
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: 6wv4+/vfpujo4YP/vWHTXIqDwDcOsbwNpaxPrKPxwXQ=
Subject key identifier: 6D:CA:21:BE:52:60:F5:2B:59:80:2F:EF:D8:B7:60:86:F3:47:33:8D
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0C4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0C37
Signing time: Fri 02 Oct 2026 19:00:47 +0000
Manifest this update: Fri 02 Oct 2026 19:00:47 +0000
Manifest next update: Fri 09 Oct 2026 19:00:47 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: eZLAcN3rMoEPius3lNlOjHOUVDX0/jOmm+kfRvD4Yv8=)
2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Oct 2 19:00:47 2026 GMT
Not After : Oct 9 19:00:47 2026 GMT
Subject: CN=6abfff5f-9ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:ac:c7:34:e6:be:02:f7:a5:10:82:d2:31:
f3:07:1e:2c:25:77:36:dd:8a:29:15:92:40:3c:1e:
e5:4c:e2:e9:fd:a1:2f:4a:cf:7a:44:8f:af:8d:e8:
ae:90:4f:d8:45:e4:33:7f:72:bf:56:9f:58:73:fa:
e2:24:07:25:db:b1:8d:29:df:c5:02:fa:9b:d6:91:
63:28:a9:e9:4c:d5:5d:4e:d1:88:3b:c4:e9:b7:fd:
80:9a:44:ff:07:c7:c7:9c:04:d3:4e:98:9d:85:d8:
50:e4:36:a5:d9:c8:9f:d3:94:3b:0f:bf:86:08:a1:
c3:c8:56:dc:5e:53:54:a5:c7:22:18:69:f9:7e:11:
af:43:f0:48:b7:94:7e:18:57:98:8b:52:1b:b7:a3:
93:e8:7f:cc:c5:3f:2e:78:6f:42:d2:59:4b:7d:73:
a9:fe:42:d7:7a:ac:31:10:6b:93:2d:4d:bf:3f:44:
cd:1d:bd:6b:53:21:d0:dc:8d:ec:5f:2d:34:dd:54:
4e:3b:bd:d8:0d:14:c6:9a:1d:c7:cf:4e:4d:af:05:
ee:74:48:72:38:ea:e9:b0:fe:7d:cd:d7:5f:f9:4a:
fe:a4:63:6f:8c:55:21:89:9d:22:4d:90:9b:0a:47:
e9:e0:2e:52:37:e4:66:11:84:7a:2f:eb:49:78:51:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:21:BE:52:60:F5:2B:59:80:2F:EF:D8:B7:60:86:F3:47:33:8D
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1d:f8:c3:71:39:91:59:72:66:92:49:67:5f:d6:7c:2a:5a:
49:57:de:32:6c:8d:3e:a1:91:1b:2f:d8:1e:a8:41:97:d7:ad:
f3:fd:9b:9d:90:d1:83:a3:25:cf:04:2f:5e:9d:5f:f3:04:b4:
b1:79:05:f5:bb:0c:ab:cc:11:89:76:c6:81:b5:ba:c8:ca:74:
a2:e3:7e:33:e7:e2:db:e0:ea:61:b7:f7:d9:b8:80:96:4a:ea:
c9:3d:c8:e7:df:5a:fe:eb:ba:c8:60:85:63:37:be:f7:e3:a5:
b6:46:5e:07:8b:db:be:a8:3d:c7:7f:53:97:81:0c:d0:28:54:
d1:2c:01:f4:55:f1:8b:79:68:34:16:7f:d5:6a:7a:8b:07:87:
9d:24:6e:b8:f9:1a:02:5d:fa:ff:e3:2a:3f:49:b1:bb:2f:ab:
78:77:61:0b:05:d1:7c:32:a1:8b:e6:35:41:2c:18:5d:c8:de:
64:78:00:21:bb:b1:bd:05:ac:f9:57:83:20:07:32:20:f3:49:
ed:55:2c:0c:df:09:05:8f:09:2c:74:ae:d4:3e:9c:16:1b:05:
63:30:70:ac:c0:cf:29:81:08:bc:fe:c3:82:2a:1b:98:3f:b7:
85:c9:58:99:4e:de:63:ee:f1:8e:35:d9:ce:5d:2f:0d:2a:cc:
b8:39:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:11:47 2026 by rpki-client