
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier: R64o1Cms3c0BhK01r58CjTi7VlTFi6IIcyLjYdVEdPM=
Subject key identifier: AA:13:10:50:94:BB:63:65:9F:74:AF:6C:FB:56:12:E7:72:B3:33:23
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer: /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number: 28
Signing time: Fri 17 Apr 2026 08:33:28 +0000
Manifest this update: Fri 17 Apr 2026 08:33:27 +0000
Manifest next update: Fri 24 Apr 2026 08:33:27 +0000
Files and hashes: 1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: 7qqq+Zm9N45ZH893QJYAs3cdzqyMwoF9vDPnT7C1phc=)
2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Validity
Not Before: Apr 17 08:33:27 2026 GMT
Not After : Apr 24 08:33:27 2026 GMT
Subject: CN=69e1f058-ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:da:92:89:5d:c6:07:77:e2:e7:08:12:63:33:
f2:e4:45:02:a9:52:1e:9c:b0:67:65:6c:02:3e:d3:
82:37:45:cb:1f:35:f6:fb:50:fd:a4:fe:72:c0:f5:
47:48:68:44:a5:f2:b9:b8:c9:15:90:a2:a9:d6:13:
f5:06:0e:90:0e:75:c4:10:0c:e0:2c:1b:8b:73:8e:
c3:8d:f8:9a:5b:1b:ad:e9:f5:d6:b1:b2:f2:7b:d6:
39:43:ee:84:a7:de:84:65:2b:8f:41:2c:ca:03:62:
ef:a3:62:00:4f:3d:17:56:f1:8f:34:cf:13:49:a8:
ea:d5:ff:76:d0:5b:08:ac:c5:40:01:e1:04:b3:1e:
d6:9d:74:c2:c9:32:af:fc:fe:d8:29:bd:db:34:8c:
44:07:2a:06:d6:3f:7f:3b:ba:94:6e:dd:49:df:05:
ec:0f:d0:1d:25:fd:dc:ae:a8:0a:d2:4d:45:6f:37:
be:60:fb:9c:a6:a6:f8:a8:23:6c:93:60:f0:f0:b4:
e1:58:70:1e:60:fb:f0:19:a9:88:da:21:e7:cd:0d:
f7:c5:46:31:c2:c2:1d:ef:34:24:66:61:1b:ed:a5:
be:80:29:ab:3d:af:f2:72:1c:41:b4:a3:c8:ed:bb:
2f:cd:dd:05:ad:21:40:7b:61:7b:78:db:ed:47:14:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:13:10:50:94:BB:63:65:9F:74:AF:6C:FB:56:12:E7:72:B3:33:23
X509v3 Authority Key Identifier:
keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:46:0e:c4:22:dd:45:f6:b5:2e:35:2f:9e:f6:15:c4:67:2a:
19:be:b0:6b:56:05:15:9f:6a:e6:e2:35:f3:59:0d:4f:40:42:
eb:95:a5:7f:1a:de:10:70:20:50:8a:a7:4b:b8:60:8e:23:91:
12:05:c8:7e:fe:99:55:78:0e:f3:aa:b6:48:8d:d6:c6:d8:e3:
d7:69:ca:f5:fe:25:b4:92:fd:b1:91:38:18:a1:2e:86:b7:69:
25:ec:ca:dc:ab:f3:9c:27:6d:8e:8f:3e:c4:a9:57:e9:0d:4f:
95:ff:d5:b8:d7:56:84:9f:83:0c:23:4b:56:98:56:b1:49:3b:
21:7f:36:8a:4d:04:21:5e:a1:3b:a7:53:04:d5:40:58:ad:87:
9f:a6:c7:ca:a6:8d:4d:40:e3:ab:6e:72:db:0b:d3:66:45:29:
d9:09:e0:a5:dd:b0:c6:2c:b2:8d:5c:cd:c4:83:c1:d9:94:22:
24:f6:81:1d:e5:8f:77:ed:6b:6f:ca:55:9b:2f:9f:5c:24:75:
a1:50:c1:71:95:ec:82:5c:be:c2:73:70:d1:9e:ca:c9:7b:7a:
ea:eb:93:fb:9c:da:67:60:95:c1:fa:75:a0:e8:31:fb:f5:91:
1b:6c:c9:b7:18:17:8b:ed:27:38:e2:b6:60:20:15:22:8f:a9:
8f:f7:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:49 2026 by rpki-client