
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: X3/q6h5HHLpAykX4lBYQCbC9BJdcgDF0/xIe20naliE=
Subject key identifier: 3F:AC:FB:F4:2E:14:9B:51:C7:BD:80:84:86:82:02:9F:DA:20:89:2B
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 0517
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 04E8
Signing time: Thu 10 Sep 2026 23:38:40 +0000
Manifest this update: Thu 10 Sep 2026 23:38:39 +0000
Manifest next update: Thu 17 Sep 2026 23:38:39 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: gTYnIdPCCcPCxL3KHXW+YABs1OGj8FmEykDUtae7VDE=)
2: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
3: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
4: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
5: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1303 (0x517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Sep 10 23:38:39 2026 GMT
Not After : Sep 17 23:38:39 2026 GMT
Subject: CN=6aa33f7f-42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:aa:ce:66:88:3c:dd:34:52:a5:3c:02:06:
18:bc:dc:51:8a:24:27:a4:8a:af:e3:73:96:a3:ee:
11:94:05:bf:b7:54:2e:b2:08:b6:69:08:e8:c4:83:
b5:4f:5a:95:6a:41:b6:26:12:f9:1e:2c:c8:4f:08:
b5:f1:39:44:a1:3f:66:1d:ee:98:c8:6d:8b:3e:84:
0d:a8:2f:5d:74:b1:af:62:bc:04:59:75:1f:4d:57:
37:71:80:5a:a0:c3:41:52:37:05:16:0e:10:f4:01:
c3:9b:98:fe:1f:58:d0:26:91:22:08:1d:df:03:74:
ee:13:f4:69:20:75:93:01:75:06:32:ff:4c:f6:99:
38:88:c1:fe:8d:d7:f8:c7:85:a8:15:3d:89:e1:60:
bd:e6:6a:7b:28:8d:c8:57:78:40:5a:66:bc:7c:bb:
de:a4:ff:83:5e:25:51:e7:6f:7b:83:8f:71:7c:3f:
5a:bc:be:07:39:9d:e9:ed:bf:57:82:b2:8c:74:a4:
e9:99:96:b1:fc:2b:54:df:db:b3:50:b3:be:0d:85:
f2:45:02:ad:4e:1d:7a:02:9c:ea:72:e4:32:4a:e3:
32:8c:87:07:5e:4d:8e:8f:1d:23:80:c6:0d:a5:74:
a4:54:fa:a4:30:29:61:4b:e0:2c:7e:ac:86:ea:20:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:FB:F4:2E:14:9B:51:C7:BD:80:84:86:82:02:9F:DA:20:89:2B
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:19:c3:a5:6c:94:1d:45:34:b2:0e:1f:99:2f:74:6d:b8:ef:
fa:da:ca:0c:fc:4e:b6:02:dc:32:15:73:67:f5:ee:fe:6d:eb:
f4:22:28:9b:14:2f:58:70:c1:ee:67:6f:76:eb:03:59:de:73:
58:85:25:1a:ff:53:dc:f2:c0:e9:92:64:40:4e:10:9a:e5:86:
5d:77:9f:54:c0:1d:6a:4c:0a:7b:36:05:5f:29:42:4e:fe:95:
3f:89:36:87:a8:b9:13:06:22:71:e1:d7:3a:84:ea:90:0e:ef:
a4:f4:26:09:66:b3:3b:22:42:0b:d3:b8:35:3f:ff:67:19:0b:
27:36:e4:67:01:3f:bc:75:78:b5:ff:b9:07:e6:c3:fd:ac:53:
2d:38:59:67:76:e1:87:b8:1b:af:22:27:c4:03:05:b3:86:c3:
2e:ad:4d:a1:55:44:57:0a:97:b0:a6:f0:bb:d7:7a:d3:01:a0:
18:16:7f:d7:3a:9b:a9:44:14:f5:54:e0:63:cb:88:22:7a:30:
73:8d:07:c7:9f:4b:f0:bb:af:d0:e0:fb:ea:e6:0a:f0:7c:ca:
a0:d1:c3:1b:9b:72:1a:6c:00:c5:d6:24:df:32:79:7d:ed:4d:
10:32:06:f0:ac:c8:34:f2:14:e6:54:6a:31:10:e7:f2:e1:40:
c5:08:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:35:20 2026 by rpki-client