
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier: KAi29vV/zLtES9P5IHXZMqoAo1oMzfhEhnKFHKuP7vc=
Subject key identifier: F8:9C:85:71:84:10:CB:9A:7B:86:BF:79:58:BC:DA:09:34:BE:3B:59
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0F0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number: 0EE5
Signing time: Tue 12 May 2026 17:41:12 +0000
Manifest this update: Tue 12 May 2026 17:41:11 +0000
Manifest next update: Tue 19 May 2026 17:41:11 +0000
Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: 4qZMlUug3d/2bwO8ZfHqOHGh7X1nH8ZZKM4TUVzW71s=)
2: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
3: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
4: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3852 (0xf0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: May 12 17:41:11 2026 GMT
Not After : May 19 17:41:11 2026 GMT
Subject: CN=6a036637-cf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:b8:3d:58:60:99:08:31:79:5f:e9:8b:ee:
5c:9c:c8:83:c0:5a:23:2e:79:aa:5c:ed:13:24:8b:
6f:48:2a:e6:82:ff:62:b3:82:50:b0:f2:66:85:18:
4e:f7:df:31:43:1f:6f:a8:c9:ee:af:50:1e:12:17:
67:cb:66:d6:f5:e7:f3:01:64:11:ac:07:8f:68:48:
62:8b:de:fd:10:b4:82:c7:af:b1:90:3b:09:51:db:
54:c4:83:0d:d2:ed:e9:47:27:f3:9c:6b:d8:16:0d:
55:e8:d0:40:be:44:38:c3:08:37:cd:52:21:0e:9f:
c4:8f:9d:b7:2b:9b:a1:dd:f1:b4:91:8e:39:08:d3:
9f:ce:99:37:c4:f6:7c:fe:96:1d:b6:cc:7f:79:06:
7c:61:c9:c8:e8:23:3d:25:25:11:23:1c:39:47:2d:
3e:84:b4:38:3d:22:29:eb:2c:2e:bd:52:fc:ad:10:
d7:f2:f3:df:9f:89:66:e7:5a:f4:91:be:08:ed:7c:
4c:bc:6c:75:69:0b:a8:08:51:57:ea:cc:87:d6:0a:
6e:ea:e2:c5:5b:26:70:82:5d:65:ac:dc:cd:8a:b2:
1a:04:d0:05:70:5f:ba:ab:de:6e:f7:79:8c:a6:41:
57:41:57:69:c9:5b:4c:e7:55:b1:d4:50:ad:c3:4d:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:85:71:84:10:CB:9A:7B:86:BF:79:58:BC:DA:09:34:BE:3B:59
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3a:5a:97:69:a1:1e:7c:e6:51:97:bb:31:e6:bd:8c:c8:d4:
d7:46:1e:a0:b3:a2:0f:10:05:9d:42:d8:71:88:8c:50:83:7b:
b2:73:33:6d:96:95:ab:e9:f9:45:82:d4:7a:60:bd:e8:d4:03:
02:b0:09:3f:b8:c0:0f:5a:86:d2:3e:80:92:99:e0:c1:49:f4:
ca:c7:10:f9:91:fd:4c:53:c2:90:0c:04:0c:63:31:a3:7e:02:
84:2f:94:83:5c:25:48:28:b1:90:f2:c9:ae:6f:1e:4c:1c:ae:
1c:aa:67:3f:3f:ff:93:99:4c:fa:7f:d8:0f:90:ac:a3:18:25:
0e:db:b4:e4:af:78:ab:5f:07:02:00:0d:93:c0:70:eb:f9:67:
ca:d5:63:63:97:0e:fa:08:65:7c:15:8a:33:b6:b1:8a:4d:fe:
90:42:33:02:6a:5f:25:60:11:bb:df:65:7a:3d:05:38:f2:af:
ac:5e:e6:c1:97:31:11:82:2c:43:e5:ee:b0:f7:f9:a3:65:43:
e5:22:91:30:ba:95:c6:d7:06:ca:f2:2d:4a:33:66:a2:45:f3:
85:33:d6:72:e3:01:a7:1c:04:71:a8:fc:fc:f8:45:3b:a1:47:
1d:74:5a:a5:d5:ce:53:1e:8e:d9:7a:fc:f6:25:60:79:31:74:
f2:30:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:31 2026 by rpki-client