
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: mzyQFehWCfRm+I01AoOpZHqaljbYVWPHFvKgmOm//5I=
Subject key identifier: 0E:51:02:A5:E9:B5:67:D2:FE:8B:0A:FE:A6:11:25:C7:7C:33:1A:58
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 19C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19B9
Signing time: Wed 20 May 2026 16:23:00 +0000
Manifest this update: Wed 20 May 2026 16:22:59 +0000
Manifest next update: Wed 27 May 2026 16:22:59 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: OyjXdwXK30sJ9x68vDnlyYQiGcW3uF7A3MOXZGLmIEQ=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6597 (0x19c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: May 20 16:22:59 2026 GMT
Not After : May 27 16:22:59 2026 GMT
Subject: CN=6a0ddfe4-aa9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:7c:0d:e9:49:a4:08:a4:8b:05:ec:a2:28:
04:b3:55:e0:42:5b:cd:a0:f5:45:c2:85:6c:9b:13:
e9:cb:38:82:c3:40:ba:56:43:c7:49:19:a8:af:70:
9b:5c:db:3a:44:37:00:e9:f3:6c:8c:37:18:57:3d:
b6:80:09:33:27:64:cb:10:72:95:60:0d:a1:bb:56:
f3:9b:10:bf:8f:df:90:14:a4:76:c2:1d:a7:a3:32:
34:ff:0b:55:1c:bf:71:7d:03:b6:28:2b:20:37:cb:
5b:54:38:81:68:5d:68:07:31:03:86:00:72:74:d5:
0d:2c:87:2f:6f:f6:06:c6:76:5a:4e:9d:91:d4:48:
fb:70:df:b9:40:8c:e6:07:8f:88:75:98:f9:1c:36:
28:34:42:2b:1e:b5:8c:39:81:54:25:24:9e:e3:17:
41:7c:aa:65:43:e2:53:49:40:ed:2a:5a:93:4d:95:
12:7f:a3:fc:7b:86:5d:2e:91:75:c7:79:ec:0f:71:
8e:0a:46:19:12:49:35:d3:9b:b7:e5:24:df:d7:a0:
d7:15:39:84:c9:41:b6:69:58:19:84:8d:02:3b:5c:
f0:11:c1:54:c6:2c:77:1f:71:41:87:c0:1a:96:69:
4a:db:e7:63:91:2e:b8:a5:b6:3f:2d:e5:b8:5b:de:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:51:02:A5:E9:B5:67:D2:FE:8B:0A:FE:A6:11:25:C7:7C:33:1A:58
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:99:96:a8:d0:4f:e6:ea:55:76:b8:78:8d:88:82:f7:21:3b:
cb:8d:9e:77:5c:fd:af:02:fa:fa:54:d5:81:3e:b2:1a:69:7d:
39:3d:bd:69:8c:17:eb:2c:87:9e:e6:6b:a7:7b:18:16:8d:20:
f4:2a:b0:f3:ba:80:f5:90:b3:dd:88:82:ba:c9:ea:32:1b:e2:
0c:b2:f3:e9:e7:f7:09:d0:6e:1d:09:8f:da:c7:63:07:57:79:
8e:a2:6e:c8:57:73:2c:40:d5:3b:18:11:ec:ec:7e:85:5c:93:
59:c1:a5:59:27:64:d8:61:51:fc:e4:ae:b2:3d:d3:99:ed:b3:
bc:96:0f:48:3a:b6:5b:74:05:02:01:7d:f8:21:15:4c:65:e1:
e1:20:19:46:88:3a:c5:78:53:58:5e:81:27:de:a9:1f:cf:f6:
fe:2a:36:6c:7d:70:75:50:ba:d6:35:91:5f:56:39:da:d4:7e:
97:55:65:4f:56:7d:de:c0:a5:ea:fb:c7:cf:38:e5:bb:9f:96:
6e:8b:ee:61:67:a1:b2:29:91:1f:ec:74:ed:7c:4b:aa:0d:cc:
d5:18:dd:91:55:04:35:2c:2d:d4:7a:53:da:38:b2:6f:94:e8:
60:80:31:f5:a0:32:ed:24:d4:e9:81:5a:87:f2:5a:c1:e3:df:
fc:fe:65:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1
MDdCNDdDNkIwHhcNMjYwNTIwMTYyMjU5WhcNMjYwNTI3MTYyMjU5WjAYMRYwFAYD
VQQDEw02YTBkZGZlNC1hYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Kp8DelJpAikiwXsoigEs1XgQlvNoPVFwoVsmxPpyziCw0C6VkPHSRmor3Cb
XNs6RDcA6fNsjDcYVz22gAkzJ2TLEHKVYA2hu1bzmxC/j9+QFKR2wh2nozI0/wtV
HL9xfQO2KCsgN8tbVDiBaF1oBzEDhgBydNUNLIcvb/YGxnZaTp2R1Ej7cN+5QIzm
B4+IdZj5HDYoNEIrHrWMOYFUJSSe4xdBfKplQ+JTSUDtKlqTTZUSf6P8e4ZdLpF1
x3nsD3GOCkYZEkk105u35STf16DXFTmEyUG2aVgZhI0CO1zwEcFUxix3H3FBh8Aa
lmlK2+djkS64pbY/LeW4W96dFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5RAqXp
tWfS/osK/qYRJcd8MxpYMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz
REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm
R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq
eGdRdVppRnExNUZRZTBmR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVZmWqNBP5upVdrh4jYiC9yE7y42ed1z9rwL6+lTVgT6yGml9OT29aYwX6yyH
nuZrp3sYFo0g9Cqw87qA9ZCz3YiCusnqMhviDLLz6ef3CdBuHQmP2sdjB1d5jqJu
yFdzLEDVOxgR7Ox+hVyTWcGlWSdk2GFR/OSusj3Tme2zvJYPSDq2W3QFAgF9+CEV
TGXh4SAZRog6xXhTWF6BJ96pH8/2/io2bH1wdVC61jWRX1Y52tR+l1VlT1Z93sCl
6vvHzzjlu5+WbovuYWehsimRH+x07XxLqg3M1RjdkVUENSwt1HpT2jiyb5ToYIAx
9aAy7STU6YFah/JawePf/P5lOg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:22 2026 by rpki-client