
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: uWRR/rFttm/SBHTtI9CA2Aqut8IYZ3r9unOiJmLvwW8=
Subject key identifier: 53:08:70:C4:79:E2:25:DF:73:EC:1F:F1:84:D2:F1:2F:96:44:30:31
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 19E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19DB
Signing time: Wed 22 Jul 2026 16:27:50 +0000
Manifest this update: Wed 22 Jul 2026 16:27:50 +0000
Manifest next update: Wed 29 Jul 2026 16:27:50 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: XxtASmTdeAc1u9BckWvxenL7KEjsAazba2sAgy21rn4=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: /wO07VK/99aXev5AumAxW3oQhnQNNhg5LiUR2P7i400=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6632 (0x19e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Jul 22 16:27:50 2026 GMT
Not After : Jul 29 16:27:50 2026 GMT
Subject: CN=6a60ef86-123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:7e:aa:48:7f:40:2d:2d:6f:e2:b6:c1:c7:
6a:81:cf:d3:99:53:ef:26:be:d8:12:90:3a:e9:0e:
38:37:5a:a9:64:66:ea:c9:70:90:a0:b4:ae:62:45:
f8:0e:30:c8:13:79:8b:62:0d:0c:e5:e5:f1:c1:ed:
29:96:3d:01:77:76:fe:09:9e:30:f1:c6:ce:4c:e6:
f5:25:58:76:19:b3:88:cf:d7:a9:7d:43:d8:77:f8:
5d:de:52:ca:21:e7:e3:71:4b:d5:1a:3b:04:71:38:
aa:3e:b5:38:58:2c:44:3a:87:67:88:eb:05:dc:81:
49:fb:e6:5f:84:aa:b7:69:00:f8:46:31:ef:13:af:
27:9f:b5:c2:93:6d:26:79:47:2c:a0:68:f7:be:7b:
f9:64:51:8d:21:4e:89:ed:0c:4f:91:da:a7:0c:94:
78:3c:b1:28:67:7b:7b:82:62:54:53:2d:44:ec:4a:
aa:cb:bd:fe:6f:0e:d9:b8:c6:9e:35:4e:28:38:cd:
8f:b8:48:51:35:66:b3:8d:65:bc:4c:79:61:f9:37:
60:dc:4d:24:f5:b2:bb:17:e6:8f:a6:ec:0f:1b:2a:
64:27:6c:00:92:79:c0:f5:3e:22:44:a9:89:e1:93:
c7:65:a5:5f:a1:0d:5a:d2:16:76:c6:ac:a9:1d:c4:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:70:C4:79:E2:25:DF:73:EC:1F:F1:84:D2:F1:2F:96:44:30:31
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:33:c0:07:47:e8:a0:5f:62:5e:fb:2d:03:7c:e5:d3:13:25:
d9:7e:06:57:b8:a3:fc:16:e4:53:fe:7b:72:96:da:88:df:ff:
f3:9c:c9:fc:5f:43:f1:e3:ca:7d:98:8f:b3:9e:de:2d:3a:3e:
50:63:6b:11:1a:c9:ac:47:45:69:eb:d3:29:bc:30:8c:3b:a9:
a9:9c:d2:53:66:68:92:37:93:57:18:c1:29:e9:91:62:af:b5:
18:7c:fe:29:98:85:d5:c7:26:0e:e9:a4:3e:91:cd:31:62:1c:
fa:a9:19:28:87:16:c6:57:68:b7:47:bf:f3:d6:c9:8a:ec:ca:
8c:83:9f:25:05:c9:da:32:69:8e:84:e2:80:b3:91:3e:ca:01:
97:a8:36:99:2f:b6:74:2d:fd:ed:62:12:60:0e:63:89:bd:37:
b2:3c:26:07:3e:ea:83:a2:72:ba:d7:26:c6:e4:92:67:f1:56:
a9:8b:9a:12:6f:7f:80:74:59:fb:42:16:43:41:dd:2c:58:39:
3c:6e:7e:f9:7b:24:52:39:48:04:d9:37:7e:9e:c6:c5:8b:8e:
a2:ae:e2:85:62:b2:51:ef:93:6c:70:16:8b:cb:35:91:bd:c9:
dd:72:dc:ab:1a:4f:99:ff:84:6e:32:9a:cf:cf:e9:f0:ee:3b:
be:45:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:14 2026 by rpki-client