
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json)
Hash identifier: gxo+waqcb9M2hZNa3Z3tUUw+NxwXAD6bV0C2Y/iP+ks=
Subject key identifier: 18:AD:4E:A5:EB:43:6C:D7:F5:60:38:70:74:24:47:C2:B7:84:AF:F5
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
Manifest number: B3
Signing time: Fri 05 Jun 2026 07:32:04 +0000
Manifest this update: Fri 05 Jun 2026 07:32:04 +0000
Manifest next update: Fri 12 Jun 2026 07:32:04 +0000
Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: QTYBAnyNSDumjPKEcfgzdjQsaGvpnV6RCPBL4sY1MFA=)
2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: tlq/2xG0yhdoKwT6Az/0eNkst0Iretd6YucgKMDqYag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 07:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Validity
Not Before: Jun 5 07:32:04 2026 GMT
Not After : Jun 12 07:32:04 2026 GMT
Subject: CN=6a227b74-bc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:3d:71:9c:61:a0:1f:e8:29:85:33:3f:a7:
3a:18:1d:9e:d5:b8:ce:bc:d5:32:e4:7c:eb:36:ac:
6d:85:ec:9b:e6:0f:8e:d6:64:20:e8:f3:93:be:06:
e5:b4:0e:af:35:96:5e:95:60:f7:8d:c3:28:dc:ed:
52:a6:d3:bc:9e:20:67:e5:b6:7f:88:a4:ea:a3:f9:
a1:fa:d0:e4:a4:83:b6:69:3a:fe:95:31:2a:93:e5:
c1:5a:eb:91:36:97:c1:a1:67:d0:72:f3:99:70:3e:
b4:8d:91:8e:c7:c0:7c:c5:c8:58:c7:d7:63:cc:d6:
c8:d3:23:8e:fd:3c:f5:11:3e:ee:e8:fb:06:f8:53:
d3:0a:42:66:d7:44:5d:8d:5e:40:b0:bc:13:30:d0:
6f:ca:a8:d2:59:d7:56:fc:4f:43:86:19:7c:d9:0c:
96:03:e9:8f:2b:be:8b:9b:66:dd:15:8d:44:fe:30:
28:8c:d4:c9:f7:fa:b8:76:61:34:36:a8:79:b7:c5:
ad:b3:b9:c5:4f:ce:44:f4:21:d9:a4:8d:4a:33:a3:
eb:97:37:3d:d1:ae:0b:75:42:d3:c2:6b:8c:9d:89:
bf:66:d1:8e:42:1f:a7:ec:d8:11:fe:58:a6:96:01:
e0:d1:10:a1:d7:6f:ea:0a:ee:c0:20:d3:d4:40:fb:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:4E:A5:EB:43:6C:D7:F5:60:38:70:74:24:47:C2:B7:84:AF:F5
X509v3 Authority Key Identifier:
keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:d0:f9:6f:36:0d:3d:52:22:33:22:8e:d4:11:7d:43:04:
e4:21:23:7e:d5:6e:18:5f:ee:20:95:1a:d2:0f:32:d9:63:33:
03:f5:d3:57:9c:d2:96:d3:53:c6:8e:ce:9f:64:b4:6e:15:63:
ce:4a:19:02:c3:38:86:fb:07:7d:88:c5:34:cd:79:1d:60:73:
2d:57:4a:06:0f:91:72:1a:ef:7e:cb:41:ee:2d:8d:4b:cd:3d:
e8:49:4a:09:95:95:36:7e:85:b9:21:b6:11:60:0d:95:0f:87:
b6:7a:9a:0b:83:7e:35:2f:2d:ba:10:6f:00:fa:44:e3:37:85:
be:20:14:0d:3d:dc:b0:2f:9b:fb:6b:47:05:2e:50:9b:22:3b:
49:71:db:f2:b0:a7:6c:2f:ae:75:df:4d:66:f7:f5:37:de:40:
10:ab:6c:d1:13:5f:95:02:9c:84:dd:0c:b6:ca:df:0d:f4:e0:
b4:76:7a:6d:f3:50:48:49:00:08:3b:30:d5:7a:39:dd:43:ae:
7e:38:e7:54:10:a4:03:2c:6d:21:c6:6e:0b:90:5c:a9:7f:44:
c7:39:d0:bb:3f:b8:62:6e:6b:d7:fa:ca:fd:fc:18:0f:1c:86:
1b:de:6d:ec:97:49:2e:ae:c9:22:95:64:e8:f9:6d:a4:6e:a6:
4a:a8:8c:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNzIxMTAvBgNVBAUTKDVFNjBCODREQjkxQjZDMDg2NTAyMENFMEYyMDZDNTM0
OUU0QjgzNDgwHhcNMjYwNjA1MDczMjA0WhcNMjYwNjEyMDczMjA0WjAYMRYwFAYD
VQQDEw02YTIyN2I3NC1iYzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7nE9cZxhoB/oKYUzP6c6GB2e1bjOvNUy5HzrNqxtheyb5g+O1mQg6POTvgbl
tA6vNZZelWD3jcMo3O1SptO8niBn5bZ/iKTqo/mh+tDkpIO2aTr+lTEqk+XBWuuR
NpfBoWfQcvOZcD60jZGOx8B8xchYx9djzNbI0yOO/Tz1ET7u6PsG+FPTCkJm10Rd
jV5AsLwTMNBvyqjSWddW/E9Dhhl82QyWA+mPK76Lm2bdFY1E/jAojNTJ9/q4dmE0
Nqh5t8Wts7nFT85E9CHZpI1KM6Prlzc90a4LdULTwmuMnYm/ZtGOQh+n7NgR/lim
lgHg0RCh12/qCu7AINPUQPtE2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBitTqXr
Q2zX9WA4cHQkR8K3hK/1MB8GA1UdIwQYMBaAFF5guE25G2wIZQIM4PIGxTSeS4NI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM3Mi9FNkQ5NTI2MDU5
QTAxMUYwODI4NkQzMzJDNEY5QUUwMi9YbUM0VGJrYmJBaGxBZ3pnOGdiRk5KNUxn
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM3Mi9FNkQ5NTI2MDU5QTAxMUYwODI4NkQzMzJDNEY5QUUwMi9YbUM0VGJrYmJB
aGxBZ3pnOGdiRk5KNUxnMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALkrQ+W82DT1SIjMijtQRfUME5CEjftVuGF/uIJUa0g8y2WMzA/XTV5zSltNT
xo7On2S0bhVjzkoZAsM4hvsHfYjFNM15HWBzLVdKBg+RchrvfstB7i2NS8096ElK
CZWVNn6FuSG2EWANlQ+HtnqaC4N+NS8tuhBvAPpE4zeFviAUDT3csC+b+2tHBS5Q
myI7SXHb8rCnbC+udd9NZvf1N95AEKts0RNflQKchN0MtsrfDfTgtHZ6bfNQSEkA
CDsw1Xo53UOufjjnVBCkAyxtIcZuC5BcqX9ExznQuz+4Ym5r1/rK/fwYDxyGG95t
7JdJLq7JIpVk6PltpG6mSqiMKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:23:30 2026 by rpki-client