
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier: 7GG/k5ZOI3wozMVCwu0PwqDSWY+Y1fY16ulk7HDASGI=
Subject key identifier: CA:65:9C:17:6C:65:CC:D7:4B:D2:7F:E9:17:2E:EC:FB:A5:B8:F9:1B
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number: 0182
Signing time: Thu 23 Jul 2026 05:33:03 +0000
Manifest this update: Thu 23 Jul 2026 05:33:02 +0000
Manifest next update: Thu 30 Jul 2026 05:33:02 +0000
Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: eQls5W7tuoHKHVG+5SdGgpebXeIFA8/DkqJ3UciUdZU=)
2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: Wxf+pnMbRXmK89KrT1cPFUY8XepsRf7BgNp3XpkASBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Validity
Not Before: Jul 23 05:33:02 2026 GMT
Not After : Jul 30 05:33:02 2026 GMT
Subject: CN=6a61a78f-9671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:a8:42:3f:70:9d:3f:a1:61:50:f5:e1:3f:
60:c1:02:eb:5a:f7:4a:ab:2b:67:0e:05:6d:bd:10:
23:93:e6:8a:93:f1:9f:8f:42:e2:19:82:5c:38:93:
53:8a:83:cd:c1:f5:e3:02:42:75:f9:37:9f:5b:c3:
7c:14:bd:ec:46:af:fd:32:c6:cd:aa:da:4a:b2:28:
12:43:9f:f1:d0:1b:e3:ce:58:8b:cd:67:b6:d4:83:
7a:3c:fc:68:45:a3:28:40:1a:25:05:92:82:0a:3a:
5d:69:4a:74:1e:2a:2c:71:c7:01:b1:c8:3c:d9:38:
92:1c:08:ed:f7:a8:cc:5f:dd:ca:ac:f9:06:8a:5a:
4e:c0:ff:0b:e6:2d:cd:98:ec:3c:e7:74:ae:08:11:
8f:8b:13:63:dc:d1:44:5e:72:10:b8:e6:12:a9:3c:
89:41:49:46:10:62:7e:72:a1:51:b8:c2:76:b0:c6:
82:ee:81:bb:23:37:ea:c4:9a:61:a8:d1:a2:71:da:
1b:7f:d4:d8:d1:7c:30:7b:2b:45:ed:a6:fd:23:61:
3d:be:34:ea:b8:a8:2b:91:a2:75:22:72:ee:78:b7:
e3:80:d2:57:47:08:c5:d4:e5:e6:c3:c1:01:7a:d0:
9b:60:0c:12:a4:22:48:5b:36:07:f4:1f:5f:12:67:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:9C:17:6C:65:CC:D7:4B:D2:7F:E9:17:2E:EC:FB:A5:B8:F9:1B
X509v3 Authority Key Identifier:
keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8f:d7:58:22:fb:08:7e:32:87:de:c0:9d:a9:bf:12:28:1f:
0a:0c:d1:4a:00:7e:1e:ca:ed:87:19:79:89:bb:b0:ff:b1:19:
94:e3:37:7a:79:68:c8:26:a2:2f:a8:3d:22:07:11:46:07:d5:
18:6c:cb:fa:3b:66:63:3a:40:8a:89:82:ba:d3:5a:bd:be:f7:
fa:da:a0:59:49:d0:e9:49:dd:e9:d0:66:04:d8:a8:24:bc:cd:
32:86:d4:d3:23:8b:f5:6e:3e:3c:1a:b4:4f:7a:04:da:e8:e4:
bb:e4:5d:c0:78:e4:95:ac:c2:45:87:a9:7e:c8:73:85:d6:c7:
83:2e:16:e0:69:6d:90:45:04:dd:ee:32:0d:f6:92:c4:f2:1c:
95:b4:f2:cd:f8:12:1b:97:3e:cf:af:f1:a6:d4:0a:26:04:10:
69:d1:eb:b2:32:7c:80:48:7e:5e:03:64:a2:57:93:dc:2b:f9:
9b:1e:af:30:87:9f:51:ec:46:69:80:06:ec:a5:ae:fe:97:2b:
aa:97:bf:45:a8:16:49:c3:95:ef:40:41:2a:16:5b:1d:38:bc:
25:be:4d:de:54:00:c3:cc:da:b1:5f:23:93:4d:68:17:42:4e:
89:4e:83:33:51:84:64:ab:a3:f0:dc:a2:c4:68:c5:95:41:e0:
59:85:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:14 2026 by rpki-client