
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: af71fTg0t0MlMFES991Ww2oO22S6NmQ4M25R3UkqTuI=
Subject key identifier: D3:11:68:66:77:45:A8:DB:F6:A2:95:CE:7C:B2:0B:68:C7:0A:41:EF
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: FC
Signing time: Wed 13 May 2026 06:25:21 +0000
Manifest this update: Wed 13 May 2026 06:25:20 +0000
Manifest next update: Wed 20 May 2026 06:25:20 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: X6Yd8nyO7g+G13RiJts1W5fSsJjkwFjYTkdJpeDs3HM=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: May 13 06:25:20 2026 GMT
Not After : May 20 06:25:20 2026 GMT
Subject: CN=6a041950-08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:89:f4:fb:d3:ec:d3:3b:c1:56:8e:29:58:
eb:ff:17:e2:e8:94:ef:dd:d7:e3:18:ec:0e:7b:7e:
c3:15:b5:5c:2d:27:9a:6c:eb:4f:cf:ad:0a:b5:f1:
70:0e:97:09:13:e2:b7:94:8a:33:28:64:92:60:ce:
51:7a:a5:d4:02:16:4c:65:85:6c:63:3a:d7:33:da:
a8:e7:00:7f:22:fc:80:1e:5c:a9:d8:9d:c7:42:d1:
09:e8:b4:0a:99:5c:d5:f9:fd:76:98:71:8c:af:c5:
94:ab:af:4e:95:20:fd:8f:91:57:a9:b7:25:9b:d4:
f8:8d:57:b3:03:ed:ba:5e:00:93:f1:9d:2f:b9:ef:
c9:fb:48:94:b7:24:05:8f:c9:c1:37:b6:c5:07:3d:
33:ca:10:76:d1:e7:51:66:0e:63:81:18:9c:91:5e:
cf:60:91:a2:70:89:f7:dc:42:19:47:f2:b9:7b:87:
94:5f:0b:6f:44:11:6c:d8:4b:97:e3:d1:b5:8b:e1:
43:96:cc:fa:2a:dc:45:85:61:8d:de:ed:bb:9d:3d:
df:df:f0:69:32:60:52:ff:67:ce:bb:63:46:ed:53:
b7:59:6e:59:f9:f3:9e:5e:09:4e:e7:13:7b:b7:a7:
00:8d:8f:83:3e:5b:62:be:ae:88:e0:e0:f4:ee:94:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:68:66:77:45:A8:DB:F6:A2:95:CE:7C:B2:0B:68:C7:0A:41:EF
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:ac:5a:84:e8:b3:7c:d7:d0:34:e6:11:a0:2f:78:f1:6b:
ed:67:19:5e:de:b1:4d:83:b1:ee:70:32:d2:1d:1a:7e:a4:23:
ba:e7:d8:39:75:47:21:7d:34:89:ff:17:f4:df:56:ce:d8:57:
2a:f0:10:15:09:91:cc:d2:06:fc:4a:c7:87:37:7c:76:56:70:
db:07:1b:6e:8a:95:ba:34:64:23:d6:3f:d2:0c:77:7d:7b:9e:
87:6e:71:b0:dc:82:34:f6:e0:64:f2:a8:2a:fa:a8:02:83:f6:
d0:5a:e5:17:86:13:7a:f8:34:f8:16:f9:a5:9e:c1:ba:75:6f:
73:a0:b6:ca:08:93:e6:94:0d:26:75:16:25:93:ab:4c:d8:dc:
0f:3e:c4:cf:40:9c:53:aa:7c:32:f3:59:34:52:db:7d:6d:ef:
a5:cf:ae:d1:01:43:15:35:a6:38:d5:ec:7f:62:b2:b4:65:12:
6c:05:03:e7:78:a0:c1:89:29:b2:05:d2:05:8f:3a:e4:ee:8e:
b4:30:a0:8e:d2:22:a3:ae:5b:12:d3:07:b4:67:bb:55:79:19:
d1:5e:3c:51:ed:97:4a:c2:ee:ce:b6:ab:57:37:92:72:04:2c:
72:af:4c:30:cc:3b:34:77:65:04:22:52:c1:dc:3a:d2:43:c2:
97:10:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:34 2026 by rpki-client