
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
File: xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft (raw, json)
Hash identifier: J/PdvnP56Naz3GcrB+YWhdEc9i8+1wv8745CfoYF1UI=
Subject key identifier: 8A:91:B4:B3:B1:25:66:89:2F:43:D1:C2:2C:97:43:D0:E4:A2:68:F9
Authority key identifier: C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
Certificate issuer: /CN=A913C68B/serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
Manifest number: 0220
Signing time: Thu 21 May 2026 03:22:01 +0000
Manifest this update: Thu 21 May 2026 03:22:00 +0000
Manifest next update: Thu 28 May 2026 03:22:00 +0000
Files and hashes: 1: xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl (hash: V842cuVY1J+EGqbVmxYdCs73fAnuvqIhV1xco9ETvXk=)
2: BDE8001C1DDC11F19EDFCAE80F3D8C67.roa (hash: 8F8BmpcqqNwCt1bx4x79r5JtxIiJgA0CKQxMbNzF+xQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C68B, serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Validity
Not Before: May 21 03:22:00 2026 GMT
Not After : May 28 03:22:00 2026 GMT
Subject: CN=6a0e7a58-8efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:16:ca:43:b6:47:d1:26:9f:37:a5:6e:ad:
05:1a:ba:66:67:5e:5f:87:b9:b0:94:9b:1f:a1:54:
20:5e:e8:e8:ea:7d:6e:5c:5e:fe:17:cd:a8:94:31:
89:53:9c:8d:76:7f:b7:b1:35:71:4d:d9:21:19:92:
6b:60:e9:95:f4:a1:1c:9e:02:92:d6:4e:c9:ab:14:
82:d0:bf:de:b0:83:2f:75:fd:9a:8b:a0:6f:24:cc:
35:72:e5:10:41:b2:ca:7e:a8:ae:09:88:50:7b:fd:
52:7c:a3:2c:1b:3a:35:52:20:ab:cf:c8:f8:e6:7f:
fa:90:69:d0:d1:9b:44:4d:7e:b8:21:d9:e1:a3:e2:
05:c7:26:c4:62:2d:50:ec:3f:0f:80:52:c5:d7:4e:
ae:cb:50:e9:92:3b:82:a9:0b:5f:16:a7:30:6b:21:
8e:88:6c:99:70:32:f3:f3:a0:17:59:19:17:02:01:
1d:68:74:dc:c5:e5:8e:74:4e:cd:f9:1b:fe:20:ab:
12:29:93:e5:ee:32:cd:71:bb:b6:5f:fe:22:1e:60:
44:11:b1:cb:b4:ac:ad:12:7e:bb:e3:99:d5:2e:7f:
46:f8:3e:b1:79:b4:80:76:cf:04:f6:31:2b:5b:b2:
13:c0:81:62:a1:6c:42:a3:6a:92:74:10:9c:71:f0:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:B4:B3:B1:25:66:89:2F:43:D1:C2:2C:97:43:D0:E4:A2:68:F9
X509v3 Authority Key Identifier:
keyid:C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:56:34:b4:13:7b:40:76:22:8d:c1:96:17:4b:e1:a0:a8:dd:
b4:bb:94:a6:74:7c:df:f6:a4:2d:0d:fc:14:a3:10:5f:c9:b2:
22:21:b8:15:db:97:96:e8:a0:a4:94:af:57:ac:0b:b3:22:80:
70:70:9e:95:ca:20:e7:12:84:6b:00:71:2f:d7:64:08:ea:8b:
97:d3:19:b6:f1:43:8f:b6:b5:d9:0b:36:66:c9:37:43:f2:77:
34:8b:61:02:c7:e9:f7:b9:ba:cc:c7:75:f7:ae:c5:4d:05:12:
da:1f:1e:c1:75:61:d5:93:a8:58:f8:62:2e:53:da:fd:4d:d9:
9c:39:04:c4:04:04:b8:3f:9c:4b:98:23:24:2c:b6:86:d6:dd:
0f:7e:95:d1:40:aa:b2:39:db:0a:51:47:22:a8:26:09:9e:4a:
d2:d3:78:46:e7:de:29:2c:c7:1e:3d:30:56:5d:de:e4:dd:c6:
cf:88:77:4e:54:a8:ad:6a:74:96:2e:dc:5c:e6:84:c6:55:da:
7f:f5:3b:d5:26:de:f3:8e:b2:d2:f5:39:64:22:23:17:64:43:
42:26:81:b3:ff:a0:60:9c:98:f0:e9:17:18:17:00:ee:e8:c5:
56:9c:fa:92:f8:2c:9f:02:b1:04:1d:d8:48:d5:26:2d:1a:aa:
3c:5c:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:19 2026 by rpki-client