
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: TyU/jqPP6Ztml+BJFC14FNs7WgcmcyJZVXtegA6eCoE=
Subject key identifier: 1B:2A:37:46:F1:14:82:48:2B:AC:F9:DB:14:C7:79:D3:F3:E1:1F:62
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0C25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0C12
Signing time: Wed 22 Jul 2026 19:08:14 +0000
Manifest this update: Wed 22 Jul 2026 19:08:14 +0000
Manifest next update: Wed 29 Jul 2026 19:08:14 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: 1PKwUo/cdbzGlKhHW9Oc7lfSEB08dsHMQknKKVi8CWk=)
2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3109 (0xc25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Jul 22 19:08:14 2026 GMT
Not After : Jul 29 19:08:14 2026 GMT
Subject: CN=6a61151e-c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:3d:8d:c0:ab:20:52:ff:9c:5b:a0:ac:a9:
2f:10:49:d0:fb:ad:20:d4:b9:5f:ae:76:f4:b3:8f:
4a:29:06:33:0d:9c:36:e1:f3:77:64:fa:78:b9:02:
42:96:18:73:b0:d9:02:89:31:7a:a0:dc:60:58:da:
98:af:83:c7:4b:a4:90:9a:ba:c7:01:c3:d5:12:b1:
61:9b:3b:37:fa:a7:e9:31:07:ae:4f:29:ec:ea:ef:
56:81:b1:f3:25:bb:2f:0c:ff:d7:db:57:03:b3:9c:
d9:f1:bd:21:c8:b9:80:ea:6b:6c:e5:d6:b2:36:59:
d6:f5:14:0b:41:bf:f2:e5:70:6f:99:16:9a:80:45:
8f:91:8a:b7:67:e3:b4:97:4c:5c:86:1c:23:54:b7:
d1:a3:e8:35:b5:9e:d8:af:d6:18:f3:df:62:5b:ea:
84:69:f2:de:a4:12:46:b6:a3:23:a5:38:62:33:30:
db:ef:95:45:48:dd:19:c0:80:1d:87:fe:bf:d5:9b:
f2:aa:1d:f4:78:7e:70:2a:a4:d5:eb:42:e7:4a:d2:
20:5e:fe:d6:41:e8:c8:e7:1e:d7:9d:24:af:04:2c:
4c:ed:d9:eb:83:bc:e7:10:44:99:58:87:e6:a3:bb:
64:28:5a:f4:96:46:91:de:9b:bb:c5:f8:0c:25:3e:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:37:46:F1:14:82:48:2B:AC:F9:DB:14:C7:79:D3:F3:E1:1F:62
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:00:ae:da:b1:b8:8d:af:b7:f2:57:10:95:92:8b:46:4b:
93:44:bf:5b:db:76:32:8a:07:49:be:c8:ea:07:97:87:9f:ac:
4f:42:14:e6:e3:90:25:df:41:99:a1:49:0e:2c:69:9a:45:08:
74:a1:5d:4f:32:1b:ee:6b:39:3c:22:18:6b:7e:32:64:46:ef:
26:e3:b4:ba:ab:0a:db:46:3b:d3:e1:f3:17:f3:92:af:88:8b:
26:7b:05:c1:b3:60:5b:9c:4c:8b:8a:9f:02:c5:2d:ed:59:f0:
3a:85:70:e0:08:60:53:9e:4b:21:37:29:3f:e9:c6:da:51:97:
4e:5b:ba:9b:37:7a:0d:a7:48:94:24:b7:43:ae:44:ec:80:ca:
1c:0f:48:6a:9f:6f:bb:49:ac:97:94:b9:98:82:26:57:e1:62:
d6:56:27:46:86:f2:77:14:14:81:a5:52:c4:25:97:47:f4:90:
39:72:63:4e:19:de:77:df:bf:c7:fe:22:7d:a7:2c:7b:57:89:
36:3b:68:b3:90:07:39:16:58:d8:00:24:f5:00:67:4d:44:86:
df:36:63:06:fe:3f:5b:20:87:48:95:25:37:b7:e6:b0:3a:ea:
ef:e4:d4:ef:9c:49:d6:11:9d:ad:1e:36:b1:4b:5c:db:90:44:
96:42:23:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2
QTA4MTRCQUMwHhcNMjYwNzIyMTkwODE0WhcNMjYwNzI5MTkwODE0WjAYMRYwFAYD
VQQDEw02YTYxMTUxZS1jNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1o9jcCrIFL/nFugrKkvEEnQ+60g1Llfrnb0s49KKQYzDZw24fN3ZPp4uQJC
lhhzsNkCiTF6oNxgWNqYr4PHS6SQmrrHAcPVErFhmzs3+qfpMQeuTyns6u9WgbHz
JbsvDP/X21cDs5zZ8b0hyLmA6mts5dayNlnW9RQLQb/y5XBvmRaagEWPkYq3Z+O0
l0xchhwjVLfRo+g1tZ7Yr9YY899iW+qEafLepBJGtqMjpThiMzDb75VFSN0ZwIAd
h/6/1Zvyqh30eH5wKqTV60LnStIgXv7WQejI5x7XnSSvBCxM7dnrg7znEESZWIfm
o7tkKFr0lkaR3pu7xfgMJT61swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsqN0bx
FIJIK6z52xTHedPz4R9iMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5
NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI
c2pXUWxJVmRpZUZxQ0JTNncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAacMArtqxuI2vt/JXEJWSi0ZLk0S/W9t2MooHSb7I6geXh5+sT0IU5uOQJd9B
maFJDixpmkUIdKFdTzIb7ms5PCIYa34yZEbvJuO0uqsK20Y70+HzF/OSr4iLJnsF
wbNgW5xMi4qfAsUt7VnwOoVw4AhgU55LITcpP+nG2lGXTlu6mzd6DadIlCS3Q65E
7IDKHA9Iap9vu0msl5S5mIImV+Fi1lYnRobydxQUgaVSxCWXR/SQOXJjThned9+/
x/4ifacse1eJNjtos5AHORZY2AAk9QBnTUSG3zZjBv4/WyCHSJUlN7fmsDrq7+TU
75xJ1hGdrR42sUtc25BElkIjzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:51:50 2026 by rpki-client