
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: Mr/GC5UhljvKKPho3TqqZwRcSZtzU7fAj1JLHb5PX+s=
Subject key identifier: AC:51:C4:B9:06:A2:35:70:2F:BE:7B:1B:3F:DF:96:66:AB:4C:F8:47
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0C01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0BEE
Signing time: Tue 12 May 2026 18:55:37 +0000
Manifest this update: Tue 12 May 2026 18:55:36 +0000
Manifest next update: Tue 19 May 2026 18:55:36 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: p5+gQBepQlaZkeQRu3EgMbPD9b5Mbltg0v6/BTRHdpA=)
2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3073 (0xc01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: May 12 18:55:36 2026 GMT
Not After : May 19 18:55:36 2026 GMT
Subject: CN=6a0377a9-550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:21:25:7d:3f:30:26:3a:c5:2a:a2:48:f3:
d8:51:f6:93:05:6a:d6:7a:43:7a:4b:ed:15:ec:e0:
0b:7d:b1:e9:fa:e5:a8:71:19:94:76:29:6d:bd:3c:
63:43:13:7f:7f:6c:72:77:08:9c:04:96:2c:6c:bb:
be:ad:3e:d4:d2:b2:ff:2b:51:f7:63:ad:8d:7e:32:
81:b7:7b:0f:e2:13:0a:ba:8a:e1:c2:03:de:75:d1:
29:1f:48:0e:bb:37:5e:37:ea:16:65:d0:9d:f5:0a:
8f:99:65:59:7b:c2:31:34:2a:df:ea:76:fc:48:db:
1d:e3:72:b7:f4:b2:7c:af:7d:b9:f0:75:f7:5c:29:
d7:86:71:d1:cb:c1:7e:87:0c:2f:65:9b:90:17:0b:
23:2c:a7:53:7d:88:cc:7d:14:0f:de:38:bd:44:8d:
d4:79:54:83:5a:6f:4e:95:c9:32:a6:d4:0d:29:f2:
cd:11:f3:de:a8:88:f0:78:82:5b:7c:e8:95:63:b6:
37:f6:1d:19:c5:34:ae:5c:ef:22:31:49:ce:c7:65:
68:58:e6:d6:21:40:61:b5:c2:a9:4a:38:c0:0d:9f:
bb:11:96:54:ad:f6:a6:bf:da:02:50:5b:ae:df:66:
f6:4d:9d:d8:55:e6:5f:44:1d:41:9f:02:34:23:4b:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:C4:B9:06:A2:35:70:2F:BE:7B:1B:3F:DF:96:66:AB:4C:F8:47
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f0:f0:a3:d6:ea:5b:b7:17:f1:29:74:db:d3:0a:df:25:0b:
c7:14:69:55:5f:ca:36:0e:1f:df:50:53:33:76:87:22:cc:f9:
9b:f4:eb:8d:41:7e:28:83:27:fd:5a:72:30:37:cc:3d:d9:ee:
48:fa:b1:d8:ee:6f:5b:28:60:0b:40:77:67:f2:68:2b:de:fd:
7c:c3:45:49:09:cc:0a:52:55:8c:4e:68:dc:5d:f0:26:50:10:
a5:7b:79:b6:f0:ce:28:b0:00:06:61:fe:2d:68:13:8f:1b:9c:
61:d3:86:b5:08:b2:6f:22:3f:01:04:1a:7a:0c:8c:9d:30:e0:
4a:e1:f3:21:0a:57:b2:83:d0:f4:bd:34:10:cb:c0:1a:ca:cb:
89:42:e7:3f:b2:bb:24:c6:f1:41:95:25:79:77:ba:42:88:0a:
83:7d:d9:75:02:23:3f:41:ef:fd:d5:16:a4:2f:64:5a:1e:c7:
bb:d1:e9:3e:d3:4a:b5:c6:0f:af:1c:c6:68:4e:b4:40:20:59:
75:4c:a2:b7:34:4e:9f:65:0d:20:7d:89:93:cb:94:cb:1d:99:
c9:12:42:fe:2c:43:a1:7d:f2:86:4e:c2:2d:5c:23:94:a8:5c:
eb:72:ca:30:48:ef:ca:26:43:e3:02:34:cf:ab:04:d2:4a:97:
2e:60:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:15 2026 by rpki-client