
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier: 3x/BDwT5cW969107uFuUGnVLkXgTijGE6d1APVfje74=
Subject key identifier: 18:F2:AF:4F:32:59:48:84:44:6A:34:0A:53:2F:B2:A1:97:6A:BF:74
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number: 0190
Signing time: Wed 13 May 2026 04:27:04 +0000
Manifest this update: Wed 13 May 2026 04:27:04 +0000
Manifest next update: Wed 20 May 2026 04:27:04 +0000
Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: FnLMaIlErf1zQftxX3Wk6cdWPI658LQJpqvbT8CKO9Y=)
2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: ZkQJ0ZuYKcRET0apcH/AjMsvVdSbLMwDbkQI4ojVUT8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Validity
Not Before: May 13 04:27:04 2026 GMT
Not After : May 20 04:27:04 2026 GMT
Subject: CN=6a03fd98-5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:e4:d6:eb:36:4a:c1:76:ab:d7:e3:2e:df:
86:3d:42:ef:a7:a3:92:3c:54:58:47:84:f4:3c:c3:
a5:97:6b:75:33:f1:94:4d:c4:e7:a4:59:16:cd:2a:
08:1f:b3:4d:c1:09:97:b1:3b:90:5f:4c:48:93:a2:
7d:7d:19:21:90:1b:99:a9:9d:75:96:0d:65:ad:eb:
92:fc:5d:4b:50:a4:5c:73:bc:6f:53:f9:67:c2:05:
9c:f9:49:a7:68:bd:cf:7a:f8:43:f9:74:e3:5d:08:
4b:37:3d:4f:4b:e4:da:3b:2c:cd:35:95:eb:73:89:
f9:55:e6:62:20:fe:85:2f:43:8f:c2:65:4d:df:c6:
27:82:8c:de:09:74:89:c7:95:5b:14:62:09:b8:0c:
e0:3f:99:99:d9:a8:f8:82:48:88:58:a5:26:61:5e:
ca:b8:91:7c:61:76:6d:e0:84:c4:7d:67:ba:be:57:
12:be:f3:92:a6:c2:c1:c0:7c:24:f9:47:8f:c8:63:
f6:71:39:e3:b4:7b:74:38:01:4a:39:06:74:63:69:
ac:59:a2:d6:56:88:25:9c:39:f6:17:f5:fb:38:a8:
bf:c4:7e:29:a9:82:63:5d:54:09:18:e2:a9:af:f6:
64:81:46:6c:19:fa:4f:c0:d0:d5:6a:e9:62:64:ed:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:AF:4F:32:59:48:84:44:6A:34:0A:53:2F:B2:A1:97:6A:BF:74
X509v3 Authority Key Identifier:
keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:85:9b:d7:a4:d3:15:bf:a6:dc:55:0e:8a:77:64:22:a8:
9b:25:ae:1d:c7:24:8c:95:a5:14:fc:52:f0:22:fe:71:5a:00:
c8:fc:59:a9:6b:a1:77:2a:06:75:b2:c3:28:a0:c8:1b:96:9b:
63:e1:89:e0:f6:ea:72:86:0a:13:62:1f:16:bd:fd:23:0b:2f:
d1:d4:56:69:32:c7:e9:39:bc:35:1b:af:7f:f4:63:8e:08:52:
8e:23:73:13:52:af:b2:d8:14:89:8b:5d:c4:39:7c:1f:c3:47:
53:14:97:f3:38:b5:6e:9d:86:36:7e:42:c8:69:5d:33:e3:df:
d1:3a:6e:16:22:c4:35:f6:19:65:8f:63:c4:95:cf:ef:5e:3e:
bd:de:2c:1c:70:6a:8d:68:68:39:35:d9:ee:69:73:0e:10:9c:
49:1a:21:72:97:55:5d:f9:df:96:a7:5b:65:6b:1c:9a:35:e6:
52:66:7d:07:3a:28:bf:7c:1e:73:3e:63:50:31:55:ab:a9:76:
4b:3e:46:91:89:7f:f6:a6:c0:2b:5a:f2:3a:0e:a9:18:99:01:
ac:f5:e1:7f:57:71:45:4d:25:60:95:4e:a5:0c:23:e4:a9:4d:
41:3c:97:21:b1:dd:c3:52:c8:f6:f6:82:35:19:a8:7c:c7:3b:
0f:2a:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:36 2026 by rpki-client