
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json)
Hash identifier: xDy65SgONo6Nz/r1MmILs2xt5QJyrTWCO37O/PV0U74=
Subject key identifier: 29:83:C8:B3:4C:95:14:E9:0D:28:F5:79:84:AC:B6:37:44:BC:67:78
Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
Manifest number: 18BB
Signing time: Tue 12 May 2026 17:32:08 +0000
Manifest this update: Tue 12 May 2026 17:32:07 +0000
Manifest next update: Tue 19 May 2026 17:32:07 +0000
Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: g4Ft50R8wpGvUMC+ACzqGD1TtWCqqzo5CC3/6cJ/nEE=)
2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: MxyzD6uP6BV8vVRqDcKdMO9gZ3aEGm0a3vLNIBFA74A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Validity
Not Before: May 12 17:32:07 2026 GMT
Not After : May 19 17:32:07 2026 GMT
Subject: CN=6a036417-09e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:c0:59:2f:f2:98:d1:18:64:f5:06:1d:b7:
7c:54:f3:78:9e:62:b4:66:5e:df:40:05:c3:fa:6b:
ef:88:96:ec:2c:63:50:db:6b:ca:7e:90:4c:5b:4b:
8e:5d:82:f9:75:6b:7e:ad:24:fe:19:99:78:1d:c8:
cc:1a:e7:99:4c:9d:1f:79:3c:d5:25:75:3d:ad:db:
a3:df:31:01:38:7e:51:d0:0c:1c:5f:1b:df:62:05:
88:75:5e:fa:c3:37:31:ef:01:85:54:40:38:23:4b:
40:bc:51:f6:ec:43:bc:ca:e7:1a:60:85:d9:ed:2c:
ad:08:1a:32:0f:c5:28:3f:0b:20:12:1a:22:7a:7e:
8c:f7:1b:33:02:26:a0:2b:9a:2c:ac:5d:a4:a9:ec:
3b:64:f2:66:6b:45:13:b1:62:2e:dc:2d:d5:32:0d:
c2:30:25:4b:60:f7:6a:ea:78:c2:d9:54:80:9d:d6:
11:45:99:19:3c:c1:04:99:7e:36:19:d6:4f:f2:d7:
73:2d:1f:0f:1f:9f:51:36:a8:84:3d:40:bc:65:6a:
27:97:e0:15:f9:aa:c3:0c:8f:86:97:6e:8a:83:32:
7e:c1:dc:81:51:0f:48:47:40:a2:00:c5:7c:fd:bf:
0e:b3:84:45:55:7d:3a:b4:61:d1:04:38:21:47:3e:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:C8:B3:4C:95:14:E9:0D:28:F5:79:84:AC:B6:37:44:BC:67:78
X509v3 Authority Key Identifier:
keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:3c:d2:7c:e7:c2:a0:5a:9d:40:7d:ad:8f:22:19:cd:4f:fa:
79:bb:d9:22:a3:8c:e9:14:27:55:06:f5:bb:1a:d5:66:91:86:
34:39:0d:52:1d:bf:b5:32:b4:7a:7d:04:43:30:33:be:e8:59:
fd:ae:2a:1f:7d:ca:49:4d:ad:77:81:74:31:e7:63:e1:a7:1b:
46:34:33:f0:d2:2e:ea:d9:fb:e2:78:11:d1:ef:cc:47:77:95:
b0:51:58:7d:2f:a4:22:d0:97:bf:f7:41:c9:62:62:c2:33:90:
f6:5e:f0:24:8d:b1:f8:8e:ba:56:a6:eb:d9:24:b4:ae:cb:36:
26:7f:c5:79:4c:70:35:89:1b:d8:5b:7a:a8:33:2e:a7:d5:8c:
9c:e0:76:25:09:bc:29:f4:67:49:7a:e9:ca:d8:51:7f:61:66:
2e:ac:a6:d6:46:3c:6a:07:a5:ee:92:b8:09:a5:11:2e:6d:71:
0d:71:91:e7:b9:39:ec:16:71:21:cc:5c:f1:ce:f6:42:72:ee:
f0:7f:34:08:df:d2:c2:58:d3:11:18:40:6b:8d:a3:49:0e:4a:
e8:f0:b9:83:06:db:e9:10:bb:14:7a:f9:22:fc:b4:da:56:a4:
4c:50:6c:a8:ca:6a:62:63:e8:69:fa:b6:7f:f9:68:54:0b:b2:
b5:b6:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:23 2026 by rpki-client