
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: Hx/zi6HiZtid6oMybDOaV1xu8M0nTeHS95/sOmk74ac=
Subject key identifier: 4E:7E:AA:4D:9A:01:3B:EB:87:85:0D:D9:48:12:FB:5F:AA:36:49:0C
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 0270
Signing time: Thu 21 May 2026 02:06:57 +0000
Manifest this update: Thu 21 May 2026 02:06:57 +0000
Manifest next update: Thu 28 May 2026 02:06:57 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: d+bpZo29sGj6fDINHN+fhhzalGNzAA0zViaovD8pp5s=)
2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: May 21 02:06:57 2026 GMT
Not After : May 28 02:06:57 2026 GMT
Subject: CN=6a0e68c1-a378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:ac:a2:24:7a:b2:e5:4f:0c:69:71:1a:d4:
0d:4e:9d:b6:7c:8c:a9:40:bb:1b:89:1f:14:14:7e:
67:44:8d:30:38:d4:2c:04:7c:15:62:07:fd:d6:61:
84:e0:77:1d:aa:d9:8a:8d:b9:64:bb:fb:40:e3:72:
1c:65:56:75:de:55:98:66:21:c3:cb:e6:d0:8b:5d:
54:ea:ab:55:e2:63:d3:e0:a6:f1:bf:61:79:ae:16:
21:ac:8a:9f:ee:40:7c:8c:dd:ce:b3:12:ae:53:98:
da:2c:2a:ca:b0:fe:39:58:c9:c2:84:79:4f:09:98:
9b:71:a4:9b:31:ce:3a:f9:dd:6c:19:5c:63:0b:02:
a3:d0:d8:ae:03:32:44:e8:1e:e9:bc:41:af:ec:02:
86:68:08:9e:2e:6e:96:92:f4:79:e6:d9:95:f1:cf:
7c:26:4b:bf:bd:b8:3b:9d:79:20:36:a8:fe:26:6d:
98:ed:1e:9d:bf:f1:81:c0:1c:fc:5d:24:49:17:35:
00:12:2b:fe:ff:fd:86:ab:6d:fa:8b:20:5c:bb:be:
8a:1c:ae:ae:f7:28:46:d0:d7:ec:cb:68:33:68:7c:
44:31:70:5c:a0:29:3f:e2:bf:52:40:c8:34:dc:4a:
ee:b2:53:38:8a:24:94:1a:33:0d:ae:f0:d6:ae:ee:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:AA:4D:9A:01:3B:EB:87:85:0D:D9:48:12:FB:5F:AA:36:49:0C
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:7d:da:50:04:39:9c:b2:79:ae:0a:22:88:4e:f5:91:45:7e:
9b:a5:0a:9d:ec:a6:f1:78:2f:fb:81:4a:76:f9:a6:de:28:fc:
fc:b6:60:bb:fb:cc:a7:91:90:86:3a:47:76:2b:83:7e:af:ee:
33:30:51:1d:95:b2:aa:db:c2:d6:e7:d1:7d:1c:f2:21:b6:55:
81:cf:73:d6:d0:1e:ca:36:f3:69:f2:48:ee:ac:13:21:0b:04:
85:7b:7c:04:79:f5:a1:f1:df:78:b5:4d:44:48:65:2e:7f:fe:
89:84:b0:3b:eb:a3:03:87:04:97:2d:d9:6f:35:68:b8:44:54:
6b:f2:18:5d:9d:58:71:34:2f:2e:85:62:19:27:cf:40:20:7f:
47:36:63:21:b8:db:8d:08:73:ec:34:26:08:b5:9b:dd:f5:ca:
1b:71:3b:6f:84:1e:04:2e:4c:5b:55:f3:14:c9:1b:2e:6f:16:
bc:29:b3:69:28:dc:f8:15:21:b9:f5:b0:3c:a5:98:58:df:a5:
eb:a4:30:c3:93:c4:d9:da:bb:9c:3c:cf:e4:62:71:88:92:77:
2f:24:39:20:c3:f2:4a:35:92:29:7f:f2:6f:48:71:88:c2:ab:
94:9a:1d:4f:af:59:64:70:e0:47:9d:ba:8d:4e:64:95:7c:ab:
5d:6c:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:47 2026 by rpki-client