
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
File: xWV5UwnochSM0g3isqQ807IEwlE.mft (raw, json)
Hash identifier: SmbHd6DTQzFEyFlhEF9kmM4aomU15o7vjlkRYemYL3M=
Subject key identifier: FB:4A:3C:84:02:15:1C:66:1F:17:BC:D5:E6:40:DE:E7:74:1F:5A:79
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Certificate issuer: /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
Manifest number: 18
Signing time: Thu 23 Jul 2026 11:06:02 +0000
Manifest this update: Thu 23 Jul 2026 11:06:02 +0000
Manifest next update: Thu 30 Jul 2026 11:06:02 +0000
Files and hashes: 1: xWV5UwnochSM0g3isqQ807IEwlE.crl (hash: UqUZQcL0ZtZdXjP454UabrsWamZBy0pm001vh9y9sT0=)
2: C2308ADC6E2111F18E37985672A30FBC.roa (hash: wptdMLkGYWCREgeRbFIexsWdbeobaprWrt9rh5ES8yE=)
3: E58C711C6E2111F189BF576272A30FBC.roa (hash: 2KzEYDFnfXibar/cKmNE28FNWE3E+aAr6Na8gmkWSTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Validity
Not Before: Jul 23 11:06:02 2026 GMT
Not After : Jul 30 11:06:02 2026 GMT
Subject: CN=6a61f59a-5cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:47:dd:45:9b:4f:d0:30:f4:c0:24:ac:02:
20:2b:fc:33:87:46:7d:71:fb:ed:36:f6:9b:0c:67:
e0:d4:74:ac:83:d0:89:73:5f:73:e3:7a:7d:3b:45:
4a:c6:e3:9a:33:53:28:88:94:29:c0:3b:4f:2e:8f:
dd:02:22:d4:03:a0:7b:7e:5a:cd:33:82:b1:d2:14:
2a:c9:3b:69:d3:db:1e:30:11:90:8d:10:c9:4f:67:
e2:3e:a7:7d:4b:54:82:f6:13:15:30:f2:03:1e:a2:
35:11:39:f8:d8:d1:08:45:50:9f:b5:02:3b:ee:58:
dd:21:de:50:ed:f5:cf:63:d7:88:44:14:7a:c5:62:
2b:99:2b:0a:e5:e3:a1:c2:ac:12:c3:40:20:43:30:
de:d7:95:1a:c4:4a:b2:e9:92:c6:ee:d5:f2:a7:5e:
1e:33:10:5d:0e:cf:f9:55:87:8b:1c:fb:62:31:46:
92:18:5e:09:7b:b3:2f:9b:5d:57:09:b9:9d:fa:c0:
8a:73:21:47:38:40:ee:2f:6b:98:81:e8:b3:1c:7a:
65:b7:5c:9a:be:30:bc:ff:9b:d4:9b:0f:0c:b8:db:
6b:3b:e8:b4:d4:f9:d2:c1:6d:e6:65:7b:7d:ef:9d:
d9:49:61:74:de:23:b5:b5:55:6f:8c:6e:9f:8e:83:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4A:3C:84:02:15:1C:66:1F:17:BC:D5:E6:40:DE:E7:74:1F:5A:79
X509v3 Authority Key Identifier:
keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:15:57:71:f3:34:3b:15:b9:b7:7c:58:72:1e:2d:c7:67:
0f:ce:31:7d:ec:ed:52:2b:99:ad:67:66:19:8c:20:6b:88:39:
79:fe:fc:0f:38:27:5b:19:1e:2c:37:cf:f6:8a:73:a1:83:d7:
3c:f1:f3:20:f1:b9:2f:72:39:f2:11:50:c6:68:ea:bc:49:52:
91:91:d4:b1:04:d3:72:52:80:f4:4d:61:64:91:d2:3d:03:25:
d9:d1:4a:28:2d:e8:4f:90:90:13:76:7e:a6:a7:9a:70:cf:09:
59:78:ff:59:33:aa:c4:84:f9:f2:6a:48:d7:01:43:34:21:15:
b4:b4:45:ca:f6:34:02:72:0a:c7:62:f5:d6:ce:f1:51:fc:e0:
89:33:ce:af:60:3e:5f:f8:90:e6:07:b6:56:cd:2e:6e:e1:0c:
e5:6f:d5:3a:49:b2:26:e2:20:72:5e:fb:c6:27:48:ef:82:13:
47:c5:7d:f1:bc:42:02:b0:3c:49:f3:60:74:bf:45:da:c2:d9:
9c:88:02:1e:97:3a:74:fc:34:fa:3e:b0:97:56:68:e3:10:f3:
f8:fc:65:b3:6e:fd:25:6f:74:38:28:5d:a5:33:59:b0:7e:65:
e0:23:77:42:67:65:23:a6:b1:18:bc:17:8f:0c:0a:cf:d3:b4:
b2:93:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:34 2026 by rpki-client