
$ rpki-client -vvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File: xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier: PYQ5kg6+db7lqpGjuljcTAW7MkJQTxEUPbvLwLxibt8=
Subject key identifier: B3:04:14:23:4A:63:E0:D0:D6:F6:9E:C9:22:56:C2:54:DC:70:31:53
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer: /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number: 64
Signing time: Thu 21 May 2026 08:09:01 +0000
Manifest this update: Thu 21 May 2026 08:09:00 +0000
Manifest next update: Thu 28 May 2026 08:09:00 +0000
Files and hashes: 1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: 4LMJHeweMCjWdn0qtumx+XS7TDvkeryQkZP66nbsNqc=)
2: 3461A67021A811F182436258153D8C67.roa (hash: CnfvhJ3PR3mpLZc/i3GDghVF6JL2JkcdlNGKt7tvH9k=)
3: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: lnx8KdODc8Z9IvWXfKLFt+dyZtSETllR99xleqZrHjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Validity
Not Before: May 21 08:09:00 2026 GMT
Not After : May 28 08:09:00 2026 GMT
Subject: CN=6a0ebd9d-f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:04:43:df:23:c2:65:ad:c7:7c:2e:67:0f:
f8:4f:b9:72:9e:05:4f:02:e7:50:71:e0:b9:17:cb:
b6:aa:69:bf:91:16:f7:57:31:d3:be:09:a8:af:2b:
04:29:7e:49:a8:9f:59:6b:60:24:d3:d9:ec:8c:15:
03:8e:79:62:7f:cd:99:92:94:0f:f7:d4:d0:9a:ee:
b2:67:72:17:32:44:03:4d:1a:cd:6c:e8:e0:d7:40:
93:aa:c0:c7:cf:54:07:2e:6b:f1:f7:62:60:eb:d1:
e8:25:92:8d:13:4b:46:1b:e1:d5:c8:8e:d8:67:6f:
df:55:f3:4b:88:a7:16:29:db:43:8e:ae:e1:0a:eb:
36:7e:55:a3:0d:5c:5d:23:ac:da:97:36:ee:cd:c3:
ce:ad:d0:5c:2e:27:85:f8:71:1c:2c:7e:6c:2e:ce:
0f:9c:83:b3:f9:b9:74:54:49:80:70:64:65:f9:53:
1c:bd:00:d1:c0:d9:90:93:dd:51:65:dc:a3:f8:09:
5f:e6:70:e5:85:ad:1b:87:ab:6b:45:7e:d3:bf:3a:
c2:2f:40:45:4b:34:51:f8:18:13:4e:4b:41:2d:19:
59:51:54:4b:74:b5:31:8c:cd:c2:95:46:d4:2d:ea:
dd:36:3a:ea:9f:71:84:b8:83:98:e8:4f:9d:7c:26:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:14:23:4A:63:E0:D0:D6:F6:9E:C9:22:56:C2:54:DC:70:31:53
X509v3 Authority Key Identifier:
keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:28:41:de:5b:11:13:6a:ad:e2:25:03:f7:8b:0b:bb:26:
c3:86:0e:ce:26:86:75:fb:c0:09:60:20:1f:55:e3:94:f6:a8:
58:e5:fe:a4:b7:a0:b2:65:b4:4f:8e:d8:5a:d2:07:c1:35:6f:
b6:44:15:a7:dd:ae:f8:cf:13:08:68:ce:4c:82:2a:34:09:ec:
0b:41:83:f9:34:71:24:2f:7c:f9:59:9e:ac:4d:95:41:cc:34:
60:9c:de:fe:93:9e:21:41:62:9c:52:70:66:d4:a1:75:36:6d:
98:40:2e:cb:6f:4c:ed:a7:7f:c3:0c:48:d6:02:da:d8:06:5e:
75:48:76:a6:80:44:49:7f:98:ca:6a:4e:47:93:42:f5:f7:8e:
f2:2a:f5:b2:f5:1a:e3:4c:ed:e3:08:9d:9c:6e:50:a0:6e:42:
bc:65:d2:75:df:ae:ee:f7:3c:5c:e8:15:a4:f8:a0:14:82:bd:
34:38:62:3c:8a:6e:f9:96:94:b4:8b:80:fc:70:df:39:8b:db:
9e:32:4c:47:a0:c8:d0:4c:27:a0:ac:49:95:3d:15:a9:b9:85:
eb:fe:1e:20:c4:e4:57:11:c3:bc:66:60:fe:a7:9c:cc:f9:b2:
31:04:c3:35:cd:3b:31:8e:a4:36:0f:a2:09:13:25:a3:bd:c6:
b5:ea:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:16 2026 by rpki-client