
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier: Ojux/VpN+Yb5SaCWGgtVq1zWjNbOPUbvKzaC5JLE+Wo=
Subject key identifier: 28:BE:DB:86:6F:2F:3E:2B:6C:11:64:30:D3:06:F6:DB:43:8F:20:B8
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial: 086F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number: 0867
Signing time: Tue 12 May 2026 20:47:40 +0000
Manifest this update: Tue 12 May 2026 20:47:39 +0000
Manifest next update: Tue 19 May 2026 20:47:39 +0000
Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: Lej2aIqMnfIzFzRd7Z2glIOi+jlMFZfc411o7KN06y4=)
2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 0atk63T1W/wzmM9R09qN0CbSSQOZFaD/GMI/cNzoG4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Validity
Not Before: May 12 20:47:39 2026 GMT
Not After : May 19 20:47:39 2026 GMT
Subject: CN=6a0391ec-8140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:7d:25:55:24:16:16:1d:62:29:84:38:bd:
68:bf:40:b0:14:21:72:bd:0e:dc:09:f4:3b:7b:a8:
99:04:f0:d5:82:d3:b8:b6:49:52:1c:38:75:6f:7f:
d7:b6:a4:68:fa:17:19:6f:e5:d8:fc:d3:00:80:a4:
e2:42:fc:54:0c:9e:90:fa:bd:84:a8:44:80:72:93:
91:30:2a:26:d2:d2:38:bb:73:60:f8:f8:83:52:47:
81:84:84:db:81:af:28:30:da:b8:25:4c:96:62:96:
47:f0:c0:bf:73:8e:b5:46:f3:8f:72:3b:92:3e:64:
1c:ce:43:77:20:30:7a:d9:87:00:e4:11:a4:f0:a1:
54:99:8f:5f:4c:d1:51:33:b7:c0:f4:ac:aa:22:da:
c5:8e:75:74:18:b8:69:0f:a2:07:a3:43:39:39:6a:
8a:49:02:4a:9e:4c:34:e1:3f:bc:e0:e5:62:0b:72:
8b:b4:a9:42:b9:9c:0f:b3:a4:ae:bf:74:f0:98:fc:
54:b2:25:d9:ed:17:28:f4:3d:4a:44:4b:da:c8:f8:
7a:dd:21:f3:bd:e3:cb:32:c5:b0:61:fc:24:38:71:
db:df:bb:4f:8e:b1:06:10:11:33:51:46:67:d2:eb:
2f:fe:f1:d2:51:73:02:b4:6b:f8:0d:cd:fc:71:ec:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:DB:86:6F:2F:3E:2B:6C:11:64:30:D3:06:F6:DB:43:8F:20:B8
X509v3 Authority Key Identifier:
keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:d7:4c:e9:0b:a9:3c:35:1a:0b:99:f5:0b:bb:75:e0:27:
19:e6:00:51:7e:4c:0f:5a:da:37:36:b8:db:7d:c1:a3:36:54:
72:5b:a4:59:23:3f:6b:09:41:96:4b:d9:84:c5:60:f2:57:39:
50:1b:50:b8:cc:05:99:69:b6:67:09:a9:cb:84:75:27:61:16:
a0:5a:f5:94:ac:d4:88:e4:5a:e8:ca:34:50:df:52:35:c9:60:
e1:b1:aa:d4:1a:e0:d7:27:fd:8a:a2:a7:19:75:a0:fe:c0:86:
aa:5f:36:11:08:f3:9e:1a:d2:03:ae:2b:c4:03:0d:fa:04:b6:
c9:1c:c2:c9:79:7f:2d:e8:a7:77:63:1c:72:10:90:e6:ff:01:
65:98:88:12:17:9c:28:1c:3f:53:a5:9d:f7:66:c5:77:71:8a:
1a:bd:f0:97:98:fb:3a:21:0e:bb:06:4d:af:c3:94:c2:e5:2b:
d4:e8:24:2c:57:69:5f:87:3f:87:d5:93:f6:eb:d4:dd:22:f9:
71:c1:09:49:65:b5:b6:dc:c4:d6:7c:a7:cd:99:88:7e:e2:e5:
ad:0d:8f:07:96:a1:11:83:2c:1f:a2:57:4a:cd:0b:df:c9:0a:
37:e4:73:51:70:90:41:ce:c4:97:8b:dd:69:bd:6a:f8:c8:47:
58:d7:e4:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1
NjFCOTVEREUwHhcNMjYwNTEyMjA0NzM5WhcNMjYwNTE5MjA0NzM5WjAYMRYwFAYD
VQQDEw02YTAzOTFlYy04MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWZ9JVUkFhYdYimEOL1ov0CwFCFyvQ7cCfQ7e6iZBPDVgtO4tklSHDh1b3/X
tqRo+hcZb+XY/NMAgKTiQvxUDJ6Q+r2EqESAcpORMCom0tI4u3Ng+PiDUkeBhITb
ga8oMNq4JUyWYpZH8MC/c461RvOPcjuSPmQczkN3IDB62YcA5BGk8KFUmY9fTNFR
M7fA9KyqItrFjnV0GLhpD6IHo0M5OWqKSQJKnkw04T+84OViC3KLtKlCuZwPs6Su
v3TwmPxUsiXZ7Rco9D1KREvayPh63SHzvePLMsWwYfwkOHHb37tPjrEGEBEzUUZn
0usv/vHSUXMCtGv4Dc38cewq7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCi+24Zv
Lz4rbBFkMNMG9ttDjyC4MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE
ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP
SDBuSkNCTFJXeDlXRzVYZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGTPXTOkLqTw1GguZ9Qu7deAnGeYAUX5MD1raNza4233BozZUclukWSM/awlB
lkvZhMVg8lc5UBtQuMwFmWm2Zwmpy4R1J2EWoFr1lKzUiORa6Mo0UN9SNclg4bGq
1Brg1yf9iqKnGXWg/sCGql82EQjznhrSA64rxAMN+gS2yRzCyXl/Leind2McchCQ
5v8BZZiIEhecKBw/U6Wd92bFd3GKGr3wl5j7OiEOuwZNr8OUwuUr1OgkLFdpX4c/
h9WT9uvU3SL5ccEJSWW1ttzE1nynzZmIfuLlrQ2PB5ahEYMsH6JXSs0L38kKN+Rz
UXCQQc7El4vdab1q+MhHWNfk+g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:54:15 2026 by rpki-client