
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json)
Hash identifier: rh55o6v4XUQKSM2RHQ3i8G3J7AuL3U79bh2JSlFRwKg=
Subject key identifier: 58:7C:94:B1:D0:17:C0:6D:90:2B:D0:1B:4B:A5:A1:92:97:C7:33:6D
Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
Manifest number: 025D
Signing time: Fri 27 Mar 2026 01:44:43 +0000
Manifest this update: Fri 27 Mar 2026 01:44:42 +0000
Manifest next update: Fri 03 Apr 2026 01:44:42 +0000
Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: /tPMa8uUDuuT3nvpVoJM/rW2aCY3IJBWaSu40ygCpGU=)
2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: upbH9l4nlvROIzKcuBlWv04CWH78FYVY5Ubcgq09mgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Validity
Not Before: Mar 27 01:44:42 2026 GMT
Not After : Apr 3 01:44:42 2026 GMT
Subject: CN=69c5e10b-44ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:c6:da:86:18:01:94:31:c8:e4:b0:1c:ab:
f1:89:57:40:f9:66:bb:f5:1b:1f:17:30:99:9a:06:
af:42:a1:10:e9:fb:61:23:b4:07:2a:3e:dc:4a:23:
c7:04:68:b3:5f:a3:a1:11:cd:98:78:5b:6a:98:ff:
28:2d:85:30:cf:48:e2:3f:50:c0:71:a0:09:8e:de:
3c:14:5e:10:44:08:ca:b6:65:c6:3e:ac:6e:57:06:
db:9a:2f:c1:41:b8:c9:92:f3:ad:0a:06:c6:d2:07:
ac:0e:b7:82:db:08:c4:ab:79:7a:dd:84:29:12:05:
28:c0:6b:ea:78:05:fe:8d:50:32:d9:10:5a:66:48:
5d:46:64:48:2c:7d:61:b3:73:b2:94:89:9d:cb:96:
a6:93:c7:ae:92:61:f4:c5:9c:f4:b7:ea:7f:2e:86:
24:bc:f1:71:fe:82:33:44:1d:70:e4:e0:de:58:7d:
b2:85:da:17:31:24:66:13:0e:2e:27:b7:5a:b9:83:
9c:13:38:92:bd:84:d3:9f:f7:52:bf:7a:f7:93:a7:
01:6a:4c:28:c5:0f:07:50:d4:67:36:7e:c1:3c:29:
41:e1:74:32:20:b1:c1:95:29:b7:75:7b:73:6e:1c:
d3:a6:d5:5e:ce:1b:99:0d:4e:67:13:a3:1c:32:bd:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:94:B1:D0:17:C0:6D:90:2B:D0:1B:4B:A5:A1:92:97:C7:33:6D
X509v3 Authority Key Identifier:
keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:54:a7:3c:68:c5:c8:16:c7:64:28:3f:91:18:2f:28:d5:
be:79:97:f4:f5:a8:52:84:d2:80:7a:91:e8:80:83:83:28:1a:
ea:06:dd:4a:8f:43:bc:0d:2b:9e:ad:d8:25:6f:70:49:fe:31:
54:a1:fc:35:2b:44:44:83:b9:ec:40:c6:57:c6:88:ae:9e:6e:
42:08:2b:8e:fd:ea:cf:94:06:f0:4c:1d:5c:55:0e:e3:57:db:
3a:b6:38:43:61:17:e3:20:9a:40:03:cc:27:0e:f9:84:c7:1b:
de:d9:5c:c6:21:6a:dc:13:cb:65:65:c7:fc:87:d4:71:47:37:
e8:94:f1:14:c2:6d:90:d8:c6:e7:c9:02:30:a1:b2:b9:2a:73:
60:65:e6:4a:10:40:13:27:67:d3:33:e9:1d:99:2c:f7:ff:a0:
be:4b:cf:61:04:c4:62:3a:78:69:27:b7:71:a2:c7:55:a9:9f:
3b:39:33:f8:3e:97:aa:e3:d8:85:21:79:a9:10:d5:fa:fe:63:
c7:df:17:bf:9b:5b:5c:ad:8c:22:03:38:ea:17:9d:a5:72:e5:
6a:e0:02:63:05:c4:b0:fb:6b:c5:86:8b:0f:d9:77:d1:68:12:
5d:79:6b:37:37:2a:11:be:07:a3:2d:25:07:85:db:f9:cc:99:
1a:a8:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:19 2026 by rpki-client