
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier: odMnGKa72sRnpLiV/rX95p/YcjzK/+WzaCYA1h1f0iY=
Subject key identifier: 86:AA:23:FA:0A:1E:20:79:E8:9B:27:BB:4B:96:56:DA:03:7B:76:19
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number: 490D
Signing time: Sun 26 Jul 2026 17:04:17 +0000
Manifest this update: Sun 26 Jul 2026 17:04:17 +0000
Manifest next update: Sun 02 Aug 2026 17:04:17 +0000
Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: lIAoBuFx6h5pcwOQ6vhQenmjJaWJy+tQLR/nI5iX4rA=)
2: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=)
3: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=)
4: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=)
5: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=)
6: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=)
7: 2DE2AC2669E311F18E29D967A047A888.roa (hash: FXkhpuzHLKYK1MxgK0HuTpu2VmPbFJh1f+OCxLZjwRY=)
8: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=)
9: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=)
10: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=)
11: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 17:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32369 (0x7e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Jul 26 17:04:17 2026 GMT
Not After : Aug 2 17:04:17 2026 GMT
Subject: CN=6a663e11-f0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:00:f8:51:1b:c1:da:67:d1:cd:a2:d2:0c:
c7:ea:74:d6:a8:7f:a5:ac:08:57:45:ab:64:02:c4:
8f:18:e7:90:26:eb:60:1f:d4:4c:82:29:4e:d4:6d:
7c:79:17:ff:83:1f:b0:50:81:97:f7:97:b2:43:7f:
49:b0:33:79:2b:8a:c9:24:70:bc:fd:8c:3f:a1:ad:
a5:b1:86:ff:b6:4a:59:62:47:15:19:2d:b6:81:60:
29:4f:99:03:e2:7d:99:48:da:1e:c3:97:17:26:24:
68:e6:18:23:02:40:88:34:c8:6f:16:c0:44:1b:c4:
d7:63:27:8d:a1:c8:8b:da:7e:dc:9e:cb:e5:0c:91:
90:e6:e9:bc:2f:f0:d2:37:28:91:19:cd:4c:68:cb:
e4:89:77:26:84:ab:ed:e8:d0:71:8d:c8:f6:fb:dc:
6a:93:c9:e5:f7:dd:a3:96:4b:a0:7e:59:78:f0:19:
30:60:c9:34:f7:da:f1:af:16:30:1f:a6:bf:6b:e8:
e7:29:33:48:87:19:9e:83:bf:07:ad:2c:a5:70:6e:
d7:3b:5a:ce:26:2f:1d:7e:6e:68:65:a8:9b:2c:8c:
a7:a7:7b:a2:47:1d:5f:c4:90:5d:18:ba:4d:5b:3a:
09:48:ef:5a:be:54:a4:5d:ff:c1:c7:8b:9d:1e:9c:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:23:FA:0A:1E:20:79:E8:9B:27:BB:4B:96:56:DA:03:7B:76:19
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:36:4b:0d:a6:2b:4f:4f:60:df:8b:57:ac:66:98:f2:9b:
6e:db:5e:06:54:7d:1a:3b:92:2d:a6:d5:ce:bd:77:90:58:2f:
04:2a:bf:25:55:03:e8:f5:21:2d:e2:a5:35:16:3e:d5:98:91:
cb:de:b9:16:c4:90:ef:19:3a:45:21:96:69:0d:ca:8a:83:9e:
20:e6:4c:7f:53:71:79:62:93:92:e9:af:07:88:91:fa:86:e0:
8d:dc:e6:a7:d9:99:35:62:c3:db:c9:87:f9:ac:43:5c:51:07:
2a:3f:2b:da:ff:17:38:9c:46:00:a0:df:cf:fb:93:24:3c:45:
dc:4f:da:b6:93:b0:19:09:b0:e6:7b:52:1a:33:83:da:2f:e6:
6f:c5:4e:20:be:6e:1f:81:7d:4f:75:7b:f4:12:72:0d:88:95:
64:8f:b1:13:31:ac:a5:c6:4f:8d:06:58:85:14:4a:23:6f:15:
ef:f5:a8:89:b7:30:63:b3:7f:a7:48:e8:75:5c:f1:a4:68:e5:
2e:6d:18:55:09:16:75:89:f8:23:be:95:3e:14:8e:2b:86:08:
97:03:db:4e:99:ec:f3:a5:82:39:22:76:d2:cb:95:a5:a8:e8:
87:92:9d:21:2e:bf:21:f5:32:78:69:ff:45:1e:e4:87:a5:35:
a8:44:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:51 2026 by rpki-client