
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier: Va9Q8FxwKI6hTduv6L/k/BwOrkpl4HrRxVLZ5U2d+54=
Subject key identifier: EC:70:60:5F:B0:D9:5A:39:C1:9B:EA:D8:07:A3:6E:D4:AA:08:4C:40
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial: 0804
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number: 07D1
Signing time: Tue 12 May 2026 21:29:06 +0000
Manifest this update: Tue 12 May 2026 21:29:06 +0000
Manifest next update: Tue 19 May 2026 21:29:06 +0000
Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: 84F0hGPgwxZGMWEbeYVL3cgpHMiPac2HMCMww4eFMEI=)
2: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
4: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
5: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052 (0x804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Validity
Not Before: May 12 21:29:06 2026 GMT
Not After : May 19 21:29:06 2026 GMT
Subject: CN=6a039ba2-6c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:19:01:e5:d5:23:41:d7:ca:1c:cb:15:d7:
1a:39:b9:b7:fe:20:74:23:4f:91:e6:19:a3:e3:66:
62:54:27:f7:9a:65:28:9a:97:07:f1:c3:bd:e0:08:
a2:b1:2c:55:d9:19:51:7d:ac:45:84:f9:49:2e:a7:
31:74:c0:bb:ad:be:23:f4:fd:cf:e0:d2:84:88:3f:
c5:5f:54:6e:48:63:a2:3a:5d:54:89:b7:8d:6c:29:
ab:78:46:a2:4b:af:27:5d:b8:16:41:eb:53:f9:b6:
13:b5:af:c4:97:8f:9b:bd:9a:a0:ea:46:fc:ce:e8:
2b:d6:67:d3:3a:5f:6c:33:27:45:3c:7c:a4:23:b8:
70:78:7a:be:7a:02:a8:24:d7:0d:40:12:43:2d:ca:
f7:27:6f:ab:79:d2:d1:dd:43:d2:3a:c1:a5:17:a0:
07:2a:fb:55:c5:cd:51:38:eb:74:56:9d:09:e5:92:
37:ea:65:3a:7e:71:79:38:79:c3:3a:f1:7e:25:8f:
e8:82:87:99:c6:6b:7a:a9:55:da:51:55:90:ad:30:
71:8d:71:7d:77:94:89:e6:aa:95:5e:7e:97:80:70:
2f:4b:53:9e:cc:e2:98:ba:89:60:49:35:47:f3:91:
5c:11:7a:21:13:3f:fc:5a:62:57:7e:af:5b:07:aa:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:60:5F:B0:D9:5A:39:C1:9B:EA:D8:07:A3:6E:D4:AA:08:4C:40
X509v3 Authority Key Identifier:
keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:6f:77:f6:91:4e:35:8b:1c:2d:0c:a3:8e:48:58:33:90:
27:03:85:1d:6b:28:fe:f0:39:48:16:33:72:58:38:21:a6:ed:
6a:d0:7b:2a:05:ee:94:f2:40:fa:71:86:45:ff:1f:d9:fb:42:
77:67:64:85:10:e7:75:f4:b7:39:21:c2:ad:dc:72:18:a5:a2:
3f:5d:49:96:8a:c4:25:0b:64:95:63:35:5b:c2:06:3f:a5:97:
b5:b0:27:c9:42:c7:5a:3d:b0:1e:34:54:87:49:27:8b:d9:19:
82:ec:83:6a:d0:84:7c:ad:0b:27:e5:30:51:bb:7a:a6:7d:04:
b5:29:b1:aa:e6:b6:ee:06:32:74:36:99:3d:4a:14:55:4d:14:
a9:11:91:cd:95:cc:f8:e1:b7:c4:5a:43:c1:a2:d1:e9:38:62:
b6:ff:22:be:fd:44:fe:3b:0d:97:4a:6e:2f:77:fb:30:c8:a4:
52:3a:6b:4c:1e:33:85:9f:3a:e2:7e:3b:ac:d8:c3:5b:22:a2:
97:15:1e:57:f4:c0:7d:7e:48:d7:b9:b6:38:5f:79:e8:e3:4a:
df:5c:d2:31:75:c0:41:0e:22:ce:0c:84:e9:ab:8a:12:3d:6f:
4f:24:b1:c6:4e:14:f4:5d:56:b1:47:4c:68:45:9a:fb:7f:d2:
5a:9b:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:46 2026 by rpki-client