
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier: nRJ1z1dB30ay9lhczBJeE7AUOcejpBW2Cj8SxHXKIyE=
Subject key identifier: 5D:9F:35:0B:36:C1:0E:65:7A:F6:57:D4:24:66:9C:77:E9:33:54:75
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number: 48D8
Signing time: Thu 16 Apr 2026 16:53:07 +0000
Manifest this update: Thu 16 Apr 2026 16:53:07 +0000
Manifest next update: Thu 23 Apr 2026 16:53:07 +0000
Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: PH5pcXvO4/+P+aPB77asMH28HYABNQgr2wyW8vtEfBI=)
2: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: Eb6UizvbKiSswSpr6ZBFwyh776VEliLHzpERT3ICSBc=)
3: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: VkVnfC34JR/811jGxsrew1RM+A9tRAb0W7MV3qismys=)
4: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA=)
5: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: zWNp9ZaOgBHA/svnObyrHOTGUNlUERNOeU1v6+YaWVk=)
6: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: q55DPuVw7xXsN2vhIQXjs1ntUwBZ/QUMetD5PESujBQ=)
7: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: 7dKmy2mjbAxCYpKx0eIzsPAsDYtYgWcb4xJo9UcXggE=)
8: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: Yx4RUg6/Ps1F9WLGKmkBr2vKf8cXWNrcddyAVaGBT3o=)
9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: xl2kGNtF5y2G5owSCgIil5S6mDXwvwxCSh7vN6+5yO0=)
10: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: huYEy1OShMTnG6Dv6GIF3b8s4DVf7PGptyUFZSE3GKg=)
11: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32315 (0x7e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Apr 16 16:53:07 2026 GMT
Not After : Apr 23 16:53:07 2026 GMT
Subject: CN=69e113f3-d773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:56:92:1e:e3:88:ea:eb:81:0d:d6:63:f8:
ab:58:23:7c:aa:00:c3:d8:51:d2:4a:d9:b4:61:e7:
b2:39:5f:6b:56:50:69:b1:ab:0e:1e:20:42:61:50:
ba:8e:c9:73:6e:fa:e0:09:ed:70:18:3f:b8:27:5b:
8b:6d:cb:cf:4f:69:ec:a1:ce:f3:cb:1f:d1:f0:a5:
1e:c1:bf:c5:0e:bd:2e:97:fc:ed:d3:d4:d9:13:b7:
23:26:3a:87:08:31:ea:e2:7b:1e:79:23:63:4b:3e:
b8:99:db:2c:2f:b8:a5:fd:00:69:86:9e:94:f4:97:
ba:fc:ee:5a:a9:82:b6:df:9c:aa:cf:61:70:1f:e1:
dd:e2:06:4b:b9:0f:d8:77:8f:0b:5e:63:d3:a4:86:
06:ea:26:5e:a1:55:e1:e2:f7:ea:a3:60:fd:0f:13:
9c:7a:76:14:43:11:b8:ca:4f:5a:e6:7a:9f:13:99:
14:33:8e:c0:94:de:a8:4a:c6:bc:29:2f:11:96:70:
c5:e7:11:ce:53:3d:2b:99:ab:52:25:ef:f8:22:59:
56:96:3c:75:30:97:d9:2a:e3:90:9c:cf:02:70:dc:
fa:bb:dd:f4:b9:46:e4:9d:30:2e:e2:b4:66:67:5d:
91:e2:e3:65:79:6a:be:91:28:fb:25:ba:fe:a6:2a:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9F:35:0B:36:C1:0E:65:7A:F6:57:D4:24:66:9C:77:E9:33:54:75
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:66:6f:89:e8:01:25:95:18:56:f5:c3:56:60:7e:90:af:
a9:b8:8d:32:5f:d3:d0:f4:82:ef:d6:cd:bc:d4:c1:d0:08:1a:
68:c3:e9:ba:b2:62:a2:ed:d3:28:66:8a:10:f7:da:e2:50:93:
10:73:4a:2f:17:af:8a:f6:1a:f0:0e:e0:dc:cb:43:ca:4e:85:
dc:32:d5:97:9c:3d:93:9c:2c:cf:2e:94:e0:78:7d:2f:c5:37:
e1:34:fd:22:48:88:1e:f5:98:3f:df:1f:19:4c:5a:3d:f0:44:
6b:56:6b:8e:ae:b3:cd:a4:1f:a1:0a:95:91:8f:11:19:fb:6a:
fb:60:a3:c6:c2:f1:7f:c5:00:8b:ad:30:b7:f3:0d:b2:8e:e4:
c2:f1:0f:45:8b:5a:b7:71:11:93:58:67:92:19:e5:89:50:d2:
21:01:36:56:41:ec:7e:c6:f9:78:9a:70:c2:d6:68:ac:ed:16:
9a:aa:45:ab:68:38:72:42:89:83:73:6a:0f:f9:1e:48:f8:ad:
48:89:e1:08:8f:77:3a:26:a7:1e:7a:40:9f:6e:bc:2b:d3:f6:
d7:eb:13:93:51:f4:2e:c1:a9:2a:0b:60:2a:48:a2:7b:ac:11:
70:16:29:74:f7:73:ce:0c:26:53:43:1d:e3:0d:7f:ab:2a:1c:
f5:35:29:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICfjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1
Nzg5MjExMDAwHhcNMjYwNDE2MTY1MzA3WhcNMjYwNDIzMTY1MzA3WjAYMRYwFAYD
VQQDEw02OWUxMTNmMy1kNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKhWkh7jiOrrgQ3WY/irWCN8qgDD2FHSStm0YeeyOV9rVlBpsasOHiBCYVC6
jslzbvrgCe1wGD+4J1uLbcvPT2nsoc7zyx/R8KUewb/FDr0ul/zt09TZE7cjJjqH
CDHq4nseeSNjSz64mdssL7il/QBphp6U9Je6/O5aqYK235yqz2FwH+Hd4gZLuQ/Y
d48LXmPTpIYG6iZeoVXh4vfqo2D9DxOcenYUQxG4yk9a5nqfE5kUM47AlN6oSsa8
KS8RlnDF5xHOUz0rmatSJe/4IllWljx1MJfZKuOQnM8CcNz6u930uUbknTAu4rRm
Z12R4uNleWq+kSj7Jbr+piraqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2fNQs2
wQ5levZX1CRmnHfpM1R1MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD
OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC
Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASttmb4noASWVGFb1w1ZgfpCvqbiNMl/T0PSC79bNvNTB0AgaaMPpurJiou3T
KGaKEPfa4lCTEHNKLxevivYa8A7g3MtDyk6F3DLVl5w9k5wszy6U4Hh9L8U34TT9
IkiIHvWYP98fGUxaPfBEa1Zrjq6zzaQfoQqVkY8RGftq+2CjxsLxf8UAi60wt/MN
so7kwvEPRYtat3ERk1hnkhnliVDSIQE2VkHsfsb5eJpwwtZorO0WmqpFq2g4ckKJ
g3NqD/keSPitSInhCI93OianHnpAn268K9P21+sTk1H0LsGpKgtgKkiie6wRcBYp
dPdzzgwmU0Md4w1/qyoc9TUpHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:27 2026 by rpki-client