
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File: xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier: 4mi44wzOlozAh8wLoyJOFVJX7GZKEL6vq8gd04xSw1g=
Subject key identifier: 19:D3:52:46:23:FE:27:94:E7:E6:0A:60:57:A2:68:E9:D7:70:FE:88
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer: /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial: 08FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number: 08E2
Signing time: Tue 20 Oct 2026 20:31:56 +0000
Manifest this update: Tue 20 Oct 2026 20:31:55 +0000
Manifest next update: Tue 27 Oct 2026 20:31:55 +0000
Files and hashes: 1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: j6bGF0bCJ8+p3QXGs8kNvxP8tlYUpst4plgWpIVxdUE=)
2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: 2TgfBfhOOoIyM12+TZJ7XblTrgTmkcAVE7khTXWQBZQ=)
3: 15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (hash: lW0V6WYErMqZpOUyrSaUuEYDrwDoolUj9qHLNFcmwRY=)
4: 15335506DD8C11F0AEC3F5743D6F56BC.roa (hash: gciponRU5LQPwd+P6GuMTYYEycCclNTYnTsaEBR8bYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299 (0x8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Validity
Not Before: Oct 20 20:31:55 2026 GMT
Not After : Oct 27 20:31:55 2026 GMT
Subject: CN=6ad7cfbb-dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:78:76:60:34:a8:9f:d7:c3:c2:2a:5d:86:
67:46:0c:51:6c:5f:28:67:ae:2d:1a:5f:61:c5:2e:
74:95:4f:80:5f:df:e7:98:5b:a2:db:83:16:72:0d:
c5:e4:12:8f:27:09:3d:a2:ba:39:ab:7a:50:fb:fa:
5f:2a:21:a0:a2:39:3f:49:9c:35:12:6e:03:bd:45:
85:38:88:0c:3f:c1:6d:2f:5a:6c:40:9a:8c:69:58:
a6:c6:57:01:d7:ef:ed:60:3d:8d:9e:28:27:65:9a:
a2:54:b8:54:70:95:b1:6e:c0:64:22:db:d2:bb:32:
6d:3c:8b:3d:61:aa:be:af:9b:cb:a4:dc:fd:5c:4e:
a4:e6:39:a7:6e:d4:f9:a8:fd:09:9c:53:0b:2f:d4:
c3:ac:fe:1b:5f:dc:f8:3c:88:52:d6:96:86:dc:ad:
83:54:46:9b:13:a8:49:4b:8c:1c:83:74:cf:cf:21:
a3:83:35:0c:b9:3b:6a:d9:5a:27:c5:34:c5:0e:60:
8b:09:d9:e0:70:75:b2:68:7e:9b:70:d5:ae:99:a5:
83:33:a0:e4:d6:36:6d:4a:ba:00:25:30:81:79:f7:
9c:c3:95:d1:eb:ea:48:a1:d0:1a:15:1a:e8:5a:6a:
83:50:17:19:e9:db:d6:6a:db:09:ba:9f:fe:99:8d:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D3:52:46:23:FE:27:94:E7:E6:0A:60:57:A2:68:E9:D7:70:FE:88
X509v3 Authority Key Identifier:
keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:3d:0a:47:c4:b8:4c:15:a4:c5:7b:b2:a0:fb:94:87:53:
66:9d:bf:93:de:ed:33:2f:7d:cb:7f:a1:6a:46:55:3c:d6:d7:
5f:2c:b5:da:b7:d7:11:04:53:ac:7d:2a:5a:b2:16:18:4d:38:
c2:28:66:99:ca:1a:33:52:1b:d8:27:b4:0b:3c:05:21:b7:56:
79:b7:12:9d:25:51:aa:da:b9:03:e7:60:a0:54:7c:62:8d:0a:
b1:1f:20:1d:bb:16:ab:2b:14:4d:90:88:b2:c4:08:a0:cf:87:
28:ca:c1:4d:96:dd:f4:45:ae:58:48:9d:3e:00:24:50:c9:5b:
32:71:fc:d0:e8:c9:56:54:f3:96:34:48:8a:14:01:27:06:e6:
02:b1:d0:a4:a3:de:cf:9c:52:1b:39:71:8d:58:bf:36:fa:bc:
70:ac:54:9d:87:be:fe:cc:a1:07:15:9e:32:bb:18:02:15:e0:
a9:b7:89:9e:c4:0e:81:29:90:70:b4:56:6a:48:1b:cc:07:ef:
d6:5c:d2:38:d1:b9:4c:c1:99:d2:46:bc:11:ad:0a:da:df:82:
a5:29:37:65:79:2a:76:50:18:a5:fd:74:1c:70:c0:fd:77:8d:
5a:5d:c5:0d:de:be:ba:a6:d0:68:12:62:f8:e4:96:67:83:9a:
ea:ff:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:09:33 2026 by rpki-client