
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: m/0fsWnqYfgwu4lelSvYwBHXnF9SSqudlw9VtBM/7BE=
Subject key identifier: A9:B0:77:20:E4:35:AD:A2:37:69:71:E1:6E:A8:9C:18:AE:20:3B:FF
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 19AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19A2
Signing time: Sat 04 Apr 2026 16:18:11 +0000
Manifest this update: Sat 04 Apr 2026 16:18:11 +0000
Manifest next update: Sat 11 Apr 2026 16:18:11 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: 5BntSw1a8XXQeCIUCjyOLh6VKOM8GiEJWJnDhdtPeQQ=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6574 (0x19ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Apr 4 16:18:11 2026 GMT
Not After : Apr 11 16:18:11 2026 GMT
Subject: CN=69d139c3-ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:13:af:e6:48:97:c8:c8:18:99:8a:e5:13:
42:12:60:cc:3d:a1:a2:50:aa:f5:7d:67:cb:f0:6d:
e1:41:c0:c5:52:6f:73:ee:8e:ac:62:cd:f5:e3:e0:
65:be:9e:02:07:17:dc:bc:2d:72:4c:59:12:85:9e:
73:01:f5:c2:87:b7:70:5a:a9:58:0a:1c:16:99:bb:
ef:c5:70:e0:27:80:06:9d:cd:78:f0:f5:d0:29:fc:
10:83:bc:80:96:5c:ee:38:04:73:d1:c0:0f:fc:86:
8f:9a:83:2a:9e:b6:56:57:6b:03:d2:97:39:f8:de:
f8:46:16:f4:64:3e:c0:48:a8:e7:1c:40:e3:6b:de:
09:74:7e:8d:09:b5:0c:e0:3b:f2:7b:8f:2c:9d:f1:
43:82:0d:fa:a3:fc:25:97:59:2a:dd:6e:4f:db:75:
e5:ce:c0:82:36:14:47:9b:b6:4c:89:85:f0:e4:63:
fa:1a:a0:9a:a2:56:fb:55:c4:88:eb:7a:55:77:31:
4a:6a:18:38:55:78:6b:61:e3:27:f6:97:bb:78:f1:
a9:0e:3d:5c:01:f4:54:88:41:b9:eb:08:4d:68:9a:
67:1d:d9:ad:51:59:b8:3f:f9:38:52:ac:69:d4:1b:
58:fd:54:65:9b:b1:59:ca:cc:d0:20:fe:89:53:46:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:77:20:E4:35:AD:A2:37:69:71:E1:6E:A8:9C:18:AE:20:3B:FF
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a2:72:b7:01:e4:ef:61:4b:44:db:ae:9f:9e:93:bb:6d:3f:
e6:6e:a6:e6:64:74:11:55:37:4e:a9:89:07:2e:bf:4a:7a:8c:
29:69:48:23:75:9b:dc:e2:18:c3:66:29:b3:fd:bd:00:40:e9:
47:9b:bb:a0:75:6a:c2:d6:73:e6:e3:2e:39:48:ab:9d:48:03:
13:03:9d:32:bd:06:9d:5d:9e:cb:c2:b5:d3:14:e5:2e:e4:1e:
9f:e2:b1:54:53:74:9e:98:bb:ee:df:df:1c:3c:84:a2:19:0b:
78:a5:16:95:47:40:f1:cb:f0:a2:ee:fa:67:9b:e4:97:a0:53:
0e:59:31:6b:26:73:15:a8:44:a8:08:7f:27:ee:aa:a5:42:af:
98:39:dc:4b:31:82:45:36:ae:72:f6:9b:45:d6:81:53:e7:8a:
37:56:7c:55:8f:44:3e:3a:b1:eb:38:e7:a0:77:53:f8:84:e4:
56:c9:37:09:97:9a:f3:6b:04:61:01:a1:1c:43:b0:40:a4:8e:
70:c4:6a:87:98:49:fa:9e:63:d3:d4:a5:67:bd:ed:34:f4:3a:
7f:ba:80:20:ab:15:93:4c:7b:61:60:c6:8e:8f:13:a3:0f:3e:
e9:f3:65:f5:d4:cb:19:25:53:d9:e4:cd:80:95:ea:b2:26:d4:
83:4d:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:06 2026 by rpki-client