
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File: xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier: myv+ahyRkwmydNX/VhOyblqvflTvrpOAT7LEIOHTT4s=
Subject key identifier: FF:10:FA:22:4D:2C:6E:5D:42:5A:81:5C:DC:63:2C:2C:FD:05:D3:DF
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer: /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number: 088E
Signing time: Tue 12 May 2026 20:40:36 +0000
Manifest this update: Tue 12 May 2026 20:40:36 +0000
Manifest next update: Tue 19 May 2026 20:40:36 +0000
Files and hashes: 1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: Qh99zlnI2GGY7461gpBTHBEyHdQSBcj1NpirT1CIvEY=)
2: 15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (hash: 2uCbpjvfq4YvnddB40jrJriUX1Cml5veDQrnZl2hjsg=)
3: 15335506DD8C11F0AEC3F5743D6F56BC.roa (hash: DQNFdBFL+0TtFwrA9F0i05j25xzVKCNmCBUcl2do47w=)
4: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: b1xU0h3rTRtWCrtn7yfCOW/jNbAha05lM6/yu5ZuQQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Validity
Not Before: May 12 20:40:36 2026 GMT
Not After : May 19 20:40:36 2026 GMT
Subject: CN=6a039044-e925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:b2:13:ef:69:72:ab:d9:2f:8e:56:b7:cf:
2a:de:dc:d5:94:36:9a:22:7d:b5:fc:4c:32:42:ae:
7b:d7:f6:a7:a9:b1:e8:44:08:3a:dc:9e:58:01:58:
29:9a:10:89:9e:cc:9d:fb:6c:2c:b1:07:e7:8a:b3:
9f:dd:c3:33:79:5b:26:6e:40:c9:ff:33:60:c3:f1:
b9:e5:66:33:be:7a:b7:d9:15:de:ac:dc:f9:a9:9a:
e8:01:2d:8c:95:20:89:75:56:16:b8:ae:e4:cb:25:
81:d0:73:36:5c:59:af:03:6d:15:20:28:11:1e:b6:
8e:1b:de:d5:06:d3:3a:01:3a:39:79:cd:9a:a6:24:
35:01:51:18:38:8d:07:be:a2:9f:80:8f:42:dd:11:
1f:a8:4c:71:c2:b6:7c:92:74:7c:dc:df:00:f0:0b:
f9:bc:bb:1f:0e:77:12:82:6a:17:56:75:e5:d1:a6:
c2:9d:2f:b3:af:0d:5e:c7:7f:c1:a0:7c:76:55:78:
04:5c:6b:b1:fa:fe:40:3f:5b:d8:9e:aa:e1:9c:d1:
24:35:04:3e:2c:96:98:eb:ca:b3:7c:37:c6:bd:89:
18:16:b6:3e:b6:c6:92:26:ea:7d:aa:8a:b6:be:c2:
c8:70:45:ad:36:e0:3c:a2:46:f9:18:fb:2c:7c:26:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:FA:22:4D:2C:6E:5D:42:5A:81:5C:DC:63:2C:2C:FD:05:D3:DF
X509v3 Authority Key Identifier:
keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:70:0f:9c:1c:79:43:ea:ba:73:20:5c:77:12:03:1b:ee:4e:
aa:68:e1:ae:ee:85:db:07:84:a2:22:93:ab:1c:20:c4:3e:bb:
db:25:db:23:36:79:b4:7f:f6:18:c9:c9:c8:1a:b9:aa:99:90:
c1:c3:f8:91:66:a9:25:96:71:00:cd:f5:73:d2:ab:9f:17:b2:
68:2b:8f:f9:e5:9a:fd:4d:e7:86:2f:cf:00:57:62:ac:77:8c:
5b:16:c9:2f:96:57:95:06:95:a6:9f:47:2d:8c:78:f0:c2:bd:
47:b9:65:e4:61:4f:52:f8:ec:51:d9:c9:8a:8c:d3:96:01:1c:
49:36:1c:2a:73:eb:c8:de:9e:05:48:59:88:47:26:60:31:e6:
55:c9:70:3b:8b:2c:71:4f:2c:bf:e4:dd:a9:b4:34:18:2d:61:
80:39:b7:a1:c3:69:af:cc:bb:e0:a4:9f:a0:13:21:14:70:13:
1b:2f:1c:68:3f:2d:0b:2e:b7:b1:d5:2a:b2:f6:f6:9b:ab:77:
e5:0f:17:cc:44:78:a2:26:69:fa:48:ef:8f:38:3d:3a:dd:6d:
3b:44:eb:22:ad:39:31:65:a3:bd:c1:5e:f8:c3:b2:6f:64:57:
e9:d0:65:4e:6b:bf:1e:49:b8:fb:76:b2:80:1b:47:18:ce:cf:
90:ef:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:33 2026 by rpki-client