
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier: 746iHhvMYQ9ZaAogGyn2Vr2yDMVHe1VZBzpLF3nwGtQ=
Subject key identifier: 10:60:79:D7:54:E6:71:CA:6A:85:5A:12:2C:2B:88:39:6A:FC:EA:53
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number: DA
Signing time: Thu 23 Jul 2026 08:23:06 +0000
Manifest this update: Thu 23 Jul 2026 08:23:06 +0000
Manifest next update: Thu 30 Jul 2026 08:23:06 +0000
Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: x5sWNy2PjrbfIt1uumi9X/7GAwq3Jgu1Xm5lp+MI1qY=)
2: C053613E38B311F08DB63209C4F9AE02.roa (hash: wM0FrDPXj1BZ9PXK7GbiyUW0I1P+yBtcBZcBvUtgK+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: Jul 23 08:23:06 2026 GMT
Not After : Jul 30 08:23:06 2026 GMT
Subject: CN=6a61cf6a-cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:1a:46:a5:e0:6f:25:12:86:aa:93:2b:7c:
54:62:2e:bd:e2:81:60:eb:67:94:a8:57:3a:5b:75:
0d:cc:ab:3b:95:09:2e:7e:a7:14:bb:c5:42:46:38:
44:bf:f6:8b:eb:56:88:bf:b1:5d:b5:0f:7c:f8:6c:
8b:98:18:3f:42:63:f3:f6:9a:80:a0:eb:d3:6a:8a:
37:1e:e4:a0:14:fc:29:31:a3:27:75:84:51:ed:c8:
45:c1:85:90:8f:4e:8a:b5:6e:ab:1e:f7:2e:22:9a:
43:a8:b7:a5:45:4a:7e:47:41:fb:be:bc:dc:09:3c:
61:68:5f:41:46:a5:48:4c:cf:71:7a:5a:dd:54:ef:
1a:38:f9:db:ac:1a:82:44:3a:8e:4d:eb:4b:9b:e2:
8f:bc:a4:85:89:f3:53:81:e9:f6:d6:42:1d:c0:73:
e8:92:d8:13:3f:25:13:81:37:47:80:69:1e:7b:a3:
5f:81:1e:6a:ae:8a:d2:bf:4c:01:e1:1d:d5:25:97:
87:6f:bb:38:df:16:b1:5d:ec:51:4f:24:8b:50:b8:
53:e9:af:73:f3:0a:71:56:61:21:2b:5a:a2:16:28:
74:7d:3e:87:53:56:0f:51:3c:4f:f1:ed:c4:26:32:
ab:f0:6a:f0:86:1c:84:2c:2e:18:18:53:e0:06:59:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:79:D7:54:E6:71:CA:6A:85:5A:12:2C:2B:88:39:6A:FC:EA:53
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:48:7b:86:82:8d:8d:5f:7b:5d:3d:4c:cd:e3:c8:fe:a3:ac:
ea:d5:a7:ae:08:2f:07:ce:c6:1b:bb:e9:fd:4e:40:b3:77:08:
7b:04:c4:cc:82:80:3a:63:5b:cb:8c:87:44:6d:a6:e8:d8:26:
2d:ce:07:40:1f:d9:3a:9d:9c:af:13:ea:13:bd:d8:30:d9:aa:
f3:ee:51:50:98:80:43:fe:93:73:e9:68:89:23:45:ae:e6:9f:
43:05:a3:c1:92:27:3f:a9:bd:93:cf:39:3d:d4:01:e2:f0:f7:
ef:12:d8:e7:db:1b:cd:56:66:c3:7f:cf:f2:8d:b3:c4:b3:ba:
0c:16:44:d5:00:71:d9:80:24:2a:1d:45:d1:b8:26:af:74:16:
43:ad:cf:4f:d8:8f:08:e5:5e:4d:eb:a2:4f:07:94:4a:24:ba:
cc:b4:b1:16:df:66:08:05:4d:96:50:3b:02:e3:e4:dc:80:1c:
a1:97:ff:11:a2:0f:33:e8:57:cd:8c:c7:73:d1:3c:d7:a9:61:
e5:50:97:37:3b:3f:a7:3f:94:77:62:f6:9e:da:7f:c0:89:7f:
df:da:ff:25:93:a4:64:66:53:58:8a:48:0f:f6:fd:27:f9:0c:
85:70:97:09:59:cd:87:83:d3:ee:62:0b:2f:4c:ab:cd:d2:b3:
1e:8d:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:29 2026 by rpki-client