
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json)
Hash identifier: XOw6jqdlAIedyFg6wJxh+caEntlxR+/PuRdQrYFRDKI=
Subject key identifier: 6B:79:09:7C:46:6D:D1:F0:74:1D:A2:12:05:47:D7:25:17:32:BA:76
Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Certificate serial: 0903
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
Manifest number: 18A1
Signing time: Thu 16 Apr 2026 17:26:32 +0000
Manifest this update: Thu 16 Apr 2026 17:26:31 +0000
Manifest next update: Thu 23 Apr 2026 17:26:31 +0000
Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: WSqPVbmFXwopfTUO7RHeLeMHopluRoKcEzwz22TYAVg=)
2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: MxyzD6uP6BV8vVRqDcKdMO9gZ3aEGm0a3vLNIBFA74A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Validity
Not Before: Apr 16 17:26:31 2026 GMT
Not After : Apr 23 17:26:31 2026 GMT
Subject: CN=69e11bc7-2f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:e2:b5:09:ad:f8:b0:69:4b:d0:a7:b4:1e:
04:ae:32:10:01:bb:3f:fb:2b:e2:85:18:dd:40:cf:
7d:17:d8:e3:02:b7:a7:30:05:1a:2a:96:5f:e5:88:
ca:71:15:7d:47:4c:7a:df:e2:a8:46:7d:70:3e:f9:
e3:d5:62:2f:29:95:ba:0e:a6:94:4b:fb:24:10:04:
a3:e3:5b:c6:5f:58:1c:bd:8a:89:d1:8a:54:08:5e:
88:2b:1f:98:bf:87:a7:10:80:49:48:34:c6:ac:44:
c8:09:44:fb:e3:ec:cb:88:b8:86:9c:a5:a8:3b:05:
8c:84:03:cb:e1:6a:9f:41:87:2e:6e:c8:a8:b3:e6:
6c:01:60:08:3d:bf:5d:11:a6:76:4b:8e:27:61:35:
19:ec:99:21:61:37:f4:93:70:83:c9:bc:a7:b5:5b:
ab:75:a4:06:db:95:72:c3:6b:68:79:b8:f6:95:54:
63:2a:c5:c4:e2:6c:c4:0c:5e:55:84:d0:40:5e:44:
d5:2b:6c:37:79:49:e5:4b:54:74:8c:76:06:1f:f8:
47:9b:d0:1a:dd:44:7f:70:d8:c2:f5:fe:31:3c:60:
90:da:eb:75:76:58:b8:43:2c:68:24:b6:e6:12:86:
65:d2:69:c5:f3:25:48:b9:09:90:3b:6f:c4:bd:1c:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:09:7C:46:6D:D1:F0:74:1D:A2:12:05:47:D7:25:17:32:BA:76
X509v3 Authority Key Identifier:
keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3b:24:06:7d:08:90:80:81:25:82:02:6e:a4:0d:8a:28:d3:
57:e9:9d:10:e6:b9:56:4d:cd:21:85:2f:cd:f9:1a:6c:20:d5:
d2:37:86:b3:c5:97:d0:d2:91:14:91:84:5e:e5:32:a0:8e:18:
62:2e:cd:4f:6f:0e:97:ef:d2:f1:b2:09:60:86:d9:03:f2:c7:
46:ee:5b:b9:52:ed:29:c9:d3:19:7e:97:4b:b8:f6:3e:da:7b:
40:60:09:10:db:f7:89:ce:c8:14:44:07:46:a3:cf:ba:cc:0e:
d2:fb:3e:32:a4:f8:9a:d1:69:6f:45:6a:c6:13:9a:03:82:89:
c8:5c:6f:cb:0f:22:82:42:dc:15:68:2c:30:b5:24:49:ae:ba:
50:3c:df:00:8e:3d:c4:d5:14:bf:cb:29:90:cd:7f:2c:b3:cd:
e6:ac:70:97:cc:8d:0e:32:eb:bf:dc:23:9b:5b:8f:3f:2b:c5:
45:3f:85:7a:e6:1d:11:11:e5:b8:5f:a7:a0:f2:a7:60:55:24:
b4:14:05:7d:9d:35:08:3f:2e:80:33:ec:23:ec:c0:d7:4a:d1:
1c:cc:d7:ec:c8:2a:55:ab:9f:f0:4d:f1:9a:c6:44:f6:38:81:
9d:5e:57:ad:d9:a3:15:e6:84:fd:16:81:59:37:c1:28:9f:c9:
9d:06:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:11 2026 by rpki-client