
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json)
Hash identifier: 5f5Z0rJeLgCvBlSQFX83tBsSpbRSkFFUd/39W8RnxZc=
Subject key identifier: 7D:3B:F8:5A:BA:DC:7F:9F:B8:54:41:A0:E3:C9:47:FB:EE:87:00:06
Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
Manifest number: 086B
Signing time: Thu 16 Apr 2026 20:38:09 +0000
Manifest this update: Thu 16 Apr 2026 20:38:09 +0000
Manifest next update: Thu 23 Apr 2026 20:38:09 +0000
Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: dBqC5eEvUn++hJnLCe1w8inActPLzOnBC5/GVHbPmU0=)
2: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=)
3: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=)
4: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=)
5: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl
rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
Validity
Not Before: Apr 16 20:38:09 2026 GMT
Not After : Apr 23 20:38:09 2026 GMT
Subject: CN=69e148b1-13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:e6:e9:4a:ff:1a:4b:d7:23:f4:94:9f:ac:
11:ac:be:05:dc:51:90:b8:d5:05:d4:b1:9a:66:24:
56:a4:09:21:ca:e3:cb:79:98:0b:fd:b6:5f:61:c3:
3b:26:09:d8:f5:e7:83:69:3e:a7:53:f0:4a:97:78:
56:d1:dd:3a:5a:e4:2c:bc:47:d6:b1:ea:10:33:11:
8f:8d:9a:4a:30:10:e7:1f:a5:9c:a6:8c:39:6e:93:
e8:47:85:d2:e0:fe:10:f1:da:a0:48:67:6b:c5:dc:
71:95:8e:62:f7:c7:8b:c7:b2:d9:14:53:fe:d6:d6:
b8:56:a8:58:5c:dc:44:59:66:6c:a7:bd:8b:4f:27:
ee:d3:fd:47:07:5f:0f:41:fe:c2:0e:80:ee:bd:06:
d7:07:dc:c0:62:a8:57:5e:36:1d:95:c1:45:ff:11:
e1:8b:1d:ef:46:a4:6f:d9:56:8a:62:69:46:4e:a8:
b7:26:eb:58:bb:76:4b:13:87:c5:d0:c3:0a:b7:88:
2f:1f:2e:e3:9d:8f:eb:00:36:0d:90:ee:d0:6c:50:
a8:08:4a:3d:6d:44:0b:df:0b:99:36:bc:7c:fa:de:
d9:71:9e:17:f2:25:ef:25:ec:e5:ba:cf:cf:2e:c5:
0a:d1:79:04:74:71:82:d8:b4:43:9d:08:91:3f:f2:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:F8:5A:BA:DC:7F:9F:B8:54:41:A0:E3:C9:47:FB:EE:87:00:06
X509v3 Authority Key Identifier:
keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:51:cb:68:bb:2d:8e:39:08:a2:20:0d:c5:82:d4:3a:97:
05:e1:8f:dc:5b:ac:8c:b7:77:4e:e1:87:c4:74:16:62:fe:ce:
1b:09:b2:b7:02:9d:39:50:2b:93:39:3c:b1:f4:ea:fe:ee:53:
05:5e:7b:36:fb:a5:cc:45:ba:88:ac:64:ff:86:b9:be:ab:4e:
4a:84:4a:c5:e1:41:77:10:5a:9e:60:ab:f0:b5:8c:b9:26:e5:
2a:53:ec:9a:93:12:3e:d9:e0:8f:19:76:ee:41:16:28:8a:3b:
e3:16:0b:81:79:be:5f:68:dc:5e:67:4f:93:c4:7b:40:5d:2d:
95:12:db:68:16:90:11:87:18:68:49:7b:b2:77:26:3a:e5:b3:
30:59:41:8e:9f:8a:71:26:a6:89:06:48:a7:ed:39:e2:e6:82:
7a:95:cb:b4:82:10:ea:5c:14:94:7f:f4:06:5a:42:6e:9b:4f:
1d:e7:02:8a:71:4f:aa:68:5f:dd:19:c2:97:86:57:f0:12:9c:
64:fa:da:21:73:41:8f:b4:80:0e:2f:a3:3e:7d:e8:8b:b0:be:
ff:7e:ce:15:5c:c6:f9:cb:d1:e8:a1:5a:34:b4:fa:0f:26:fa:
20:09:8f:dc:5d:23:44:4d:da:8d:ae:9c:48:62:e4:a7:a4:25:
4a:de:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:03 2026 by rpki-client