
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: ucTiil9/klQ7+tj1siJLrezmZYD60Qu9Ioc2Au5Ll7k=
Subject key identifier: DA:9C:F8:1D:FF:A3:75:27:4C:A0:EE:E0:02:00:95:03:D0:4F:24:69
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 3577
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 355C
Signing time: Wed 20 May 2026 14:19:33 +0000
Manifest this update: Wed 20 May 2026 14:19:32 +0000
Manifest next update: Wed 27 May 2026 14:19:32 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: q0VAgu6qyZ+6J1VqgWOrocMIAaAfvIqCvVIZX0XYnFc=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13687 (0x3577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Validity
Not Before: May 20 14:19:32 2026 GMT
Not After : May 27 14:19:32 2026 GMT
Subject: CN=6a0dc2f5-5b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:eb:71:2c:d9:b2:80:a7:0e:54:76:7b:af:
b4:76:32:7c:35:98:ec:40:56:ac:1b:d2:16:e1:31:
d3:d5:03:95:25:ce:2e:6f:f6:fb:2a:86:7e:37:be:
0b:52:98:29:3a:83:b0:7a:f4:10:3f:64:2c:ed:32:
0b:02:71:dc:ad:35:8d:cc:d7:7f:69:c6:de:62:4b:
d1:ef:9d:40:b6:84:eb:a8:4d:a2:88:20:d7:46:51:
f9:af:70:45:c6:9a:5d:9c:33:52:c6:86:d5:d2:16:
7b:5d:96:3f:b8:89:5f:fa:59:cd:53:cd:b5:7e:1b:
0f:64:fc:5c:11:10:03:9a:56:14:96:50:e0:67:2b:
d4:ea:60:43:aa:2a:5c:66:bc:64:68:20:aa:fe:d1:
2c:ec:c3:c7:63:7b:fb:47:eb:db:73:71:61:ec:90:
19:57:6d:d4:40:5e:fb:cc:ec:5a:b7:81:76:2f:e5:
87:bf:44:aa:55:3b:6a:2a:95:42:ef:98:d0:23:94:
15:d4:54:53:c4:68:82:3e:f6:81:57:c6:81:76:f4:
10:32:21:1c:93:c0:1e:c8:41:d5:d1:5d:25:ac:01:
d3:d4:0b:3d:e1:1f:4a:fd:fd:73:ba:e7:4f:7d:e3:
0d:80:e9:88:51:74:19:65:0f:26:4b:87:25:36:f9:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:F8:1D:FF:A3:75:27:4C:A0:EE:E0:02:00:95:03:D0:4F:24:69
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:ea:04:d3:f0:55:8c:5b:2a:ee:cb:a5:d7:20:a4:9d:07:
a3:ec:bd:a6:68:25:07:58:ae:c9:2b:5c:f6:31:b4:1f:a1:c9:
e1:27:51:fd:1f:2e:54:6c:b8:2a:cd:ea:49:67:53:c0:79:5e:
6b:66:81:74:83:c7:c0:e6:65:5f:d4:29:19:3a:67:d9:df:fe:
d2:4b:50:4f:37:99:70:41:de:4e:35:86:ca:29:b1:2b:87:b4:
24:16:e4:82:24:c3:84:45:36:4f:72:92:09:2e:cf:1e:41:0e:
13:0d:46:05:1b:28:1d:82:ec:e9:4a:6a:7d:3a:4d:93:e5:e2:
70:6f:27:5f:5d:8c:32:cf:d0:63:ae:c0:ca:75:d6:1f:74:19:
9a:e8:62:72:f1:67:91:04:0a:17:4b:8f:30:39:8f:da:12:2b:
89:9f:3e:e6:68:5d:12:c1:24:13:67:b0:42:b4:00:d2:f4:b3:
3d:d9:8c:78:d0:90:8c:26:12:6b:21:a2:7c:f3:ae:31:82:a4:
da:0c:fe:67:c5:0c:47:63:91:f8:0a:84:1c:7e:55:db:56:b7:
17:d3:da:c9:cd:9b:cb:31:3f:d2:5d:d6:1b:3d:f5:48:b7:15:
8c:b0:fb:d0:92:30:51:4b:4a:56:2e:36:58:a4:6d:0e:b6:5a:
b6:9e:b3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:07 2026 by rpki-client