
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: KBTzjk7UPcd4MdakNZfIknCH7FwMNASvpb3XuWaR7KM=
Subject key identifier: 60:2E:B4:21:A3:2C:0F:62:2B:F5:4B:B3:3D:96:3D:F6:13:B6:8F:D9
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 0253
Signing time: Wed 25 Mar 2026 01:44:26 +0000
Manifest this update: Wed 25 Mar 2026 01:44:26 +0000
Manifest next update: Wed 01 Apr 2026 01:44:26 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: 8TjdV0W30aDchHbZeoRDQdHEgTZViSyQ0PuFsfwkRc8=)
2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Mar 25 01:44:26 2026 GMT
Not After : Apr 1 01:44:26 2026 GMT
Subject: CN=69c33dfa-27ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:90:49:fe:6c:d4:43:1a:fd:6c:df:75:96:
ce:ce:29:0e:5a:3f:19:65:21:5c:8a:53:bf:aa:08:
66:ad:54:d5:a3:a3:21:ed:d0:de:5d:8a:6a:21:5c:
e7:d8:5f:8c:69:42:da:cf:e4:8f:4b:53:7c:fa:c0:
be:9a:04:21:fa:78:48:4f:a7:5d:e9:d4:21:9b:70:
e6:63:d1:c8:09:d6:93:a0:53:5d:c2:f4:d6:f7:f9:
87:b8:60:4e:0f:aa:a4:13:57:cb:d6:36:e7:9b:13:
96:68:c6:27:a8:1f:1e:d5:84:da:b3:2a:4d:ea:88:
bc:77:d1:2c:25:0a:ea:1c:49:84:f8:c8:1a:fd:93:
45:ce:01:cb:b3:0b:85:f0:86:19:8c:8a:66:30:f7:
1f:2c:51:31:e3:ab:af:24:52:bd:71:47:14:17:12:
c2:2d:37:6b:20:90:d2:cc:06:c6:71:94:01:d9:5c:
d2:f7:c3:09:03:67:f8:39:0a:dd:ea:15:2f:26:4e:
a9:54:44:53:74:f8:f8:c8:65:b4:62:11:f1:2b:65:
33:50:a9:b3:70:8c:1d:91:25:5d:83:76:e3:23:68:
e5:79:52:da:ec:11:65:3c:e5:88:0b:90:81:fd:1b:
e2:c9:c4:6d:8d:d7:52:3d:ec:48:37:8e:97:f0:9f:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:B4:21:A3:2C:0F:62:2B:F5:4B:B3:3D:96:3D:F6:13:B6:8F:D9
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:0c:9f:eb:f0:4a:93:94:47:d3:b9:ea:9b:47:73:34:0a:
a1:0a:9f:ce:ed:69:91:8d:79:08:73:49:df:39:56:8b:fc:2f:
82:9d:58:70:8f:46:af:65:57:40:3a:8d:37:da:4f:3b:08:a3:
bc:85:67:7b:73:07:87:3e:8a:b2:5a:0a:af:8b:53:34:37:8b:
8b:9a:43:ad:32:8c:30:c8:14:72:7c:2f:c1:7c:c4:ff:13:bb:
7c:68:11:97:34:57:af:b8:39:b3:3e:4b:2f:25:68:fa:71:dc:
64:98:cb:27:69:db:01:22:20:bc:20:0e:f4:b2:03:86:3e:50:
e8:30:68:47:23:c7:b9:80:2a:d0:1f:1f:e7:e5:3b:38:dd:2d:
0c:fc:25:07:2e:1a:ae:e4:ec:4d:9b:dc:c3:de:14:43:40:dd:
1c:ed:0f:cd:eb:75:6e:10:88:53:0d:eb:2c:9c:4c:3f:52:29:
4c:03:55:8d:74:62:0d:e8:fd:fe:7f:08:0c:09:8e:5b:eb:a4:
b8:b5:4b:dd:09:bb:02:e5:b6:8a:58:bc:ab:d5:aa:ef:8e:f3:
00:39:a2:a1:a0:d8:19:5b:7e:59:89:84:d4:41:aa:a4:d0:38:
08:fe:a9:60:55:a9:24:4d:1c:a3:a6:09:18:55:18:47:07:8b:
6a:c5:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:18 2026 by rpki-client