
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier: IUu6UhHldo5Y4FAEkeyl9Fa7MXE00t/QJOYe6JXrG2Q=
Subject key identifier: 72:FE:7D:3D:F8:B5:42:85:FB:DF:7A:C8:F8:1C:85:EC:BB:EF:F9:4D
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number: 48F4
Signing time: Wed 10 Jun 2026 16:55:20 +0000
Manifest this update: Wed 10 Jun 2026 16:55:19 +0000
Manifest next update: Wed 17 Jun 2026 16:55:19 +0000
Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: 3tgbD2+O80BU5ZRkA5kYodQ4/vaHpQWeZkHVf7EM30w=)
2: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=)
3: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=)
4: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=)
5: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=)
6: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=)
7: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=)
8: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=)
9: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=)
10: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=)
11: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32343 (0x7e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Jun 10 16:55:19 2026 GMT
Not After : Jun 17 16:55:19 2026 GMT
Subject: CN=6a2996f8-9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dc:90:5d:0c:eb:e0:23:b1:45:b9:20:d7:63:
d0:c5:3a:4c:63:2f:db:d7:7d:d2:15:7c:07:67:2e:
07:7f:cc:ce:6b:50:bd:6e:38:a7:94:97:00:5c:fa:
12:62:e4:68:b8:7e:0d:ef:df:79:1b:3f:0e:8a:50:
c5:d2:98:73:0e:2a:f8:bf:70:cc:d6:79:91:cd:11:
bd:7a:41:0d:60:c7:3c:18:2e:9a:2e:58:c0:3d:c0:
a5:00:34:46:fe:d1:5b:61:97:ba:f8:0d:17:6f:24:
ad:73:f4:44:b0:d3:01:66:eb:72:be:14:02:cf:3a:
87:69:1b:71:e8:d3:e7:72:a7:4a:7d:df:35:2a:bd:
bd:58:1d:e4:d1:6d:65:1a:28:e6:ea:ab:26:18:c3:
27:91:58:d5:37:c3:de:96:b0:62:28:41:2b:7a:9b:
80:52:2e:a9:82:27:07:72:38:cf:e5:ae:57:ac:66:
b1:af:11:40:f6:1d:71:4e:a2:a8:d7:6b:32:6b:a6:
fa:64:8b:46:fb:90:85:56:f5:e1:68:0c:e3:95:12:
3a:3d:13:ff:2f:10:a9:50:0b:81:d5:3f:da:3d:cd:
6b:12:c1:c9:9b:fe:6e:29:24:52:29:16:ed:70:fb:
c3:76:b7:66:a5:95:af:99:6b:e0:d7:9b:f4:bc:1a:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FE:7D:3D:F8:B5:42:85:FB:DF:7A:C8:F8:1C:85:EC:BB:EF:F9:4D
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:6a:02:61:ed:d3:9d:5a:40:31:87:95:6d:01:39:4f:c1:
50:61:f6:89:c2:54:f6:e2:57:fc:a8:ff:12:4e:df:db:ec:6a:
be:1a:83:0a:fd:ef:1d:25:61:4b:68:22:b8:74:72:06:7d:c0:
22:fe:de:cc:72:8b:e9:84:ba:fe:43:da:03:42:44:9f:df:e7:
00:39:c5:40:5a:f4:92:5f:d3:7a:09:3a:02:79:5f:c7:41:2d:
77:21:21:79:74:ee:49:ae:86:68:e8:7c:59:5f:45:c9:c8:54:
84:8d:e7:ef:de:ed:fc:bf:f2:ca:26:9a:16:02:06:29:ee:59:
f8:6b:3c:ff:4d:f5:60:d0:6a:86:82:37:e5:7d:9a:0d:67:0f:
b6:c3:1c:e1:2a:20:e5:d2:19:6e:cc:df:e8:e5:94:e1:27:cc:
6d:13:73:3a:1c:ee:7f:a8:b2:3b:c4:de:30:23:06:20:fb:9d:
da:e4:b3:56:93:68:80:cb:02:70:c2:a0:3c:bc:42:31:c9:05:
39:02:b6:8c:a5:f7:65:0e:7d:15:32:ce:3c:1b:c9:1c:89:ca:
0b:15:b6:c1:eb:d9:d6:2f:a3:9d:c5:d7:a4:16:30:5f:65:ee:
e1:cb:5d:a2:53:7c:95:8b:7d:88:64:12:67:d5:12:d5:94:a3:
1c:f1:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:43:24 2026 by rpki-client