
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json)
Hash identifier: 7MRxiosRvcIfd7hzm/L+S+pT3Ljw9F6UI48MURAmc70=
Subject key identifier: D5:00:76:24:7C:FA:07:19:EE:25:0D:8D:DB:C1:4B:8B:D8:BD:93:92
Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
Manifest number: 0206
Signing time: Wed 13 May 2026 03:08:39 +0000
Manifest this update: Wed 13 May 2026 03:08:39 +0000
Manifest next update: Wed 20 May 2026 03:08:39 +0000
Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: 9UIEqqmcGAzweL5eqq1P6026Cx8+Jbc6dKy24ObAPGA=)
2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: cutsButNN4vD7PlDi3ED+TD0SRxebGD6KjlE+3nvyoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Validity
Not Before: May 13 03:08:39 2026 GMT
Not After : May 20 03:08:39 2026 GMT
Subject: CN=6a03eb37-6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:18:c7:d8:c8:4e:d7:58:f0:b1:df:6d:f8:
e6:5f:a8:4e:e4:2a:cc:62:e9:24:ae:ca:9a:7f:63:
95:9b:de:27:b0:fc:f8:22:de:88:63:ea:dd:6b:fd:
c9:71:46:fb:6e:11:76:66:1b:71:6a:ba:98:b7:d7:
ad:97:cc:51:9a:1e:6e:70:72:a2:a8:51:f5:f8:ab:
23:df:4e:27:c5:34:93:ea:cc:7a:4e:bf:f1:e7:8a:
5e:72:e7:02:65:15:ca:a7:81:67:54:ba:6b:cd:98:
26:2e:a6:05:f8:c4:3f:36:56:27:45:88:65:ae:de:
cb:b4:a0:89:9d:9f:64:3a:d0:7c:8f:d9:f7:76:b0:
80:e2:55:f2:55:d4:44:2c:7e:75:93:37:8a:b6:dd:
92:a4:98:5d:d6:08:f5:6f:e6:c3:2a:c6:a3:7d:37:
2b:19:7e:36:a1:85:6d:d9:91:ad:f6:79:fd:55:bf:
12:95:26:7d:77:f5:1a:4f:b2:bd:97:52:08:75:3e:
af:be:e4:42:25:4e:d4:a4:a1:8f:73:9b:41:a3:0a:
0b:24:28:7a:68:1f:e3:4f:62:1e:c2:05:b1:b1:4b:
fd:d7:24:0d:c8:6a:0c:6c:db:5d:07:b2:dc:f6:7e:
36:82:19:4f:c3:83:f8:a6:4d:80:4a:51:5c:b7:41:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:76:24:7C:FA:07:19:EE:25:0D:8D:DB:C1:4B:8B:D8:BD:93:92
X509v3 Authority Key Identifier:
keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e1:6c:2d:90:41:5e:45:99:ec:aa:de:90:8f:9b:00:6a:f0:
b0:f5:b2:ef:71:9f:91:6e:dc:5d:6e:a5:c2:49:9d:75:c5:ab:
a2:b8:08:82:c7:06:2a:d2:6d:75:cd:57:3f:53:f7:28:f5:27:
70:ee:28:8d:2f:88:87:97:c8:91:aa:2d:83:72:d6:bf:1c:c3:
62:86:9f:61:8c:5b:3a:a8:3c:26:95:29:b9:10:f9:b7:fc:1a:
c4:ab:fb:d8:15:ac:5c:75:a9:f9:21:97:e5:9f:7d:d1:96:4f:
4e:f7:3c:cf:2b:3f:7e:a4:de:f2:39:3d:31:68:bb:72:18:2b:
b3:0d:85:62:15:d1:f5:1b:f8:54:69:51:96:d0:3e:a4:e2:c6:
ee:0a:91:7e:25:76:a5:1e:04:3d:ce:01:b6:7c:0e:0b:f4:88:
e0:1a:69:5f:a5:79:6a:95:be:5d:00:d9:5f:e0:0a:ce:0e:79:
98:3d:d1:6d:53:29:ff:36:53:fd:f0:80:2b:d0:68:2b:b7:47:
77:4f:2d:f0:d6:4d:8e:5c:39:ca:0e:d9:ab:9d:29:29:a9:bd:
cf:9e:d4:bf:93:46:29:42:ee:0a:33:cd:86:ac:e9:de:cb:ff:
ab:e9:4c:e4:53:2d:45:bf:41:a3:6d:ac:c6:f8:9b:96:da:db:
71:b3:f6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:57 2026 by rpki-client