
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: b5Zc7YWB7DvGa96IXNAaYw7+/4N5DJV/iFC+iRyBJH8=
Subject key identifier: AF:33:5E:05:1D:9B:8B:7A:6A:BF:EE:04:A3:02:8D:15:28:30:42:4E
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0C31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0C1E
Signing time: Fri 14 Aug 2026 18:50:43 +0000
Manifest this update: Fri 14 Aug 2026 18:50:43 +0000
Manifest next update: Fri 21 Aug 2026 18:50:43 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: 3n7BUIu0HaUyfoY0rbXTFXLe03IOndVFeZf5Nzd2Jjg=)
2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 18:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Aug 14 18:50:43 2026 GMT
Not After : Aug 21 18:50:43 2026 GMT
Subject: CN=6a7f6383-6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:66:c9:67:1f:d8:13:7b:c9:f4:6a:59:74:
6f:60:bd:59:9c:e8:a8:cd:72:6b:94:da:52:42:c0:
70:b2:9f:10:0a:45:e5:32:12:ef:42:4e:c1:4b:8a:
57:9f:48:bf:de:59:c3:f2:e6:7c:95:f0:aa:71:6c:
78:fe:b5:bc:4e:ef:b2:85:ee:04:72:68:da:db:43:
75:7b:b5:6e:fe:ad:e8:f0:35:e2:67:a8:50:21:c3:
cd:db:f8:b3:e2:b3:c2:db:bd:96:82:79:d2:29:d3:
33:a9:ce:d3:af:0f:15:5d:7c:74:f3:7c:19:7a:df:
7e:39:5a:02:69:26:3f:40:a9:f6:59:48:fb:99:95:
21:7a:2c:1d:50:ee:b9:03:01:1b:eb:88:97:47:3a:
73:21:01:ff:2f:ea:2d:f3:3a:98:14:b3:ca:17:45:
62:5b:8f:04:91:33:b8:e5:06:4a:4c:d0:b6:fa:e5:
36:d6:b3:37:6f:c6:5d:0c:ab:48:6e:69:78:25:45:
a9:66:6f:a0:9c:ec:61:65:db:8b:10:4a:e5:c7:96:
c9:03:d1:42:86:e9:42:f6:42:80:61:e0:bb:f6:35:
d4:e4:75:e1:3b:7d:7a:9f:97:bd:43:79:9d:90:e3:
b3:6b:46:8e:56:a1:95:f9:15:f2:b0:e7:3c:a8:53:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:5E:05:1D:9B:8B:7A:6A:BF:EE:04:A3:02:8D:15:28:30:42:4E
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:3e:f6:d6:45:15:ca:32:aa:8f:f7:90:7e:1b:43:5c:71:
5e:47:d5:71:4b:32:a1:1f:cb:17:92:74:f9:cb:6b:a8:c1:6a:
7c:a7:b6:34:15:4a:c7:7b:c5:f6:64:0c:2a:29:f6:12:3b:42:
5f:24:d9:5b:20:c7:15:b8:65:16:5f:06:86:00:8f:b9:12:56:
fb:d0:c8:e7:32:33:01:50:42:5b:1e:4c:74:6e:64:c0:c2:04:
5c:58:7e:79:8d:ca:72:f1:ec:c6:df:10:b0:e1:bc:5f:90:25:
36:43:5c:48:4c:99:2d:5a:8c:28:91:db:63:31:c9:e5:46:d9:
b6:bf:1f:5b:3e:33:a8:b6:f6:84:5b:07:95:3e:28:be:a2:63:
30:53:41:51:e8:84:b0:7b:90:79:eb:51:78:38:35:6a:2a:df:
63:cf:f6:2c:5b:ee:05:f5:b2:9e:e3:a3:23:8d:fa:2c:68:8c:
26:da:b9:d4:77:26:c0:dc:3a:5b:9b:8d:ec:42:23:a2:c6:68:
b5:0c:45:e1:be:13:fa:8c:5e:08:c2:1f:d6:fc:38:60:10:a9:
c4:a2:72:d5:bd:76:a3:d1:e1:9a:cc:68:1a:28:53:5b:0b:e9:
08:ad:17:66:22:97:64:40:0f:4f:f6:8b:72:61:d5:a5:05:31:
8a:b0:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:04 2026 by rpki-client