
$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json)
Hash identifier: e9ryPIecE1LFy1Llrm08MYiK9JKbD0BCv8IuKX9nhcs=
Subject key identifier: 8A:4F:F3:7E:93:A4:3E:05:61:B2:EB:E8:C1:A8:3F:BE:8A:BD:4E:61
Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
Manifest number: 04C8
Signing time: Tue 12 May 2026 23:57:18 +0000
Manifest this update: Tue 12 May 2026 23:57:17 +0000
Manifest next update: Tue 19 May 2026 23:57:17 +0000
Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: VCXXQzqtTSuE2ii52ybimmOGaq9IADb90JSlwWTVVLU=)
2: 8EAD1EEE1EC311F183D677F8243D8C67.roa (hash: DOsChJEuEe0VAUnX2clRsDx3g4TiAhWDNCF2OOQ2WC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl
rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77
Validity
Not Before: May 12 23:57:17 2026 GMT
Not After : May 19 23:57:17 2026 GMT
Subject: CN=6a03be5d-b0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:9e:25:7d:37:04:39:4b:c9:e4:b8:75:0e:
38:30:3d:fc:aa:b2:bf:0a:d7:69:7e:1c:c7:25:d3:
ea:ec:38:fc:d4:a7:d3:4f:6e:8c:82:89:1e:61:74:
14:bb:1f:6d:65:30:b7:59:c4:dd:ea:ac:cc:d8:f0:
1a:67:3a:ae:47:a6:b1:ee:3e:0f:c0:1f:ff:d4:d2:
61:cb:c1:0a:ac:9a:68:85:35:53:cc:88:06:3a:13:
70:38:a4:cd:78:6e:51:ae:2d:1a:95:25:4d:52:10:
13:30:20:4b:26:1f:b2:6e:e1:65:43:c4:29:4e:d8:
9a:69:88:ff:17:97:df:7b:f4:39:45:90:c4:af:2b:
b8:64:05:25:06:3c:84:47:81:45:68:15:a3:e4:f9:
56:88:63:a2:9d:a0:71:b4:65:f8:6f:e4:14:21:9f:
2f:97:63:ba:a2:ae:a4:31:b3:3b:4c:ec:bd:4c:74:
12:2d:68:69:ca:ce:9f:5a:68:6e:83:d1:97:8d:8e:
b5:2a:98:a5:1c:60:64:98:13:e0:b4:72:79:ad:fa:
29:bf:00:3c:9d:b0:d4:a7:d1:00:0b:9c:c1:cb:b0:
e8:19:bd:3a:62:93:4e:52:d6:b1:52:49:ee:2e:be:
e2:29:ef:06:24:7b:a2:8f:3d:1c:8c:11:47:da:a0:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:F3:7E:93:A4:3E:05:61:B2:EB:E8:C1:A8:3F:BE:8A:BD:4E:61
X509v3 Authority Key Identifier:
keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:1b:74:df:99:ea:8e:96:c4:a1:fc:72:8b:4b:a3:08:28:
88:98:56:cc:7d:7f:ee:7b:6a:34:15:44:23:89:9e:2d:c6:e1:
c3:5e:7e:a9:b5:eb:c3:78:ae:09:23:7e:5d:62:22:68:c9:1a:
10:35:bf:0a:1a:72:3d:31:35:0a:28:f3:05:3a:a0:2b:fc:bf:
fa:44:4d:18:e8:8a:51:db:d5:ae:60:38:73:02:43:a4:e1:aa:
7e:9e:89:94:78:18:46:c6:41:fc:9b:f5:72:08:34:fa:63:a0:
b8:eb:2b:ff:b1:3d:fc:55:81:6e:a0:a3:13:7d:14:6d:1f:1f:
c5:ea:60:7d:96:53:27:a5:e2:18:47:9d:fb:75:7b:2e:f1:95:
57:d5:3e:2f:63:ff:ec:2b:94:e7:96:22:b3:36:3c:8e:7f:47:
4f:0f:03:e5:24:d2:66:9a:e2:15:d5:30:bd:92:58:27:5d:ab:
a5:ca:5e:8e:99:fd:f2:31:5f:04:63:a8:06:58:a3:c6:37:f7:
b6:60:8c:e3:08:11:b5:18:0d:5f:e4:ec:df:b3:b9:5d:41:34:
d4:31:b1:1b:7d:c5:ba:ab:d2:0a:e2:89:45:54:d1:3c:03:3e:
51:88:14:ae:70:99:83:ee:14:04:3d:e0:33:d7:82:09:0a:38:
c1:d3:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:41 2026 by rpki-client