
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier: NmQyrIsLBZqsaKLTFKO46KJIT1V6a42lM1/EdU6D+U4=
Subject key identifier: EE:C9:3F:9D:8B:C6:CC:15:CA:07:B8:AC:F7:99:E2:BA:E1:3B:B1:FC
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number: 48F9
Signing time: Wed 17 Jun 2026 01:19:56 +0000
Manifest this update: Wed 17 Jun 2026 01:19:55 +0000
Manifest next update: Wed 24 Jun 2026 01:19:55 +0000
Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: yNkOY4PlQUD6FHUCNMX4Zrd6aadCzcDbIv3xJh3sSCo=)
2: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=)
3: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=)
4: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=)
5: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=)
6: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=)
7: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=)
8: 2DE2AC2669E311F18E29D967A047A888.roa (hash: FXkhpuzHLKYK1MxgK0HuTpu2VmPbFJh1f+OCxLZjwRY=)
9: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=)
10: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=)
11: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32349 (0x7e5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Jun 17 01:19:55 2026 GMT
Not After : Jun 24 01:19:55 2026 GMT
Subject: CN=6a31f63c-86f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:bd:92:1c:d2:a2:71:a4:62:2c:99:11:82:
dd:af:0c:2a:d8:d0:e8:4e:73:b9:5d:42:8e:6a:29:
9d:64:d9:43:b1:aa:76:fe:9d:af:a2:b0:b4:75:57:
aa:cb:04:a2:fa:9c:ee:7a:dd:ce:cb:48:de:eb:d1:
28:f8:48:da:34:b4:e2:80:32:37:c1:26:27:1c:c7:
be:a2:c2:0f:3f:f8:0c:54:9b:7e:e5:39:3a:3a:94:
ad:cc:a3:a6:99:bb:a5:dd:31:4b:7b:c8:25:81:9e:
0f:8c:b4:f5:6c:15:ad:7d:5a:53:be:34:75:e2:b4:
80:80:e8:c4:7a:c3:34:d3:8e:3e:bc:69:8b:45:a2:
58:4c:c6:5c:f1:69:23:93:83:19:aa:55:ac:bf:cb:
da:32:7e:ae:0a:0b:01:57:50:73:df:c7:c8:ff:a8:
df:9c:2f:bc:8a:da:2c:5b:27:9c:ee:ba:c3:99:e4:
04:f5:6c:8a:a4:24:91:ca:a4:c2:9f:09:84:52:8f:
1e:a6:7b:49:4f:95:c8:c6:33:a5:27:cb:9b:95:fe:
bb:0d:95:3d:f4:4e:34:76:4e:08:56:53:63:2a:62:
f3:02:82:a9:8b:11:d0:2a:26:e6:ef:e5:0c:a5:ed:
fb:b4:a0:e0:c3:23:d0:a8:1d:d1:73:45:79:a3:85:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:3F:9D:8B:C6:CC:15:CA:07:B8:AC:F7:99:E2:BA:E1:3B:B1:FC
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:ba:ac:05:23:c1:0f:5a:c5:b3:d7:70:bb:f2:97:1c:ca:
d4:66:7a:ae:61:86:b7:8c:6c:a4:09:d3:d3:67:e1:80:e6:89:
00:dd:65:a7:52:4c:6b:8a:38:38:3a:65:7c:57:3c:9e:18:ac:
7e:db:48:9a:0e:22:f3:ac:f1:50:06:63:85:47:55:bd:94:80:
1f:48:ab:80:ee:94:d7:4a:d7:1a:89:f2:06:01:d1:79:48:55:
73:fe:50:b0:a2:46:d9:be:93:73:80:3f:1a:c3:a4:48:94:aa:
40:e8:cd:df:09:85:6e:b3:2d:bd:9b:18:87:85:fa:87:09:f4:
a8:95:76:cb:c0:57:42:bd:03:0a:97:09:6e:5a:03:1d:82:04:
a0:bb:60:be:0b:0f:40:49:28:c3:1a:ca:84:1c:b3:45:d8:be:
dc:56:4e:a9:70:73:81:f5:3f:f8:c0:0f:27:8c:12:33:d6:3c:
71:c2:10:b7:17:6c:f1:a2:98:36:22:97:78:7f:bc:28:48:09:
97:fa:f6:23:a7:03:1f:af:0a:8b:2a:db:f2:83:fc:a1:aa:c5:
2f:da:df:7c:e3:b5:b9:f0:8d:f5:e9:15:dd:f6:92:18:81:42:
ea:58:1c:c1:22:34:91:a8:5c:8d:7b:00:3e:16:ac:98:11:45:
4c:92:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:11 2026 by rpki-client