
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: lRX0v7Z1w3/vWa8OJMuHyn0zMHJucBc8XiIxcYDMdG8=
Subject key identifier: B6:5C:E9:75:EC:66:47:39:AC:92:07:FF:5F:90:BC:34:2E:71:0B:A0
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: 011F
Signing time: Thu 23 Jul 2026 07:34:23 +0000
Manifest this update: Thu 23 Jul 2026 07:34:22 +0000
Manifest next update: Thu 30 Jul 2026 07:34:22 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: uAGp1snZYSH05Oki0vURAEt4EdmBROYd6n+BvQQQ07U=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: Jul 23 07:34:22 2026 GMT
Not After : Jul 30 07:34:22 2026 GMT
Subject: CN=6a61c3fe-7ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:20:ba:5f:71:3d:df:68:dc:b3:4c:fe:2b:
9a:80:d8:d3:ea:db:d5:f4:75:de:b3:be:f3:b0:bd:
17:a9:cd:00:0c:43:e7:c1:81:03:3d:23:f2:e2:f2:
e2:04:6a:4c:1a:95:7d:35:fd:f6:2e:4e:9f:4f:e3:
24:8e:be:46:c4:6e:79:64:a0:9e:78:a5:c5:a7:e5:
d4:eb:9a:b2:41:90:cf:70:a5:a4:01:17:f6:a2:14:
ec:68:1f:e9:86:43:be:fa:0c:08:1f:c3:71:3a:4d:
6c:1f:da:b3:c9:19:b5:ed:b6:3e:f9:e2:71:9d:60:
77:a0:67:6f:3c:27:3d:d9:72:81:ff:e8:8e:ea:28:
6d:c8:fe:fd:e7:91:d8:ec:ee:1c:0e:4c:2f:58:68:
4c:fe:76:2a:a7:5d:7a:fe:8b:f9:b5:5a:db:11:4b:
d6:c0:45:48:c6:c3:88:35:fa:fd:37:17:a6:95:77:
7c:2a:8d:ac:79:e7:f2:1c:94:28:be:9a:41:16:53:
36:b1:d0:b7:8f:9d:0f:28:26:d3:6f:2b:6e:6c:ba:
2c:28:48:57:00:21:72:28:75:8c:39:64:56:23:0d:
b0:ec:63:b0:07:42:fb:d7:43:82:f4:0b:9b:61:51:
58:90:25:71:da:64:c5:42:d3:dd:fc:0f:16:c7:b6:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5C:E9:75:EC:66:47:39:AC:92:07:FF:5F:90:BC:34:2E:71:0B:A0
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:38:63:88:73:49:88:d2:32:f4:f9:43:8e:da:44:aa:e6:40:
5b:72:38:e5:84:cd:da:52:0a:0c:ec:e2:a4:d5:df:3e:53:3c:
c4:b4:a6:de:c0:a0:d3:08:31:1f:9b:a4:85:04:73:5a:e8:17:
af:9c:5f:5e:81:63:5e:5e:72:10:b5:ee:00:8d:ca:2e:7e:53:
1b:15:68:23:ee:8a:d7:9b:a4:46:e1:e1:80:22:eb:70:fc:9b:
49:04:9c:80:4f:71:f3:57:24:3a:46:f1:36:f3:ce:c3:35:fd:
97:a0:5c:77:67:e7:37:c1:5e:de:e4:0a:28:b1:11:f7:1e:28:
09:e4:28:b0:27:7b:a2:34:cd:c4:71:8d:4c:97:07:9d:61:c2:
f1:3b:f9:07:a0:14:af:dd:05:ad:dc:d3:ef:14:e3:a3:d0:dc:
d3:0b:3e:e2:b3:f2:98:3d:57:0c:57:2f:04:f3:8e:18:f1:d4:
00:e1:ef:b0:e4:55:db:a0:70:c6:78:08:b8:13:f2:2e:13:86:
d8:17:62:75:d9:15:a1:dc:59:4b:b8:9e:e5:fc:98:76:ec:20:
a9:37:87:2a:c4:df:17:a2:e9:2d:cb:72:83:4a:80:ad:29:b9:
89:0b:85:86:5e:bc:18:ea:a1:e8:c0:d9:26:c0:7e:a9:b9:37:
ee:e0:36:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy
NUIyOTMxNjAwHhcNMjYwNzIzMDczNDIyWhcNMjYwNzMwMDczNDIyWjAYMRYwFAYD
VQQDEw02YTYxYzNmZS03YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOMgul9xPd9o3LNM/iuagNjT6tvV9HXes77zsL0Xqc0ADEPnwYEDPSPy4vLi
BGpMGpV9Nf32Lk6fT+Mkjr5GxG55ZKCeeKXFp+XU65qyQZDPcKWkARf2ohTsaB/p
hkO++gwIH8NxOk1sH9qzyRm17bY++eJxnWB3oGdvPCc92XKB/+iO6ihtyP7955HY
7O4cDkwvWGhM/nYqp116/ov5tVrbEUvWwEVIxsOINfr9NxemlXd8Ko2seefyHJQo
vppBFlM2sdC3j50PKCbTbytubLosKEhXACFyKHWMOWRWIw2w7GOwB0L710OC9Aub
YVFYkCVx2mTFQtPd/A8Wx7ZQgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZc6XXs
Zkc5rJIH/1+QvDQucQugMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS
R0h0b1dPdklId1lsc3BNV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyjhjiHNJiNIy9PlDjtpEquZAW3I45YTN2lIKDOzipNXfPlM8xLSm3sCg0wgx
H5ukhQRzWugXr5xfXoFjXl5yELXuAI3KLn5TGxVoI+6K15ukRuHhgCLrcPybSQSc
gE9x81ckOkbxNvPOwzX9l6Bcd2fnN8Fe3uQKKLER9x4oCeQosCd7ojTNxHGNTJcH
nWHC8Tv5B6AUr90FrdzT7xTjo9Dc0ws+4rPymD1XDFcvBPOOGPHUAOHvsORV26Bw
xngIuBPyLhOG2BdiddkVodxZS7ie5fyYduwgqTeHKsTfF6LpLctyg0qArSm5iQuF
hl68GOqh6MDZJsB+qbk37uA2GQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:23 2026 by rpki-client