
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier: icRnG98gruaR3D5DhtbJkgNaAArxont9nqCEmrRlBVQ=
Subject key identifier: E3:46:0E:34:F2:DD:59:6D:6E:DE:E8:D1:F8:B5:64:CA:09:3E:82:E4
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number: 01B5
Signing time: Thu 23 Jul 2026 05:23:04 +0000
Manifest this update: Thu 23 Jul 2026 05:23:03 +0000
Manifest next update: Thu 30 Jul 2026 05:23:03 +0000
Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: FeyTHZF78fxYL8iay4grMNSLLtU65r/GZ+0bSTQyzOo=)
2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: BV9XfPuDyzg+pUATxcOqBJ05a9l83d0h3SXHTFR+g1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Validity
Not Before: Jul 23 05:23:03 2026 GMT
Not After : Jul 30 05:23:03 2026 GMT
Subject: CN=6a61a538-918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:6d:38:92:0d:ff:d5:d7:33:0d:6a:27:01:
16:b3:1a:ec:ad:7a:d8:3d:4b:88:d5:81:54:76:9e:
24:ca:c1:23:0e:1c:1d:5b:ec:fd:11:00:30:cd:35:
8d:17:ec:c3:8d:27:b9:ee:04:a5:ed:ab:8b:ad:72:
1e:d2:05:42:d3:c7:0a:99:c2:69:0d:d2:55:17:df:
a8:31:7a:c1:c7:95:74:2a:65:89:be:53:dd:2b:a2:
41:2e:06:5b:c6:d5:50:d5:c5:9a:96:8f:9f:e5:ad:
fc:b8:fe:f1:52:02:17:6d:3b:d4:f0:7d:0d:89:ae:
e3:67:a6:f8:3f:08:31:aa:f6:f5:9c:b2:d3:fc:70:
c8:cd:ec:14:cb:5b:dc:12:8e:6e:a8:81:73:e1:7a:
12:d6:80:f4:76:7c:45:28:40:a0:38:39:88:0d:ae:
73:35:35:90:94:d0:ef:62:1a:76:b9:0c:6c:d2:df:
d3:dc:bf:ac:ab:c7:90:f8:70:63:c9:7d:74:c2:91:
d2:69:3f:8b:bb:c2:c5:31:ff:c5:b7:60:e5:7e:b2:
20:78:86:d9:e0:99:da:2c:a5:21:7e:2b:59:5c:19:
b4:da:f6:1f:bd:59:c7:fb:ad:95:f3:a7:50:62:1f:
13:9a:ac:0b:97:47:04:ea:95:fd:bb:3c:d6:95:22:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:0E:34:F2:DD:59:6D:6E:DE:E8:D1:F8:B5:64:CA:09:3E:82:E4
X509v3 Authority Key Identifier:
keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:ae:fa:11:e7:bb:68:dd:7f:67:e0:3e:99:d0:7c:83:c6:
9d:0a:92:24:8b:94:fd:0f:30:66:35:09:31:b4:0f:29:b6:d1:
b6:c0:78:9f:11:65:0a:9f:04:28:ff:d2:e3:93:50:43:57:85:
90:b0:98:09:b7:32:ee:90:0b:1b:a2:6b:60:be:aa:1a:db:be:
cf:92:ad:32:dd:fe:08:c5:60:3a:d2:cc:6c:8c:8b:50:53:56:
6f:c6:30:25:36:31:b3:91:71:c2:8e:11:83:83:37:e5:40:0b:
0a:62:b6:ae:52:62:7b:16:47:e7:fe:b7:e2:1e:c5:86:d5:89:
a8:e4:39:f4:81:49:3c:26:5f:0c:24:56:e8:50:9d:df:dd:f1:
65:d9:d7:94:8b:20:12:8a:b1:fd:32:a4:ac:62:6d:80:91:2f:
ae:5d:a7:dc:e3:6c:06:05:61:f8:8a:75:4c:d4:a4:d7:95:7f:
82:fb:dc:15:13:c1:c6:59:62:91:5c:32:9e:0d:b0:d2:37:cd:
fe:2e:ea:db:47:11:37:9c:95:5d:0c:af:42:cd:ac:8f:04:9f:
d8:76:4b:e4:6c:34:bd:38:e8:c6:35:d0:8b:33:11:c1:67:78:
8e:d0:1a:c6:fe:e5:81:4d:e5:c2:50:52:97:a6:a8:0a:a3:4f:
51:e8:c5:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF
QjRERkE5RUMwHhcNMjYwNzIzMDUyMzAzWhcNMjYwNzMwMDUyMzAzWjAYMRYwFAYD
VQQDEw02YTYxYTUzOC05MThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4WhtOJIN/9XXMw1qJwEWsxrsrXrYPUuI1YFUdp4kysEjDhwdW+z9EQAwzTWN
F+zDjSe57gSl7auLrXIe0gVC08cKmcJpDdJVF9+oMXrBx5V0KmWJvlPdK6JBLgZb
xtVQ1cWalo+f5a38uP7xUgIXbTvU8H0Nia7jZ6b4Pwgxqvb1nLLT/HDIzewUy1vc
Eo5uqIFz4XoS1oD0dnxFKECgODmIDa5zNTWQlNDvYhp2uQxs0t/T3L+sq8eQ+HBj
yX10wpHSaT+Lu8LFMf/Ft2DlfrIgeIbZ4JnaLKUhfitZXBm02vYfvVnH+62V86dQ
Yh8TmqwLl0cE6pX9uzzWlSJQhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONGDjTy
3Vltbt7o0fi1ZMoJPoLkMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB
MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw
bWhPS1I1ZmFndERyVGZxZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACdiu+hHnu2jdf2fgPpnQfIPGnQqSJIuU/Q8wZjUJMbQPKbbRtsB4nxFlCp8E
KP/S45NQQ1eFkLCYCbcy7pALG6JrYL6qGtu+z5KtMt3+CMVgOtLMbIyLUFNWb8Yw
JTYxs5Fxwo4Rg4M35UALCmK2rlJiexZH5/634h7FhtWJqOQ59IFJPCZfDCRW6FCd
393xZdnXlIsgEoqx/TKkrGJtgJEvrl2n3ONsBgVh+Ip1TNSk15V/gvvcFRPBxlli
kVwyng2w0jfN/i7q20cRN5yVXQyvQs2sjwSf2HZL5Gw0vTjoxjXQizMRwWd4jtAa
xv7lgU3lwlBSl6aoCqNPUejFHA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:53 2026 by rpki-client