
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier: naB5T5iuzQpcVjj2MB86vwIXhJdbv1dAG2A7PuGr8Cs=
Subject key identifier: 90:38:E9:9C:A5:06:75:7F:EF:C1:05:2E:06:94:69:6A:E2:63:CE:72
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer: /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number: 35
Signing time: Wed 13 May 2026 08:50:16 +0000
Manifest this update: Wed 13 May 2026 08:50:16 +0000
Manifest next update: Wed 20 May 2026 08:50:16 +0000
Files and hashes: 1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: lAvdTk6AIlud5/YKgY4Ihjkm4BTRVoLvgjzL/HnKI8Y=)
2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Validity
Not Before: May 13 08:50:16 2026 GMT
Not After : May 20 08:50:16 2026 GMT
Subject: CN=6a043b48-0441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:b4:47:07:d9:a7:8c:bf:26:ec:80:b9:19:
00:b0:a6:fc:bd:51:39:2b:62:22:e5:5a:0f:bf:01:
7c:8b:82:50:2b:83:2c:eb:d3:33:ee:0c:21:44:cd:
f5:8c:7a:3d:42:cf:da:c0:68:1e:3c:c8:1a:27:39:
48:b1:8d:05:c9:42:6a:26:0b:88:6b:3a:ba:1e:91:
d7:12:f7:48:79:df:ba:a8:e4:76:8e:9a:a1:0a:16:
91:50:a4:b4:fa:a8:6b:5e:3d:51:cf:a2:a4:43:c1:
0b:4b:a1:72:64:76:5a:1c:f7:38:02:05:47:6f:89:
9b:0e:09:d7:77:f9:56:dd:ea:a4:cf:56:e1:87:31:
00:83:60:82:cc:f9:45:5f:b7:7d:22:01:f3:30:63:
e4:f9:31:a1:e1:ab:ad:2a:63:37:c1:ba:26:ee:14:
3c:fe:ff:ab:e7:88:7e:c0:f5:eb:eb:3d:4a:19:41:
83:43:bd:10:fb:c1:91:12:37:bc:27:2f:d5:67:c1:
38:9e:e6:eb:b2:e4:df:20:7a:2f:aa:ce:ed:da:fd:
98:b3:77:3d:66:55:27:fa:7a:c9:c8:1d:01:0c:a4:
bb:9c:da:6f:ed:4e:a0:80:75:dc:b1:71:91:ee:89:
1c:c1:af:be:e8:cd:57:23:95:51:09:6e:70:3b:cf:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:E9:9C:A5:06:75:7F:EF:C1:05:2E:06:94:69:6A:E2:63:CE:72
X509v3 Authority Key Identifier:
keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:a1:d3:50:16:53:e0:ef:9e:11:c1:68:4d:f9:4a:08:7b:
50:56:3a:eb:f9:9a:2c:5d:a2:01:93:d4:70:44:74:cf:65:e7:
f0:f5:bf:6e:c4:9d:ea:ea:33:5c:2f:34:41:e7:33:7b:e3:7f:
47:9e:bb:35:f0:02:f6:94:b3:fa:40:23:41:22:e0:06:c2:c2:
86:d0:1e:d0:d7:31:33:7a:c2:08:b6:a1:1b:90:20:77:f2:4e:
85:fc:43:7b:0c:f7:e5:0e:7e:b0:b1:cb:1c:c6:1a:b3:fa:9b:
d2:7f:ef:fc:75:4b:b0:6e:8d:77:35:c8:41:97:4b:96:83:64:
21:25:ce:33:a6:2a:17:a0:1a:2e:56:b1:00:26:40:77:52:05:
e1:69:95:76:9d:10:2d:ea:2a:2b:f6:6f:0d:6e:94:34:0e:e0:
6e:89:6b:c1:77:8c:1a:d2:c6:dd:25:a1:61:b1:53:02:e3:06:
13:79:68:4e:c9:dc:e1:0b:d8:4b:39:fb:98:df:0b:28:ce:33:
3f:56:ad:4c:2b:1a:f4:5c:06:09:22:bc:72:67:5e:6c:45:2d:
f1:1c:f0:37:c5:8a:c9:01:4c:54:e1:32:4c:22:a5:d7:b3:23:
75:34:a2:1b:7e:f9:65:96:e7:77:74:07:65:8c:26:6d:1b:8d:
ab:33:48:a2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QkQ4MjExMC8GA1UEBRMoQzYzNjU1NjlEMjg0OTEwMjlGRTQ0N0U1RjNFQkY2OEYx
MzAxRDVCQjAeFw0yNjA1MTMwODUwMTZaFw0yNjA1MjAwODUwMTZaMBgxFjAUBgNV
BAMTDTZhMDQzYjQ4LTA0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPlbRHB9mnjL8m7IC5GQCwpvy9UTkrYiLlWg+/AXyLglArgyzr0zPuDCFEzfWM
ej1Cz9rAaB48yBonOUixjQXJQmomC4hrOroekdcS90h537qo5HaOmqEKFpFQpLT6
qGtePVHPoqRDwQtLoXJkdloc9zgCBUdviZsOCdd3+Vbd6qTPVuGHMQCDYILM+UVf
t30iAfMwY+T5MaHhq60qYzfBuibuFDz+/6vniH7A9evrPUoZQYNDvRD7wZESN7wn
L9VnwTie5uuy5N8gei+qzu3a/Zizdz1mVSf6esnIHQEMpLuc2m/tTqCAddyxcZHu
iRzBr77ozVcjlVEJbnA7z33LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkDjpnKUG
dX/vwQUuBpRpauJjznIwHwYDVR0jBBgwFoAUxjZVadKEkQKf5Efl8+v2jxMB1bsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCRDgyL0FFMjEwRUQ4MDlB
MjExRjE5RTVDNjgwOTFDM0Q4QzY3L3hqWlZhZEtFa1FLZjVFZmw4LXYyanhNQjFi
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIveGpaVmFkS0VrUUtmNUVmbDgtdjJqeE1CMWJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
RDgyL0FFMjEwRUQ4MDlBMjExRjE5RTVDNjgwOTFDM0Q4QzY3L3hqWlZhZEtFa1FL
ZjVFZmw4LXYyanhNQjFicy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXnaHTUBZT4O+eEcFoTflKCHtQVjrr+ZosXaIBk9RwRHTPZefw9b9uxJ3q6jNc
LzRB5zN7439Hnrs18AL2lLP6QCNBIuAGwsKG0B7Q1zEzesIItqEbkCB38k6F/EN7
DPflDn6wscscxhqz+pvSf+/8dUuwbo13NchBl0uWg2QhJc4zpioXoBouVrEAJkB3
UgXhaZV2nRAt6ior9m8NbpQ0DuBuiWvBd4wa0sbdJaFhsVMC4wYTeWhOydzhC9hL
OfuY3wsozjM/Vq1MKxr0XAYJIrxyZ15sRS3xHPA3xYrJAUxU4TJMIqXXsyN1NKIb
fvlllud3dAdljCZtG42rM0ii
-----END CERTIFICATE-----
Generated at Wed May 13 14:04:31 2026 by rpki-client