
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json)
Hash identifier: 4dcRiIWdATClgIA93c7qD3ciN7tKBwvLtrPrd1krAls=
Subject key identifier: C2:BF:E4:AA:D1:16:64:42:D4:1C:29:0C:31:D4:3A:2E:98:93:47:F7
Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Certificate serial: 0268
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
Manifest number: 0262
Signing time: Sun 05 Apr 2026 01:43:09 +0000
Manifest this update: Sun 05 Apr 2026 01:43:09 +0000
Manifest next update: Sun 12 Apr 2026 01:43:09 +0000
Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: C1dAIcLYsJ7nz9iG7oHFoUdSnv+exXQCUSnEcdRQl/I=)
2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: upbH9l4nlvROIzKcuBlWv04CWH78FYVY5Ubcgq09mgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 616 (0x268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Validity
Not Before: Apr 5 01:43:09 2026 GMT
Not After : Apr 12 01:43:09 2026 GMT
Subject: CN=69d1be2d-7644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:58:99:1e:9d:49:bb:dd:08:b0:23:8e:e9:
15:ee:d8:24:b2:fe:d9:43:75:18:db:39:a5:fb:96:
c4:1a:1c:bc:89:df:94:2a:98:40:9a:95:72:95:2d:
80:d8:e1:8c:8d:cf:4e:5b:4d:ee:4b:9e:65:5e:c0:
c7:e9:99:73:f9:52:15:50:79:2a:62:1b:e7:3c:94:
91:d0:6d:16:ce:6d:c3:7b:67:d6:33:12:56:b1:c2:
41:e6:8f:4c:a9:d2:c7:01:b3:e6:e8:f4:49:91:2c:
f8:1e:9b:2a:d9:f9:92:e0:33:60:4c:98:6a:6f:63:
f9:31:d8:56:95:29:29:83:68:f8:54:86:6d:ab:2d:
52:25:90:a6:ab:c2:5c:9b:c9:e7:58:f6:0f:e7:23:
ee:15:83:bc:e3:8f:15:5e:f7:63:11:7c:de:5f:62:
24:75:d9:ea:4f:a9:41:34:7e:4e:ad:be:c4:9f:80:
2b:dc:fe:98:54:0f:77:65:bb:7f:0e:e6:e1:89:15:
a2:03:3d:39:8d:49:05:0d:a3:c2:6e:ca:2d:ba:0d:
27:69:56:93:d1:3c:c0:46:25:2d:cc:3a:64:4b:ea:
b8:f4:dc:68:09:ad:03:1d:33:44:94:f1:ab:8d:db:
19:cb:53:00:90:32:64:be:1c:59:8a:cb:01:35:ba:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:E4:AA:D1:16:64:42:D4:1C:29:0C:31:D4:3A:2E:98:93:47:F7
X509v3 Authority Key Identifier:
keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:a2:cb:31:f4:df:94:4e:01:37:a8:34:c7:8a:93:2a:18:
8f:3a:ac:bf:27:1e:c9:b4:83:2a:78:38:20:86:2a:b1:63:c5:
c1:4b:ba:a9:63:ab:e7:b8:05:25:2a:b8:60:31:01:4a:b0:f5:
d2:b0:cb:0e:f7:b7:a6:69:e3:59:12:8d:5b:60:4d:e6:44:71:
ea:5a:61:80:57:7a:4d:d8:ad:62:ae:a0:bc:6c:1e:ba:e8:68:
2b:56:88:dc:be:e6:a3:a6:3b:4c:3b:67:34:5a:b6:35:bd:11:
21:ee:a2:e1:88:3f:10:8f:72:7c:94:96:e0:b8:e9:0d:dd:b0:
41:79:1b:6a:0d:88:12:f1:19:aa:be:3f:6c:02:80:1d:d3:d3:
60:1d:63:96:fd:01:f7:02:fa:d5:ec:f5:86:6d:c9:71:06:91:
08:cf:0a:a2:1c:eb:88:26:63:44:32:a0:51:b1:76:1f:4b:9e:
3c:b5:0f:c5:15:d3:ed:75:06:13:73:48:ee:dc:45:cd:83:fa:
2e:66:06:54:21:9b:28:f2:6b:32:21:04:f7:48:fe:3f:8c:0e:
16:5a:67:4c:f8:9c:47:f3:2d:16:e4:5a:51:95:4f:f4:35:31:
e2:a7:e2:6d:43:27:f9:fb:11:d0:32:58:71:cd:15:16:80:b1:
ac:f7:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:58 2026 by rpki-client