
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier: PBAoDRxL+3JI+5vWbT8XN2+T2iZFszoL3v7XGTRJ1vo=
Subject key identifier: 21:07:70:BD:5A:64:E6:97:18:A4:64:F6:F8:4F:DA:12:6E:CE:F3:33
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 02C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number: 0286
Signing time: Thu 23 Jul 2026 07:16:38 +0000
Manifest this update: Thu 23 Jul 2026 07:16:38 +0000
Manifest next update: Thu 30 Jul 2026 07:16:38 +0000
Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: bKD2hSUXa6tksmiDoK2kKmwl0m5Vixc3V7bs6GKHRLI=)
2: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: tow/qmOQ/9yiGU7J1jkBreLst3yXf8HbYJ89yXWzR5w=)
3: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: CcUbFuf1lNiH/+6gAJiToEGq81cMwH8NK/XgCCC726g=)
4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: CZCiFwljilvMJvt94AUk+cDZYd5AEqR+L8VAnnEflzY=)
5: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: UMbEQFIpkJvqmK0HuzuHRzu+g80Gef2sVvm2DbI4gV0=)
6: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: 20nujIzl+CA8w05nEFFC5K5q9fFkxYmC8tuXnrC1GWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Jul 23 07:16:38 2026 GMT
Not After : Jul 30 07:16:38 2026 GMT
Subject: CN=6a61bfd6-d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:1b:b5:36:91:02:cf:99:0d:51:10:63:f2:
f8:96:88:0b:21:90:9d:79:e1:63:f6:8d:86:d5:2e:
4a:e6:29:8b:4b:f3:e4:25:44:d4:06:41:6f:ea:c6:
2a:27:b0:a0:58:3e:d5:04:b8:cc:03:8b:13:01:9a:
52:68:0e:ee:c0:66:73:97:ff:44:6b:4b:7c:94:af:
42:a8:70:54:5a:b8:02:2c:27:45:4a:01:9f:e1:11:
ad:ca:d0:a0:e6:29:8c:fe:fa:5b:a9:5f:6f:e4:97:
8c:5d:28:65:0e:48:5e:01:d1:30:09:d9:65:af:13:
aa:fd:1a:22:b9:63:4a:53:b7:f3:16:6c:4d:18:56:
2e:85:0c:31:24:b8:8b:86:95:5c:98:60:ff:25:d6:
a9:0c:71:42:74:23:5f:44:2a:63:0e:27:ae:8c:e7:
c9:db:e8:c2:b8:53:d5:24:d3:38:01:9c:c8:ad:9e:
fe:14:80:ec:22:07:c5:41:93:03:5a:3f:69:c7:b7:
86:bd:af:08:b9:ca:33:73:78:b4:f1:be:3e:fc:c7:
82:e5:3c:7b:3d:08:d8:c6:2e:4b:ae:29:e6:e9:c4:
df:65:2a:ae:12:32:36:28:57:a9:0a:da:2a:22:24:
73:c2:41:2f:ec:f9:52:74:12:1a:38:c5:17:e9:d4:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:70:BD:5A:64:E6:97:18:A4:64:F6:F8:4F:DA:12:6E:CE:F3:33
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:9d:a8:20:a4:2c:e2:c5:af:51:12:af:f8:92:24:1e:ae:
0a:e6:bf:45:4d:bd:14:e3:49:20:9c:64:d9:ed:49:6f:1b:3b:
7e:7e:f6:44:9e:52:8a:15:a1:9b:17:f9:20:1a:c8:02:fb:a7:
ab:fd:f9:e9:e5:98:0e:b3:0b:5f:43:14:d8:10:56:c1:d0:00:
22:f6:b5:16:1c:80:91:44:24:e0:43:0f:84:8f:9e:0d:bf:ac:
6b:cc:70:65:4b:5d:a3:99:4a:53:79:40:0b:45:fe:96:89:d5:
49:69:2d:0b:75:4d:91:0f:f8:d4:e9:23:67:9b:d4:64:2b:59:
9a:13:de:10:53:13:0f:09:48:89:3c:bb:87:85:85:55:70:cc:
8a:f3:62:19:79:1e:ae:56:c5:ca:87:a2:fc:c6:4d:f7:c9:e1:
4f:96:88:99:fa:8a:ce:3d:29:03:82:f2:6b:11:f3:62:cc:01:
41:3c:c9:b8:e6:e9:33:7e:b4:d1:39:a6:27:6f:7e:8d:2c:2c:
53:5b:fa:55:70:65:0f:29:4d:d4:90:47:cb:d2:02:ad:0c:fd:
0e:13:13:ea:a1:3b:01:ee:2d:84:c9:ab:36:f8:63:f7:72:c0:
46:57:a2:46:93:97:8b:9a:a3:46:6f:f2:c8:50:39:de:44:f7:
4e:65:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:09 2026 by rpki-client