
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: Az0e5xcfORa04ryGfEIMYin1sW4AfbO3eXsWOjXjf6s=
Subject key identifier: D8:DB:23:22:5B:B9:D0:8E:FB:0C:59:37:5C:06:70:14:36:48:B4:95
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 0259
Signing time: Sun 05 Apr 2026 01:50:58 +0000
Manifest this update: Sun 05 Apr 2026 01:50:58 +0000
Manifest next update: Sun 12 Apr 2026 01:50:58 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: N59BZrTzhNCtEZwRtm/9ykSW1SMNX02lst+9st7MvJY=)
2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Apr 5 01:50:58 2026 GMT
Not After : Apr 12 01:50:58 2026 GMT
Subject: CN=69d1c002-6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:47:66:42:6c:fb:ad:2e:d7:06:61:c5:2c:
e8:ae:bd:5c:4c:76:35:ea:0c:2a:8a:8a:8c:5a:17:
09:ec:b0:ff:14:2a:10:eb:8d:a4:07:fc:96:25:92:
04:7a:f2:d6:98:18:49:4a:b1:87:ed:ab:d0:7b:f1:
89:c4:38:d9:62:95:ed:f4:08:48:45:4b:a7:64:be:
c9:a5:f0:53:e3:d9:6b:23:6b:db:f5:05:f8:45:2e:
8a:8c:dd:91:12:85:c5:91:d1:03:57:d3:7b:d4:10:
bd:29:49:96:8d:76:7a:f1:46:44:78:2a:17:26:ff:
51:45:ba:d7:d9:5d:c4:95:01:d3:76:5f:6c:3d:04:
20:6a:8d:ac:4f:89:35:49:98:45:3c:d6:03:ca:d0:
61:29:3f:8f:38:ce:2d:82:f7:0b:c7:e3:1f:eb:cb:
70:74:8a:73:b5:2e:6e:54:97:b4:c5:8b:33:76:d5:
12:a3:cb:73:c7:f7:4a:31:3e:84:38:34:54:cf:0e:
92:ac:4a:6d:f7:75:c8:2a:53:30:ac:34:6f:aa:66:
38:ae:08:36:30:fd:72:86:74:35:86:ad:b8:55:9e:
e5:49:61:78:4f:c6:9a:0c:56:eb:99:02:03:31:20:
46:2e:1f:9a:56:13:c1:af:00:62:a6:9a:ef:87:d0:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DB:23:22:5B:B9:D0:8E:FB:0C:59:37:5C:06:70:14:36:48:B4:95
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:c2:cc:4c:cb:17:6c:c0:5e:97:1e:be:a9:2b:d0:72:ed:
0c:b4:48:b4:10:09:66:a5:ac:09:ef:2f:e1:b5:b7:0b:48:51:
04:9e:4a:55:06:76:c8:13:f9:90:a8:23:f6:06:7e:58:1b:0f:
53:fb:ce:21:62:63:61:f7:ad:0d:34:1b:8b:4d:ad:0d:9d:0f:
b0:c3:d9:b1:02:50:f7:ab:04:b3:1a:a1:a4:0b:1c:c2:57:9a:
62:86:da:b9:3d:39:fe:49:83:07:d2:5d:ae:49:8e:48:59:7e:
f5:c8:21:43:e9:04:de:f2:f8:b9:71:0c:23:32:69:82:8f:79:
e3:fd:b2:8a:92:fc:28:ea:51:13:0e:cc:2f:87:70:ee:6c:69:
38:4c:c1:dc:88:17:e7:c3:2d:76:21:c6:a3:24:ce:ac:4c:b4:
33:fe:12:f5:76:be:4d:c8:85:2f:18:7f:b4:13:91:c7:d9:41:
e4:4c:7c:a9:6e:a8:4b:2f:c1:22:6e:cc:22:17:74:6a:d8:bf:
eb:13:5b:78:eb:28:5c:af:82:a6:1c:c4:ff:e9:04:7d:e7:57:
39:69:1d:39:47:b0:3c:7d:08:29:40:a0:58:9f:3a:08:04:2a:
fd:6a:60:2c:92:20:a2:50:43:06:f0:b2:97:91:45:fd:97:bd:
9b:58:94:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw
NTBDOEY0RUUwHhcNMjYwNDA1MDE1MDU4WhcNMjYwNDEyMDE1MDU4WjAYMRYwFAYD
VQQDEw02OWQxYzAwMi02NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmoxHZkJs+60u1wZhxSzorr1cTHY16gwqioqMWhcJ7LD/FCoQ642kB/yWJZIE
evLWmBhJSrGH7avQe/GJxDjZYpXt9AhIRUunZL7JpfBT49lrI2vb9QX4RS6KjN2R
EoXFkdEDV9N71BC9KUmWjXZ68UZEeCoXJv9RRbrX2V3ElQHTdl9sPQQgao2sT4k1
SZhFPNYDytBhKT+POM4tgvcLx+Mf68twdIpztS5uVJe0xYszdtUSo8tzx/dKMT6E
ODRUzw6SrEpt93XIKlMwrDRvqmY4rgg2MP1yhnQ1hq24VZ7lSWF4T8aaDFbrmQID
MSBGLh+aVhPBrwBipprvh9DHsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjbIyJb
udCO+wxZN1wGcBQ2SLSVMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx
QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG
UUtOUFJUMFQ0X2dGREk5TzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmRzCzEzLF2zAXpcevqkr0HLtDLRItBAJZqWsCe8v4bW3C0hRBJ5KVQZ2yBP5
kKgj9gZ+WBsPU/vOIWJjYfetDTQbi02tDZ0PsMPZsQJQ96sEsxqhpAscwleaYoba
uT05/kmDB9JdrkmOSFl+9cghQ+kE3vL4uXEMIzJpgo954/2yipL8KOpREw7ML4dw
7mxpOEzB3IgX58MtdiHGoyTOrEy0M/4S9Xa+TciFLxh/tBORx9lB5Ex8qW6oSy/B
Im7MIhd0ati/6xNbeOsoXK+CphzE/+kEfedXOWkdOUewPH0IKUCgWJ86CAQq/Wpg
LJIgolBDBvCyl5FF/Ze9m1iU6g==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:57 2026 by rpki-client