
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File: xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier: kxEinhQy5AG4Cv5Q4njV6gHOw6zdS3aV3eHfFcAT814=
Subject key identifier: D7:A6:DA:0F:12:CB:16:52:1A:08:3F:A1:EF:21:73:F7:8F:E8:A3:DB
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer: /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number: BB
Signing time: Mon 09 Nov 2026 07:05:05 +0000
Manifest this update: Mon 09 Nov 2026 07:05:05 +0000
Manifest next update: Mon 16 Nov 2026 07:05:05 +0000
Files and hashes: 1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: Gd9PV7yhZ3tPbxV9lHJeHipSPb7lnwSgacA9L7SixAY=)
2: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: lnx8KdODc8Z9IvWXfKLFt+dyZtSETllR99xleqZrHjg=)
3: 3461A67021A811F182436258153D8C67.roa (hash: CnfvhJ3PR3mpLZc/i3GDghVF6JL2JkcdlNGKt7tvH9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 07:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Validity
Not Before: Nov 9 07:05:05 2026 GMT
Not After : Nov 16 07:05:05 2026 GMT
Subject: CN=6af170a1-820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:47:9c:14:2a:fe:ae:e2:b2:a1:59:6e:f6:
6c:50:44:d5:b1:12:d6:af:b4:75:64:ce:a4:88:64:
2c:aa:1c:ed:10:6f:aa:92:7a:0b:bb:34:f0:3b:8d:
bd:a0:10:6b:71:32:fc:f0:93:47:e5:85:25:4f:57:
10:26:5e:42:95:3b:43:eb:e5:30:3b:f1:ca:15:44:
50:8a:ce:41:9e:4c:fc:6d:fd:2b:f3:d7:20:c4:ca:
b2:f7:2d:1d:4b:36:23:8b:62:95:81:fe:79:72:f4:
b9:ed:3c:75:bc:7c:c3:cd:22:06:44:b3:b8:f0:af:
64:e0:8b:87:ed:9b:1c:60:52:fa:93:c8:7b:b2:81:
99:3f:26:a8:41:46:c2:3f:0c:a5:07:e4:76:9f:9e:
a2:3d:7e:cb:7a:22:44:b2:5d:30:d1:3e:57:fd:bb:
ff:a4:6d:17:f3:70:73:8d:77:49:b9:bb:7f:9b:63:
d5:f6:18:83:f0:fb:a1:8d:14:f1:bc:59:4b:d9:75:
56:40:b1:89:3d:88:0a:bd:2e:3a:96:b8:3b:cb:d8:
71:39:eb:0f:b1:20:6c:d2:75:dc:62:82:c0:9f:8a:
11:e0:79:6c:dc:f0:e4:8d:85:1b:4c:f7:23:9a:35:
08:33:48:5a:77:a0:6d:0c:de:bb:9d:8d:b5:af:4c:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:DA:0F:12:CB:16:52:1A:08:3F:A1:EF:21:73:F7:8F:E8:A3:DB
X509v3 Authority Key Identifier:
keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1f:55:69:02:6d:d5:da:ef:7b:1e:e6:24:d9:d6:d6:ca:27:
a6:34:ad:38:3d:b1:b3:52:74:95:38:a4:d5:da:71:b9:51:17:
4a:6d:09:d9:6e:22:81:85:4c:12:64:a9:9e:87:a8:d9:a0:6f:
67:f8:1f:cf:ff:e6:9f:e2:19:a4:c2:f1:98:d6:69:24:85:d2:
89:fb:99:54:36:89:fb:d3:fe:32:3a:38:fe:a4:20:33:9b:7d:
76:bd:f1:bc:54:63:10:6d:3a:46:9c:a9:df:f9:f3:87:67:38:
a1:0c:6b:43:11:ff:d4:2b:fc:1a:93:03:3e:4b:e9:e5:42:08:
29:60:66:3c:f3:78:12:14:e7:8d:91:88:88:a4:51:58:67:b3:
a8:0d:8b:1c:34:00:6f:49:74:20:49:9c:aa:28:79:22:a2:71:
f6:ca:20:a1:2a:17:da:41:dc:ad:19:cf:f0:24:2a:1d:25:d0:
89:a2:36:bc:07:cf:79:e2:76:37:3d:a7:4e:b0:ba:0d:22:b4:
45:57:00:62:14:0c:ce:47:fd:0e:95:b5:fc:45:e0:d8:cb:43:
d7:d4:81:41:60:66:ff:c1:e3:71:58:7a:27:31:ae:10:b0:3a:
df:87:f9:94:9e:69:42:21:75:48:48:ae:9e:e4:4e:bf:59:6c:
82:cc:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:49:29 2026 by rpki-client