
$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier: AOWXERJ49+hkrVVHtGzYKahSxBXzayZPH6K7JEVwI/8=
Subject key identifier: 2B:37:7F:DC:43:13:EF:A9:B7:2F:6A:BD:DB:97:9F:99:58:09:9D:A0
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number: 016A
Signing time: Tue 03 Mar 2026 04:25:38 +0000
Manifest this update: Tue 03 Mar 2026 04:25:37 +0000
Manifest next update: Tue 10 Mar 2026 04:25:37 +0000
Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: 36TjjE7drxGLQd5/T1Rpx4mOaWpdlwfeSc0E5sWZ89o=)
2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: DKo1dNSY0/MC6eYJVV90BVwNV83Azf/Byd1oG5pYyiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Validity
Not Before: Mar 3 04:25:37 2026 GMT
Not After : Mar 10 04:25:37 2026 GMT
Subject: CN=69a662c2-864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:9b:77:7e:63:69:12:02:f9:a5:4e:17:64:
a9:85:66:fc:f7:6a:d7:40:12:19:21:f9:6f:32:6b:
51:f3:4d:ea:ba:67:df:e7:f6:31:b3:af:cb:e9:03:
71:ff:c5:6f:f2:30:f2:4b:38:a4:1e:db:e0:93:61:
fc:1d:11:2c:78:a2:4a:28:87:3e:6f:80:03:50:0a:
a5:53:d0:36:c7:8b:54:74:6c:98:87:a3:ba:fa:c0:
21:03:47:ad:12:cc:65:db:b8:6c:ac:ce:68:7b:8c:
14:55:e2:d5:9c:3d:78:63:e3:09:94:ea:22:3e:ef:
8c:f0:da:cf:5a:af:d1:f3:f9:46:dd:c6:c2:d3:9f:
4e:47:7d:05:fa:5e:8f:6d:d9:e1:d1:e3:d3:c6:c8:
a7:bd:6e:6e:a5:54:49:13:2f:88:78:71:67:36:dd:
f9:2e:68:89:1b:32:46:84:86:45:ab:53:13:1e:87:
09:10:f4:05:f2:c9:47:82:3f:ec:a3:a9:62:34:aa:
52:31:07:dd:93:54:4e:e6:90:d1:a0:08:40:d1:b5:
63:98:dc:65:0e:24:83:a3:c3:64:8a:ec:76:87:ab:
de:c0:45:6a:96:d3:66:fb:6c:8c:a0:97:0c:67:95:
90:f5:8d:2e:cc:0d:ac:ba:fa:36:4d:18:8c:a2:07:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:37:7F:DC:43:13:EF:A9:B7:2F:6A:BD:DB:97:9F:99:58:09:9D:A0
X509v3 Authority Key Identifier:
keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:60:32:2c:91:30:bc:03:96:77:7f:c7:ae:9c:ba:20:a9:98:
25:33:6a:68:cf:3d:28:7c:bc:59:e1:57:07:2e:fb:a6:e1:31:
4a:d0:15:81:fd:71:bc:ee:db:dc:e1:3a:a4:a1:81:18:a8:af:
3d:50:1b:1f:c5:18:11:cd:2c:24:d6:9a:95:d6:6d:c5:52:29:
be:f8:4c:23:5b:46:f3:8f:7f:b4:35:62:b5:a3:b2:97:a2:bc:
47:32:f1:0c:59:88:c0:68:e7:73:ae:fb:b3:a6:85:ee:cc:72:
cc:59:18:41:59:76:2e:0c:bb:f9:35:b2:ec:8b:79:c6:d6:08:
03:9c:8e:ea:79:f4:36:ba:ab:57:69:0e:d4:5e:3f:8e:be:a8:
3a:a0:3a:dc:2e:9a:0a:b1:13:50:0b:d6:6f:e8:a9:e2:92:f8:
fb:94:ce:73:04:e4:90:32:56:16:c3:ba:5b:67:85:d4:c1:52:
44:2c:9c:f7:6a:5b:43:ac:05:23:17:a4:0f:fe:b5:cc:26:f3:
09:fe:cf:46:2e:7d:e1:17:ed:82:72:e8:1f:02:fe:6d:24:b9:
6d:43:15:b2:73:e7:34:a1:4b:68:c3:a4:80:f9:30:c6:68:21:
e4:08:74:3a:11:79:2c:55:57:0c:a3:e1:27:27:26:25:60:6c:
6a:f0:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:59 2026 by rpki-client