
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: t9aldBdOZ97KpPJukaU5SNkUW2psLLaEX28dLiPWLXI=
Subject key identifier: B1:B4:73:7D:5D:BD:4B:30:F8:03:E1:10:7B:57:F8:26:F1:3F:C0:A8
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 028F
Signing time: Thu 23 Jul 2026 02:54:25 +0000
Manifest this update: Thu 23 Jul 2026 02:54:25 +0000
Manifest next update: Thu 30 Jul 2026 02:54:25 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: UEPiVmTt5TWmioRT57DGBzAltYgNOBvVoLdkfKRASqs=)
2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Jul 23 02:54:25 2026 GMT
Not After : Jul 30 02:54:25 2026 GMT
Subject: CN=6a618261-14ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:78:91:d7:55:0d:f1:04:25:c3:a3:cd:f8:
a5:46:7c:8c:a4:56:8c:3d:20:a3:c8:57:b4:d2:3c:
4e:a4:32:80:22:e2:09:72:28:5d:6a:c8:34:12:16:
42:9e:87:46:8c:fa:36:00:81:64:38:78:61:af:07:
a8:13:04:cf:eb:a7:6d:dd:1d:d8:6e:0f:7c:f0:d5:
fb:6e:49:f1:8c:78:07:f8:25:dc:7a:31:20:33:15:
14:3d:d9:9d:60:6c:f6:cd:ad:f6:5e:f2:e1:34:17:
a8:04:52:61:9b:c4:eb:42:c7:7d:66:3f:74:d9:cc:
07:44:ae:95:c2:63:dd:b4:f7:a3:77:3b:88:41:ab:
05:ed:01:94:03:ae:33:35:ed:a3:14:01:f1:71:98:
28:03:da:07:38:58:ec:28:fc:e1:82:43:45:e7:f9:
4e:97:ed:d9:3a:08:47:78:24:78:17:b1:b8:12:17:
60:0e:9d:4b:4c:d8:5d:2e:b5:0e:7b:c6:43:d9:0f:
f6:85:17:24:08:20:d7:f0:41:e3:2b:d5:bf:b1:f7:
b0:f3:37:49:41:a9:55:d5:08:8b:de:84:ac:92:07:
f0:9a:76:3f:43:e0:e3:2d:1f:fe:df:4f:f7:5b:98:
f7:6e:fe:2d:73:fa:b2:d6:5f:54:cf:81:8d:bb:b1:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:73:7D:5D:BD:4B:30:F8:03:E1:10:7B:57:F8:26:F1:3F:C0:A8
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:85:73:17:97:20:e1:9f:e9:6a:89:1a:95:86:09:e3:e5:
3b:1a:d0:8d:34:cb:35:53:be:f9:37:7e:8c:e2:19:c8:73:4d:
b0:54:c7:46:26:10:50:3c:66:a6:74:74:47:b7:ea:e6:60:a6:
c8:37:8b:f8:9c:4a:31:a9:cf:90:b8:3b:03:1b:8c:55:dd:91:
c5:0f:a6:1b:c7:35:14:12:3e:da:20:fe:41:fb:e1:f1:77:43:
cd:4c:9e:2b:18:2c:7f:0d:6e:d5:bc:85:d6:b9:a8:27:04:93:
35:f2:53:3f:ad:c2:7e:75:42:d9:0a:72:88:35:77:36:e4:b5:
65:c7:16:c9:30:8c:1c:24:9b:44:8a:03:30:13:ed:91:2d:45:
5a:af:0e:de:fa:00:36:43:c6:a5:9a:aa:8b:d2:93:42:1b:49:
c7:e1:e9:17:46:92:bf:cd:ad:0b:f3:30:d2:31:b9:86:d2:8c:
e3:23:7c:a3:25:a0:c7:fd:c8:5f:4e:d1:14:e4:6f:88:4e:ff:
67:93:a2:a0:28:46:74:e6:fa:8c:b6:62:1c:c1:87:0c:5a:0f:
7e:f1:f7:3d:7a:28:2c:44:6b:d5:ba:f6:1a:c4:86:2b:e2:f6:
b0:9a:a6:8f:db:86:59:93:0d:5e:54:06:80:2a:5e:fd:55:15:
bb:ff:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:15:58 2026 by rpki-client