwHhcNMjYwNTEyMTgzNTEyWhcNMjYwNTE5MTgzNTEyWjAYMRYwFAYD
VQQDEw02YTAzNzJlMS0wZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuszDVCGHlUeeRfX+C87m2QHBq+IT924lg+0I1xZzlXY9dxi91N5gv4jkDQDt
XsSPzDS2yg9DkUOSTaSRhb6/m3iWTpZe7Hvk2BUWTXXfNfF7bZ64LNT+0V969YUB
II7GHGEavJKttLFKBK7jQ+3UXLbp7kIwjgls5DsewEZ3sAX3KYRA6VKZOdrBVrGK
wKIP+ISuIrqp3R6T1sIHO4Zx0wdk7oA61XQ+Lje5ZYChZfdILKRtRLJGW9wAKvUM
dtfK6M8Uwy7rGpzowAIFgtsSb3dDZZXtVWJu4FMKho6Y+igKYJjfFM6kDF+VXcCb
dy3qvbz/psscsCmCzS0SqV3tIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQh5f+Q
aNzo8Ewe1w7868xoRFojMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ
OWJaUi1HU1RKZlBJX1lXVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWQEpO/UBCYhoSeoP3BG8vj3Vi8FjVW7va233PYj9N2yxTQVkJWKRCX1DGXUG
k0fV5lkV0/dnRLckclq/PxQoyUvYIE/2JZEIR5SYh8VLAvsJKbpJq9D23chDbkvG
E5PkLLCizPgreVnAJThgvvuqHFvPX3qNv/FMlMqXI5Wwf+bWtYkGpM4vWVhjhTWx
/DldGGcU6z3PQcSvVabu30emnUu7+ZD1JnppMaEvQJdjoGQJoewSX03yeRFXq1Fs
+hmlxo0SJ1nwkDR7kt8wOS0nOXAc23wLIK82qkqjpmZDTQFPH9lOBWsOMkc+teJW
dNs9d3DvsyIq8spd9c5myR/9gQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:17:22 2026 by rpki-client