
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier: L9+verSa1mrMuS8Mw72MX4+jvjiORxzWq8n75f+qSIA=
Subject key identifier: 3E:6C:97:13:B1:C9:C1:48:2E:54:BD:0D:86:DC:65:4B:CF:1A:AA:B2
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 04CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number: 049D
Signing time: Thu 16 Apr 2026 23:56:14 +0000
Manifest this update: Thu 16 Apr 2026 23:56:14 +0000
Manifest next update: Thu 23 Apr 2026 23:56:14 +0000
Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: wJ1nWm+fjLllPbe713+kcqQFDW0da9rhCXMnKDmI3+I=)
2: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
3: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
4: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Apr 16 23:56:14 2026 GMT
Not After : Apr 23 23:56:14 2026 GMT
Subject: CN=69e1771e-6026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:79:a4:8c:9e:d0:ce:31:7a:bc:a3:2a:63:
bf:62:d5:17:82:b2:87:36:fd:55:93:fb:3e:4c:8d:
35:19:01:1d:a1:b7:be:25:50:1c:85:44:e9:5b:38:
36:58:7d:68:db:91:3a:3c:ed:e5:ea:ea:19:48:35:
5b:fe:f3:2a:cf:d8:6e:da:12:a7:2a:9f:87:0c:07:
41:a8:06:7f:07:58:8d:35:8d:9d:f6:79:73:a6:71:
69:58:db:60:9d:a7:65:1b:59:90:d9:ee:51:fe:25:
cf:d5:b5:39:1e:35:08:f6:77:ec:f1:7d:83:18:b7:
b8:c2:a4:f4:27:48:81:9b:29:3d:67:73:3a:bf:81:
94:d1:0b:22:80:bd:b5:ca:3c:1c:8d:81:db:da:20:
91:13:00:78:51:d6:c5:20:97:ec:3c:44:30:0f:3d:
8d:c4:9e:e9:3c:ee:cf:7f:3b:30:af:c9:ec:4c:34:
7f:71:44:a5:a1:c0:06:b0:97:8a:3a:74:f9:e6:65:
6b:7d:bb:5a:f3:0f:39:35:24:c0:27:52:79:e1:40:
3e:17:c2:ed:e3:c4:c6:6f:51:b8:82:b2:36:2c:4e:
b3:95:b9:7b:9c:0c:9c:68:9a:94:ea:32:34:2a:87:
53:c9:d0:98:fa:b0:aa:c7:81:7b:68:cd:7a:40:d9:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:97:13:B1:C9:C1:48:2E:54:BD:0D:86:DC:65:4B:CF:1A:AA:B2
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:57:cd:98:a4:6b:b4:fe:f3:f5:32:bd:51:75:df:c8:2a:
a4:cd:85:54:52:d1:8f:c8:e2:db:ba:22:38:ad:88:76:a6:62:
e7:b4:75:a3:8b:3c:07:91:a3:75:22:e3:80:32:43:ea:95:d1:
60:03:4e:d3:ba:a4:09:4a:88:c6:42:f1:56:f6:95:0b:b6:d1:
e7:ab:1e:01:78:33:8a:a5:e2:4d:da:d0:46:b9:0a:af:5a:54:
b1:0c:6d:7d:61:2b:85:5a:81:6e:cb:d6:66:88:4d:5d:4a:00:
40:55:9a:ac:56:4c:74:9c:c3:4d:b0:db:47:50:5e:47:69:30:
12:84:93:14:21:95:80:7c:90:5a:0b:6a:40:03:2c:ff:d4:04:
db:b6:f8:98:6b:6d:a0:ac:3c:12:b4:ca:6d:73:91:7c:ef:bb:
ec:23:ce:6f:4a:5e:29:d5:2d:63:0b:88:3c:a9:a0:c9:a3:3f:
b9:fb:30:1b:d2:ad:c1:f3:4a:54:5d:04:93:8b:0a:4f:3f:13:
8c:59:a4:8d:e8:15:17:a3:87:6d:70:d7:a9:9e:4a:23:cf:f1:
0f:54:93:a9:e6:3b:40:3d:c7:2f:01:1c:7d:23:e2:e7:54:19:
c7:60:55:49:9d:6f:42:7f:ad:46:18:c3:9e:e4:7a:8c:10:b6:
4d:79:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:15:06 2026 by rpki-client