
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json)
Hash identifier: 1SXZIIORavH91I8OKjJA37jWVMfbTvELXnSbTEHUvNU=
Subject key identifier: AF:B4:9D:65:50:F0:8E:25:3B:EC:C0:80:29:68:45:7D:E8:80:B6:6B
Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44
Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
Certificate serial: 071E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
Manifest number: 0716
Signing time: Wed 22 Jul 2026 22:39:43 +0000
Manifest this update: Wed 22 Jul 2026 22:39:42 +0000
Manifest next update: Wed 29 Jul 2026 22:39:42 +0000
Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: bw2ATBtsJ4/Q2nnAh4vqw/C+TAAfYuInwXGnY5C1gR8=)
2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: kPCD0Fz7/O4ntMHiCFvRFjcWPT4ww4VjwAtUClsCkrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl
rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
Validity
Not Before: Jul 22 22:39:42 2026 GMT
Not After : Jul 29 22:39:42 2026 GMT
Subject: CN=6a6146af-1fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:8f:bf:0c:e4:69:37:da:c5:36:5a:1b:5b:
b0:a2:4d:2f:8f:f2:be:a3:78:43:b8:8e:43:db:fb:
c9:35:ed:6f:d3:09:db:e1:3d:0a:cc:c1:85:a3:23:
52:7d:63:2b:a7:f3:1f:a9:d0:29:69:79:c4:a6:d3:
47:80:0f:03:c0:a6:c8:9a:fe:c4:ab:82:ef:af:15:
8d:79:75:1d:b7:0a:ca:5a:0e:d1:c8:34:21:3e:b0:
a2:d2:9e:35:9d:55:76:49:c9:e8:8e:bb:fc:a4:21:
9f:80:c1:4f:8f:05:01:1d:f5:8f:3c:eb:12:8c:e3:
9e:3a:4a:24:bb:3c:30:27:2a:72:1f:09:dd:5b:9b:
7c:a5:ac:62:d5:e4:a0:21:ed:51:06:98:b2:be:6f:
a0:a2:46:80:91:49:aa:ec:45:6e:b2:00:c6:79:3e:
c7:8e:48:9c:ab:8c:10:02:85:ef:f1:c4:e3:e5:6a:
57:e9:77:a2:68:12:ea:89:35:7b:5a:71:ca:61:06:
c3:de:09:c3:4f:f4:01:b9:bd:01:c7:16:05:3d:b9:
bc:e2:ed:f4:ab:94:8a:4b:e4:06:46:33:37:31:a8:
42:d6:d2:39:39:74:e0:54:12:30:fa:47:50:65:b9:
98:34:a3:40:b7:1c:59:f0:b2:30:b0:8c:b7:26:b7:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:9D:65:50:F0:8E:25:3B:EC:C0:80:29:68:45:7D:E8:80:B6:6B
X509v3 Authority Key Identifier:
keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:dc:21:3a:21:73:55:46:10:19:49:7e:f1:4a:4b:34:fe:
9b:20:ae:0a:63:85:6f:44:80:02:53:56:7c:d9:9f:09:e9:e5:
29:fb:e9:52:b2:74:58:d9:30:35:2a:5b:4c:3e:71:be:5a:91:
93:17:48:f4:b7:48:5c:62:a7:87:57:b4:7a:4e:1d:a1:b1:1d:
f7:7a:53:64:3a:87:bf:a2:4b:f3:67:bf:dd:7f:a5:c7:86:4f:
df:e7:c9:a2:9d:56:5e:3f:5a:0f:f6:69:a0:b7:35:1f:1f:f6:
05:a5:7b:3e:46:7f:85:e2:e0:ec:f8:84:82:2a:4e:e3:7c:6a:
7c:70:2e:6d:62:1d:a9:2f:5a:70:b1:5c:d4:dc:90:b8:ba:0b:
bb:f1:72:3f:ab:28:4e:b7:2c:0b:4a:5b:e9:47:e0:68:60:db:
cd:96:55:c5:ab:4d:54:01:5c:bf:a9:52:fa:6b:2f:aa:c7:94:
6f:39:1d:54:12:82:ee:0c:c8:a3:5a:b3:2f:26:40:e6:29:f6:
86:46:d4:23:1a:1b:ec:1f:a5:ce:90:85:c3:3e:29:b8:73:8e:
6e:8b:1f:91:0f:77:e2:2d:8a:50:1d:e8:f7:fa:b7:82:ed:46:
9b:d8:a3:78:34:44:1d:06:af:dc:00:cb:8f:4c:51:93:f8:af:
c3:ea:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:26 2026 by rpki-client