
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json)
Hash identifier: xGCjkl1Wkp9UqQmgS+sbGWDjLkPTMkCAWPA+up6WsNg=
Subject key identifier: BC:67:C3:E5:37:AC:9A:54:17:F8:EA:50:92:BA:A3:43:EA:67:D7:4C
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial: 0C0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
Manifest number: 0BDD
Signing time: Fri 24 Jul 2026 19:24:47 +0000
Manifest this update: Fri 24 Jul 2026 19:24:47 +0000
Manifest next update: Fri 31 Jul 2026 19:24:47 +0000
Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: jGXuwcLLByKLlPGc9yMMX8fNLbUdbstdH5LAMWeuv1E=)
2: 208C60E46C7211F1AC9395217347A888.roa (hash: 5xyBOygaF/yBthApdBmHSRjVagEMyjnlOfKFQdO1E1g=)
3: FC4FFE066C7211F18CC7D03C7347A888.roa (hash: PhvpoQx2/9PmVjvCn+k4gUxlwdooj8BhMHQv9Sbja0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 18:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Validity
Not Before: Jul 24 19:24:47 2026 GMT
Not After : Jul 31 19:24:47 2026 GMT
Subject: CN=6a63bbff-9ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:e4:f9:ee:b4:98:08:72:5b:69:b2:3f:ea:
95:31:89:3b:9c:91:ab:78:a9:a1:45:63:bf:1e:13:
33:78:33:1f:aa:16:f3:65:f6:ee:1d:8f:eb:90:33:
88:14:9c:03:b9:eb:bd:a7:4b:3f:49:41:c0:2b:3f:
a3:25:c8:df:a6:d3:10:4b:ed:2e:9a:01:c0:c4:e9:
87:e5:5d:17:87:be:43:73:4c:af:12:8a:2d:30:e3:
1f:6e:54:14:e1:d7:80:18:a4:38:0e:63:e8:36:5a:
63:75:59:dd:b5:0d:46:b0:f8:b6:03:34:05:e4:48:
1b:3e:0a:ad:47:9a:76:b3:eb:78:53:2b:73:41:08:
f4:a3:ab:be:65:ef:24:88:ec:94:d1:8e:24:e0:55:
09:45:7a:a0:c3:ef:7e:ac:8a:28:29:2d:89:a0:d9:
a4:bc:ee:5d:af:f6:d2:14:3f:c4:25:04:35:6c:6e:
b8:9a:a9:19:ef:e7:3a:cb:87:bb:91:01:d3:56:36:
83:8c:cb:bf:82:8a:f3:2c:37:4a:b2:dc:af:0e:1e:
85:13:fb:70:f1:f9:87:0a:4b:83:bc:12:2c:40:e2:
ba:ec:f4:a9:85:75:ef:1b:d4:8c:9e:5a:69:a5:e1:
45:a5:c8:81:1e:1c:6a:7e:1c:7c:51:09:18:4c:8d:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:C3:E5:37:AC:9A:54:17:F8:EA:50:92:BA:A3:43:EA:67:D7:4C
X509v3 Authority Key Identifier:
keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:6f:04:f0:aa:7a:5b:85:b4:ee:df:c7:7d:cb:d5:42:67:a8:
bd:19:e7:be:14:b2:f8:11:b2:7f:57:34:99:1e:50:33:87:36:
1e:22:ec:fc:1b:dc:32:dd:ff:e3:5d:d3:a9:6d:63:91:a2:4a:
77:58:df:f7:a5:4a:18:19:27:d4:5a:5d:92:94:1a:ee:20:dc:
2c:41:1c:9e:2d:02:ea:f2:4b:88:d3:92:7d:50:3a:7b:6a:86:
ac:a4:77:2e:7e:e7:9a:9e:e4:71:07:34:21:98:52:9a:60:d4:
44:1c:ab:3e:10:e6:a6:99:9a:fe:2e:bb:a0:da:7d:02:fc:dd:
86:bd:e0:4a:9f:d2:8d:df:af:b6:cf:3f:1e:41:ea:99:85:4a:
fe:f8:17:eb:b5:0f:73:ba:fb:af:5a:82:b9:8a:06:1a:80:e8:
2d:fd:02:be:71:af:8a:9d:af:58:c7:35:6b:ba:66:9e:0a:14:
95:14:4c:d3:3d:82:0c:10:e6:8a:ba:a9:a5:3e:4a:f1:5b:ed:
c8:d5:08:34:cf:cd:d3:82:3e:e5:24:3d:fa:85:73:ff:16:e9:
48:fe:be:95:d6:7d:de:d5:e1:06:67:a3:54:84:5b:44:f6:c4:
0e:a1:e4:6d:df:8e:23:0b:80:c2:ac:66:4b:1f:d6:87:94:f1:
d0:dd:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:52 2026 by rpki-client