
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File: RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier: D07Zv977kl5r9oiGo5vI1X532WNnE3tMENL6ihOPNK4=
Subject key identifier: 19:E9:9E:1D:D1:83:8F:34:22:5A:A6:F5:02:8E:B8:56:67:23:72:77
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number: 54
Signing time: Mon 11 May 2026 08:22:28 +0000
Manifest this update: Mon 11 May 2026 08:22:28 +0000
Manifest next update: Mon 18 May 2026 08:22:28 +0000
Files and hashes: 1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: s13z2afhhC1eZsTn2jXrdYr7dNPp7ta3B6k821Z0SMo=)
2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Validity
Not Before: May 11 08:22:28 2026 GMT
Not After : May 18 08:22:28 2026 GMT
Subject: CN=6a0191c4-ac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:23:69:44:83:76:ce:a1:49:3e:d4:06:35:
ca:46:63:94:6f:ab:99:e8:3a:f4:2f:15:b6:91:ae:
81:87:f9:a8:81:06:e0:ad:8f:29:1c:db:da:83:1b:
e1:11:5c:5f:39:22:ae:29:e2:0b:c0:63:62:84:3b:
1e:58:61:b3:e4:19:b9:a2:9b:32:40:5b:be:b1:e5:
2a:01:62:b4:51:f1:67:90:9a:85:c4:c0:ab:a0:82:
60:26:bd:f0:93:cf:4d:4a:6e:89:e1:3d:1c:11:29:
44:ae:48:97:13:01:b9:f1:b2:d9:a0:28:c6:d1:8c:
dc:17:55:e0:c0:c2:15:1c:63:55:56:de:a8:a4:79:
05:a9:48:3a:b3:c3:e9:40:ee:bf:55:f9:b2:23:a3:
fc:fe:bb:9d:4f:07:12:22:bb:62:2c:c4:10:c2:3f:
de:6e:bb:41:a4:74:c7:44:dc:7a:d3:a8:45:12:4f:
d5:b9:b0:4b:d6:d3:b1:fa:bd:b2:66:cf:90:c5:de:
82:39:a6:b0:ef:b4:86:f0:a0:d7:96:64:28:64:80:
00:70:35:c0:bf:63:1a:c6:7e:97:aa:c3:6a:33:70:
98:84:3d:21:13:75:51:76:da:9f:bc:e6:7c:79:c7:
a7:8b:2f:b1:ac:dd:e5:c7:c0:bb:49:60:b4:e5:2c:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:9E:1D:D1:83:8F:34:22:5A:A6:F5:02:8E:B8:56:67:23:72:77
X509v3 Authority Key Identifier:
keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:47:5b:67:18:b0:69:85:55:47:c5:f9:dd:d7:b9:d5:02:96:
95:3a:90:d3:a2:bd:02:94:28:d8:c4:b8:9c:86:c3:f7:37:78:
67:0f:6d:f1:d4:90:b2:4d:6b:74:4e:50:82:ba:e7:ec:a7:69:
c6:b0:b3:a4:e1:94:de:34:3f:37:a9:04:72:f2:35:bf:7e:b0:
41:2f:10:66:e1:c3:2b:a5:62:a2:5d:fe:9f:36:b7:b5:cb:2c:
b2:b3:cd:7a:2a:15:92:1d:d4:f8:b3:e9:a8:49:f0:f5:ea:65:
27:be:58:3d:d5:d2:74:a4:cf:49:18:d8:81:4b:d9:00:ae:b4:
30:3c:9f:44:63:2c:51:d5:f4:62:3e:4d:71:1a:bf:6d:76:62:
49:4f:d5:fa:f2:dc:8a:20:0c:3e:eb:ea:a7:1f:40:07:6b:3a:
93:62:f7:61:ba:65:92:2d:7f:77:ac:0c:f5:10:87:37:f4:4b:
32:2b:7f:61:46:9f:c2:44:8f:9e:7b:26:30:80:50:cc:fe:16:
0e:af:8e:29:46:bd:9e:1f:e7:72:b3:13:03:17:ee:0d:5e:e9:
70:bc:96:37:a8:7c:9f:27:92:6a:a2:dd:ca:62:16:af:15:ae:
d4:dd:16:b8:d0:6f:34:22:e9:9d:f0:1b:6d:6f:c9:c0:ec:a6:
cd:23:78:85
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC
NkJFODcwMTAeFw0yNjA1MTEwODIyMjhaFw0yNjA1MTgwODIyMjhaMBgxFjAUBgNV
BAMTDTZhMDE5MWM0LWFjNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfIiNpRIN2zqFJPtQGNcpGY5Rvq5noOvQvFbaRroGH+aiBBuCtjykc29qDG+ER
XF85Iq4p4gvAY2KEOx5YYbPkGbmimzJAW76x5SoBYrRR8WeQmoXEwKuggmAmvfCT
z01KbonhPRwRKUSuSJcTAbnxstmgKMbRjNwXVeDAwhUcY1VW3qikeQWpSDqzw+lA
7r9V+bIjo/z+u51PBxIiu2IsxBDCP95uu0GkdMdE3HrTqEUST9W5sEvW07H6vbJm
z5DF3oI5prDvtIbwoNeWZChkgABwNcC/YxrGfpeqw2ozcJiEPSETdVF22p+85nx5
x6eLL7Gs3eXHwLtJYLTlLAVlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGemeHdGD
jzQiWqb1Ao64VmcjcncwHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw
OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
RURGLzJFODEyNzlFRDAwOTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhR
SHdVSE9hN1Z6cUxhLWh3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCeR1tnGLBphVVHxfnd17nVApaVOpDTor0ClCjYxLichsP3N3hnD23x1JCyTWt0
TlCCuufsp2nGsLOk4ZTeND83qQRy8jW/frBBLxBm4cMrpWKiXf6fNre1yyyys816
KhWSHdT4s+moSfD16mUnvlg91dJ0pM9JGNiBS9kArrQwPJ9EYyxR1fRiPk1xGr9t
dmJJT9X68tyKIAw+6+qnH0AHazqTYvdhumWSLX93rAz1EIc39EsyK39hRp/CRI+e
eyYwgFDM/hYOr44pRr2eH+dysxMDF+4NXulwvJY3qHyfJ5Jqot3KYhavFa7U3Ra4
0G80Iumd8Bttb8nA7KbNI3iF
-----END CERTIFICATE-----
Generated at Wed May 13 03:50:15 2026 by rpki-client