
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier: C4N9SazcK5PvGmajAHV+jxWip2YFoNMC2MHZB2pEKoM=
Subject key identifier: F0:8E:AE:4E:4A:98:D0:15:63:C7:EC:25:CB:AA:CC:37:52:CB:16:BD
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number: BF
Signing time: Mon 01 Jun 2026 07:43:10 +0000
Manifest this update: Mon 01 Jun 2026 07:43:09 +0000
Manifest next update: Mon 08 Jun 2026 07:43:09 +0000
Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: bQpYPtgiyr4d1KEpaqg3IJqke6/K6glcgCDXtBDknPo=)
2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: Jun 1 07:43:09 2026 GMT
Not After : Jun 8 07:43:09 2026 GMT
Subject: CN=6a1d380e-5a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:52:f0:54:c0:72:30:6a:20:ab:fe:cc:05:
8c:1f:f5:7d:d0:43:c4:df:eb:c6:7b:f2:3a:5f:85:
0d:7a:c2:c8:c7:88:3b:eb:cf:c9:fc:f4:e8:a5:c1:
b3:fb:eb:a1:a8:c6:f6:0e:cc:d3:4a:36:70:38:e2:
2c:76:99:e0:51:3b:46:45:82:62:48:14:40:8a:2a:
af:8e:4a:3b:2a:f8:13:fd:92:38:ab:00:6a:e8:3b:
11:e7:42:16:62:cf:8c:04:a6:4c:5c:2a:78:11:32:
fb:68:ef:a3:72:1b:e7:46:87:fd:6f:a1:44:df:53:
2d:06:86:8a:df:a8:05:c4:4a:78:15:7f:75:bb:30:
c7:da:ee:a4:c9:eb:2f:50:8e:8f:e6:d1:c6:74:87:
96:a1:ef:53:df:a7:5d:bc:17:25:98:9a:89:74:9e:
71:c8:7d:3d:0c:1f:01:8a:eb:64:6b:7d:7a:d7:2e:
47:44:cc:7a:77:ca:eb:bd:44:4d:ee:77:eb:40:7d:
3f:31:ab:f6:01:c9:af:aa:9d:23:3d:d3:2d:15:9f:
1d:f0:c4:a7:10:9f:7b:87:27:48:00:38:00:d8:b9:
08:3a:cd:1b:57:28:0d:18:60:67:d5:c5:4b:1b:90:
20:cf:48:d8:c2:96:cf:46:a5:a1:66:85:8f:83:56:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:AE:4E:4A:98:D0:15:63:C7:EC:25:CB:AA:CC:37:52:CB:16:BD
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d9:de:9f:14:44:44:7e:38:e2:56:32:39:5a:78:78:75:1a:
ad:14:17:2c:1e:e5:ba:2b:d0:ce:a5:f7:a6:79:98:b5:8d:51:
ae:cd:cc:58:59:00:92:a4:3b:56:6a:9f:63:c6:1e:0a:7d:da:
76:49:6d:58:44:90:f4:8b:6d:08:69:b7:83:e1:69:6d:3a:d4:
f7:49:c7:94:ad:cc:cd:7e:7a:78:81:ea:e7:e6:c0:ff:ae:f6:
ca:5e:12:8b:f8:b2:66:f1:c3:4c:ae:77:21:d2:9e:db:19:37:
32:5b:89:02:d2:b8:76:a7:01:58:a3:14:9f:96:c3:01:80:58:
94:7e:c8:78:80:dd:9f:59:b5:d9:53:29:e5:66:08:07:71:fb:
eb:f1:b6:e0:75:a5:64:ff:23:dc:5f:66:ce:02:c9:1d:16:fd:
14:04:22:7b:fb:aa:d2:e6:b9:04:3a:d8:5b:22:a8:3d:c8:6e:
af:c8:23:29:f6:98:ee:fc:da:c3:b9:40:fe:ed:16:2a:f5:3a:
6b:a2:d0:f9:99:93:c6:c3:0d:c4:0a:d6:f9:96:33:72:97:d8:
7c:e7:7e:3d:aa:df:9e:70:dd:9c:de:5c:f9:d5:f0:70:4f:10:
e0:65:d6:d8:1c:9e:83:2e:75:ae:9a:6a:c7:3e:6c:af:3c:ae:
9c:b8:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client