
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json)
Hash identifier: fa1083pnwrJi7lPQvAfqpMylyz6PDRK/m1RlJDzffas=
Subject key identifier: E4:96:0F:E6:14:CF:B0:85:B9:71:93:05:9D:6A:C9:CE:4F:26:39:AE
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial: 0136
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
Manifest number: 012D
Signing time: Sun 27 Sep 2026 06:12:38 +0000
Manifest this update: Sun 27 Sep 2026 06:12:37 +0000
Manifest next update: Sun 04 Oct 2026 06:12:37 +0000
Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: fvOP7InL7BaHNTrrW1v9ut8ZPsUgKi8K1yLzYQMP7FQ=)
2: AA456842107211F09A9E631FC4F9AE02.roa (hash: f6Cvx3N7h4aMk1PWUAl7FuI3n29BObBDdjQTOWyJ4SU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Validity
Not Before: Sep 27 06:12:37 2026 GMT
Not After : Oct 4 06:12:37 2026 GMT
Subject: CN=6ab8b3d5-6f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:3b:52:ad:e6:00:29:6f:b7:28:96:cf:99:
c1:ae:93:d9:fb:2d:f7:de:03:55:e8:88:b3:0e:e1:
9a:61:63:40:30:0b:6f:46:c9:03:36:d0:92:38:b6:
3a:26:99:54:df:f4:15:dc:eb:1f:f1:33:3b:8a:71:
25:02:13:28:c2:4d:8a:fd:c5:52:4a:1d:da:77:c9:
23:db:71:41:f5:80:d3:73:79:4b:31:49:ad:8d:18:
c1:5e:be:0b:de:7d:4f:aa:b5:97:04:85:21:a5:25:
b9:cb:87:eb:52:fa:f0:5a:5a:09:82:6f:81:13:f1:
3e:24:18:2f:3a:7d:c8:4b:b1:cf:70:f1:52:1d:72:
2f:48:33:c0:80:9d:eb:34:aa:79:88:de:46:a2:83:
47:ca:75:2b:f3:de:a9:74:7e:bf:a4:67:dd:dd:86:
0c:52:47:92:ef:51:5f:c3:63:d5:e5:40:ac:09:89:
86:4c:ec:52:56:98:c6:a7:7e:1a:2b:8a:27:ed:cc:
67:b8:80:8e:0c:f3:b6:23:93:a6:d9:d1:95:ac:1d:
f1:6d:c3:1b:eb:47:0f:f0:7e:12:76:64:bf:5e:27:
83:08:73:4e:3f:69:ce:d1:48:74:c3:5b:53:47:16:
8d:98:13:9a:1f:f3:d0:50:81:c6:a9:36:b9:2c:a7:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:96:0F:E6:14:CF:B0:85:B9:71:93:05:9D:6A:C9:CE:4F:26:39:AE
X509v3 Authority Key Identifier:
keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:80:ae:53:5d:c3:57:17:59:b2:54:a0:8c:48:12:ee:a8:da:
1e:5a:c6:d5:7e:fb:db:53:54:16:af:3c:9c:75:a8:07:c0:b6:
2c:76:a8:48:3e:71:27:81:d2:04:07:62:76:2a:b6:74:5d:9b:
14:cb:03:92:00:27:88:10:46:3b:3e:82:69:8b:c8:00:47:13:
18:12:ae:13:fc:89:94:c2:ce:5b:2f:fe:4f:9a:ae:bc:55:48:
7e:55:b3:2a:29:26:36:13:21:e6:e9:db:b8:d6:71:10:d9:f6:
48:67:41:48:72:b9:c8:31:60:f2:dd:23:fb:aa:8e:42:1b:d4:
cc:55:42:6d:a3:8c:3f:94:0c:ec:81:80:aa:9e:0e:06:3b:34:
2b:d5:34:a2:05:a6:e5:b2:15:9f:90:56:93:e6:46:64:24:23:
3d:85:c2:4f:6e:1d:a4:15:80:8e:08:8a:e9:5a:51:c4:d3:73:
21:36:07:40:3f:f6:6b:2e:6c:73:a3:7b:9f:82:3c:09:de:ee:
a7:ea:c3:c8:32:54:80:38:1c:de:cf:96:7b:2f:98:92:6a:ae:
34:57:82:52:3c:0e:71:4d:bf:e6:9e:1f:a5:b5:66:8c:d5:9a:
44:75:7a:a2:d9:81:82:7b:95:bc:91:7d:98:c0:fa:e1:f3:f6:
8a:6c:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:09:11 2026 by rpki-client