
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json)
Hash identifier: QdN44KLLu8vDqG+T4CyT/klpRRxxjEh0/GOhL65RhE4=
Subject key identifier: 16:08:CA:86:71:38:5E:67:7D:E5:4A:AD:2F:32:83:BE:46:85:81:A2
Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B
Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
Manifest number: 07C7
Signing time: Thu 26 Mar 2026 21:14:25 +0000
Manifest this update: Thu 26 Mar 2026 21:14:25 +0000
Manifest next update: Thu 02 Apr 2026 21:14:25 +0000
Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: v29AsmY5UGX1eLvCIDzgoPxfl7gYr9QNPh74T5waZNE=)
2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: mKwK5iOPGex40HNrt/NQkPkIKFqlB9W9tlJIyUVibC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl
rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
Validity
Not Before: Mar 26 21:14:25 2026 GMT
Not After : Apr 2 21:14:25 2026 GMT
Subject: CN=69c5a1b1-f907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:f8:62:e7:83:f0:76:d0:f3:ae:19:89:c0:
2c:59:7c:82:91:d3:fe:14:bf:cf:5b:55:ba:b3:3f:
71:54:7c:bd:62:d9:01:6a:07:0e:f6:15:ef:2d:6c:
72:ed:66:1e:3e:31:7c:39:8f:07:5b:6e:fb:be:4e:
7c:b5:3c:82:15:ca:c4:77:f8:9d:c2:89:2f:f7:8a:
20:56:05:6f:bd:10:a1:39:69:b8:b5:7b:b5:79:40:
c7:e9:d9:89:1b:20:d6:90:8c:7f:93:6a:25:a2:17:
b5:8e:25:e6:18:d0:59:17:11:ce:90:39:2e:d4:00:
83:9d:af:5c:28:79:ed:ab:b3:d5:02:c9:9c:b4:6c:
29:8a:6f:21:95:33:f6:8d:a7:9a:d9:89:6a:b2:c5:
d0:07:e3:86:e2:2b:c4:b5:b4:4a:a3:95:dd:dd:a5:
68:ee:f3:e3:6d:05:80:7a:25:02:13:85:db:a3:0c:
09:55:da:02:95:ba:50:45:5f:10:a6:c7:33:f8:53:
17:39:42:36:d4:c7:92:8a:c9:04:60:d4:2c:29:5e:
78:fb:3a:ec:62:de:d9:9d:83:5d:f7:9e:28:8d:c8:
43:ef:2e:4a:11:a4:fb:c0:ac:15:73:15:67:6c:20:
96:76:71:33:2e:a2:7d:95:30:55:72:b4:5c:8e:df:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:CA:86:71:38:5E:67:7D:E5:4A:AD:2F:32:83:BE:46:85:81:A2
X509v3 Authority Key Identifier:
keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:6d:7f:ea:65:f9:3c:53:5a:d1:ee:2d:19:6c:a7:73:41:
53:36:91:cd:22:7d:b7:75:b4:c7:28:46:08:47:9d:78:44:97:
4b:59:e5:9c:21:4d:3f:73:65:95:16:7c:b4:b5:0a:ad:bc:71:
ac:50:55:eb:93:6c:b4:11:58:4f:42:23:a1:c6:87:f9:75:5a:
b8:a2:73:5a:a7:91:65:0e:08:09:b2:9d:fa:e8:48:50:26:c9:
9c:b6:e6:fc:6e:37:f8:26:1d:1b:24:6e:c7:2d:65:ce:e4:0a:
64:88:52:a9:cc:9c:0d:40:2e:8b:a8:fb:a2:06:25:cd:a9:c8:
75:f3:eb:dd:89:38:8b:44:75:ef:b4:e7:32:80:22:f1:f7:98:
0c:29:e1:60:c9:ce:6c:32:a8:a7:fb:f6:c7:0f:39:1a:c2:06:
fb:ce:1b:6f:d0:a2:1a:3a:a1:0c:87:42:6a:ef:11:ae:74:b9:
50:5d:5c:d7:8b:2c:6b:b4:22:00:b3:e5:8b:a3:39:f9:ff:75:
5b:d9:4f:e1:60:08:af:a0:91:d8:33:8c:81:7a:89:9b:c5:7d:
1a:97:a7:b6:df:f1:16:2a:65:27:55:ad:0c:34:fb:51:9c:38:
04:78:ef:3c:d8:8f:33:17:47:e3:9c:dd:24:34:e3:d1:42:25:
f5:e9:0a:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB
NTIyMzg3MUIwHhcNMjYwMzI2MjExNDI1WhcNMjYwNDAyMjExNDI1WjAYMRYwFAYD
VQQDEw02OWM1YTFiMS1mOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAknX4YueD8HbQ864ZicAsWXyCkdP+FL/PW1W6sz9xVHy9YtkBagcO9hXvLWxy
7WYePjF8OY8HW277vk58tTyCFcrEd/idwokv94ogVgVvvRChOWm4tXu1eUDH6dmJ
GyDWkIx/k2olohe1jiXmGNBZFxHOkDku1ACDna9cKHntq7PVAsmctGwpim8hlTP2
jaea2YlqssXQB+OG4ivEtbRKo5Xd3aVo7vPjbQWAeiUCE4XbowwJVdoClbpQRV8Q
pscz+FMXOUI21MeSiskEYNQsKV54+zrsYt7ZnYNd954ojchD7y5KEaT7wKwVcxVn
bCCWdnEzLqJ9lTBVcrRcjt9bdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYIyoZx
OF5nfeVKrS8yg75GhYGiMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy
RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB
OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARJRtf+pl+TxTWtHuLRlsp3NBUzaRzSJ9t3W0xyhGCEedeESXS1nlnCFNP3Nl
lRZ8tLUKrbxxrFBV65NstBFYT0IjocaH+XVauKJzWqeRZQ4ICbKd+uhIUCbJnLbm
/G43+CYdGyRuxy1lzuQKZIhSqcycDUAui6j7ogYlzanIdfPr3Yk4i0R177TnMoAi
8feYDCnhYMnObDKop/v2xw85GsIG+84bb9CiGjqhDIdCau8RrnS5UF1c14ssa7Qi
ALPli6M5+f91W9lP4WAIr6CR2DOMgXqJm8V9Gpentt/xFiplJ1WtDDT7UZw4BHjv
PNiPMxdH45zdJDTj0UIl9ekKcw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:06 2026 by rpki-client