
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json)
Hash identifier: 53N+iWl3Qhpu4JEwi+dLeHXej6cliCxszzWOxtPu0qk=
Subject key identifier: DC:93:2C:FF:F0:DC:15:82:C3:F7:98:15:69:AB:71:2B:0A:EC:DE:2A
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
Manifest number: 3F
Signing time: Tue 19 May 2026 08:24:00 +0000
Manifest this update: Tue 19 May 2026 08:23:59 +0000
Manifest next update: Tue 26 May 2026 08:23:59 +0000
Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: 5UvwiG33EeERtaTT+e47C1iXBD6tGcGS5yZQK+FEbzs=)
2: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=)
3: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Validity
Not Before: May 19 08:23:59 2026 GMT
Not After : May 26 08:23:59 2026 GMT
Subject: CN=6a0c1e1f-e3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:4f:24:7d:1b:0d:c3:14:a8:ac:fe:92:be:
93:27:f8:c3:3e:29:f5:6e:ea:31:b5:3a:50:7f:1a:
f2:07:60:ac:5d:d0:e4:19:99:05:5f:d1:58:9b:60:
bb:a1:ce:65:d0:9a:d1:8a:a6:6e:b8:49:c2:25:c0:
e6:ad:e0:29:f7:21:2a:44:94:c6:b2:10:08:42:f3:
40:a6:1e:70:e1:df:75:5f:2b:dc:17:ce:85:30:7a:
07:3d:48:c0:82:d8:0e:a6:d8:4d:49:cb:59:91:d9:
c1:fb:f1:65:28:88:de:14:ab:f1:e6:37:6c:3d:33:
08:71:32:cf:62:b4:2b:cf:c1:c7:6d:e4:69:19:fc:
20:cc:80:0c:bf:0d:f7:13:4b:79:52:16:5f:7b:6a:
98:67:a2:d8:55:e6:b5:3f:55:5d:1b:b2:eb:97:48:
f3:7d:b9:7d:45:1d:df:78:3f:69:25:95:a4:6e:f3:
00:6f:a2:82:7f:4d:60:9b:53:5b:6e:e6:ea:a8:70:
39:19:90:dd:ae:81:d9:b7:a6:b9:9d:5e:18:ce:06:
01:28:d0:e6:59:35:71:33:9e:14:5c:d0:da:74:ba:
f7:0a:b8:7b:ad:08:c6:92:52:15:43:be:03:be:e1:
0c:3f:cd:33:c8:d5:f5:d1:c0:b3:f6:17:8a:d6:cc:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:2C:FF:F0:DC:15:82:C3:F7:98:15:69:AB:71:2B:0A:EC:DE:2A
X509v3 Authority Key Identifier:
keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:7f:e8:d2:24:31:db:08:4f:54:ce:04:69:86:8c:74:99:
de:de:4a:44:f7:a5:c3:79:14:3d:d4:c3:f2:55:49:06:ac:94:
80:a6:dd:ab:38:62:c2:84:be:10:67:b3:83:66:1f:15:75:05:
4f:b3:7d:41:9b:ee:7a:61:0b:2d:7f:69:68:e4:68:48:ca:c9:
ac:35:35:fa:43:a7:1a:6b:3d:35:07:d0:3f:6f:9d:ae:5f:59:
f3:bf:c4:7b:4f:f2:f0:30:92:90:c3:1e:e5:74:b0:a7:02:9d:
4e:ab:9d:85:6b:c7:46:c8:8e:75:63:78:7d:f0:33:9f:38:af:
2f:2f:ae:0c:9b:54:0c:2a:d3:2c:5f:83:68:24:e1:6c:bc:dc:
43:ec:cb:a6:d1:67:f7:b9:15:b5:4e:4e:ab:04:3f:06:a6:32:
e8:c1:89:b4:31:d1:d0:cc:7d:8e:18:18:cb:98:da:14:ac:a8:
34:31:ab:f8:b8:99:66:28:1e:a2:e1:5e:ff:69:a2:f8:22:e9:
3b:8d:4d:92:e5:cf:27:15:a4:55:cf:0a:3e:12:dd:97:03:e4:
7f:da:9b:fa:1a:0d:74:07:8d:a8:78:1f:97:1b:4c:0f:a4:34:
6d:4c:26:bf:c8:df:bc:20:67:e7:9e:e9:5e:bc:e4:39:35:d8:
ec:ae:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:57 2026 by rpki-client