
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json)
Hash identifier: Urpp20irxvtga4fgAL4rZ9jefo1rhz5EEvbKWoK1Ew0=
Subject key identifier: 91:EA:1D:A1:33:53:18:EF:CB:80:CD:9F:DE:E2:6A:F6:DF:38:56:BB
Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
Manifest number: 0223
Signing time: Wed 13 May 2026 02:48:07 +0000
Manifest this update: Wed 13 May 2026 02:48:07 +0000
Manifest next update: Wed 20 May 2026 02:48:07 +0000
Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: G7XSX6CM6S2KU1299N8vC6+Y6vqaDZzuRQ8rmwRlMbc=)
2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: DSwrQXXqByoPFQJXpbDE85/HMdoqbU+SR14BjY//Wvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Validity
Not Before: May 13 02:48:07 2026 GMT
Not After : May 20 02:48:07 2026 GMT
Subject: CN=6a03e667-ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:5d:b2:b8:e4:44:91:0f:75:61:06:7e:66:
2f:70:bd:79:7e:12:c1:94:73:f2:d9:eb:59:46:ae:
0f:d6:b5:d1:0a:33:1c:78:78:5b:30:2a:b6:e6:1e:
f2:d2:b0:9b:3e:56:4b:23:b0:82:c2:a6:64:cf:d8:
5e:f8:2d:5a:c7:5f:ed:04:a6:60:d5:90:9c:dc:7e:
2c:37:da:31:5a:cb:f0:b0:24:55:ee:1e:e9:55:98:
4e:b3:fd:e5:dd:8a:f4:d7:ad:12:4f:18:ec:8f:8d:
c9:82:7c:58:f7:ad:69:34:18:16:cc:84:09:66:ea:
4f:0e:c0:d0:02:8e:9d:73:bc:b7:18:ec:99:77:00:
38:1f:4f:98:f3:97:53:51:1f:70:b1:bd:09:ad:25:
e6:ea:30:f6:d4:b1:f9:77:97:91:3a:ad:93:64:85:
a6:c0:bd:79:f2:df:3c:1b:45:22:52:86:3e:5b:b1:
56:d6:71:ce:c6:17:72:5b:a6:98:9f:e9:96:10:8f:
04:0a:6a:03:6d:04:bf:49:56:93:41:22:99:ca:c4:
ca:a7:c5:52:91:60:a1:ab:e2:66:32:19:96:ea:8d:
c4:69:17:f8:14:03:ad:d1:58:72:11:1d:f7:42:69:
76:83:9a:91:6f:3a:fd:81:ea:84:8e:80:21:52:0d:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:1D:A1:33:53:18:EF:CB:80:CD:9F:DE:E2:6A:F6:DF:38:56:BB
X509v3 Authority Key Identifier:
keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:62:ad:be:00:b8:ed:f9:f0:d4:bc:ba:eb:06:3d:85:eb:
97:68:be:34:85:a8:53:86:ec:b2:11:cd:77:8f:91:c4:0b:1c:
4b:c9:58:5d:bf:15:16:34:e9:55:bb:c2:39:4d:00:25:4e:90:
ad:59:ae:b0:1f:7a:e7:d1:0a:98:6e:84:81:6e:ae:cc:3b:77:
77:12:bc:68:48:05:6a:9e:21:0c:8b:e3:1f:2c:99:73:97:93:
05:6e:76:2d:28:95:23:6b:e2:06:62:69:fb:ba:de:bd:e4:fb:
2d:40:96:a3:bf:12:d9:d8:e0:29:0a:ca:ab:83:f5:84:0e:3c:
39:ea:20:9b:52:80:c2:bf:d3:bd:44:9f:4f:73:fa:d1:dd:06:
35:6d:8c:e5:65:7e:08:9c:c9:0f:24:3d:a9:e0:5d:e4:9f:54:
39:51:f4:3c:71:6c:f3:d2:db:f9:df:9e:16:b8:b4:d5:a5:7d:
b0:c3:b0:76:b7:74:d6:26:2d:f3:d1:7f:48:e3:99:7d:c1:4a:
42:db:f2:5f:ae:94:78:31:c8:08:de:64:95:12:61:78:02:d6:
e4:e1:ac:16:75:cb:7d:11:d8:bb:85:eb:8b:af:ac:45:ce:4f:
df:63:50:ed:07:6a:14:53:cc:57:71:a9:74:71:0f:24:3f:02:
28:dd:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:45 2026 by rpki-client