
$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json)
Hash identifier: DBBS8JuMBY7+qXky++hNZoc77RXnvAxrlQHHOYhM+PI=
Subject key identifier: B5:47:65:1A:A5:13:8C:36:EF:16:68:6E:08:25:2B:3B:2E:61:4F:D9
Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
Manifest number: 41
Signing time: Sat 13 Jun 2026 08:33:18 +0000
Manifest this update: Sat 13 Jun 2026 08:33:18 +0000
Manifest next update: Sat 20 Jun 2026 08:33:18 +0000
Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: BWK0owfxSsAUHsmmW+GwZKRBoYr58dri6Skb8ufao4o=)
2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Validity
Not Before: Jun 13 08:33:18 2026 GMT
Not After : Jun 20 08:33:18 2026 GMT
Subject: CN=6a2d15ce-a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:6d:43:e8:c5:76:46:2d:39:91:fe:be:4e:
fc:f0:51:ea:0b:6d:27:b2:cd:98:e2:b0:10:b9:0b:
03:49:9b:97:47:29:3b:99:99:fb:a7:a7:2a:d8:01:
32:7d:90:2c:0a:a8:73:9f:f0:30:94:5b:da:c2:d4:
70:ec:d9:93:4c:d4:c6:8d:c0:c5:0a:b1:8d:0b:b6:
3b:06:15:3e:46:56:de:5b:06:39:36:7e:99:df:a5:
55:85:65:a7:e3:89:af:f3:6f:ef:68:a0:b6:fc:96:
7c:8f:d5:08:af:15:32:06:c1:79:14:59:13:21:50:
03:9c:03:08:37:df:f4:18:75:96:81:9e:d8:28:21:
60:de:66:8a:16:84:da:7b:02:3f:33:10:8c:70:3e:
02:2f:d4:1e:e9:8b:92:66:84:7d:e4:27:8e:68:b5:
13:e4:d7:f9:31:1c:28:d8:ef:86:0a:13:4e:69:3e:
2a:90:02:a2:38:2e:2d:a5:38:df:fe:e6:25:fa:fc:
c3:79:9e:dc:8a:72:9e:04:ad:ef:66:d5:3d:41:bc:
fd:25:4f:b6:cf:cf:6b:00:4d:9a:c6:a9:dd:b2:c2:
44:b2:0d:57:73:0d:87:16:13:17:7c:2a:38:24:7d:
de:42:c1:dc:dd:b5:85:bf:72:83:62:48:d9:0a:72:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:65:1A:A5:13:8C:36:EF:16:68:6E:08:25:2B:3B:2E:61:4F:D9
X509v3 Authority Key Identifier:
keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4a:fa:5e:3c:4a:62:02:58:b2:a3:84:10:8e:6e:28:f0:b6:
13:dd:dc:2a:71:3c:9b:64:26:78:26:82:ec:60:ca:b5:06:66:
2a:7e:14:64:6c:8f:8b:28:5b:95:e4:d4:3e:51:f5:ee:bc:a2:
ff:e2:60:34:a5:14:ba:56:c3:ba:e5:5e:2b:7a:41:c6:e2:85:
21:1b:91:da:5c:27:9e:20:b7:0f:38:df:b0:23:83:03:c4:e9:
4c:98:0e:16:cd:64:7a:17:d7:52:f9:1f:6e:06:05:d6:bb:8d:
3c:1c:4b:95:74:c1:76:b2:0a:41:73:ef:f8:f9:16:51:3b:6f:
67:53:25:8a:ed:4a:5d:61:30:47:95:b0:22:91:b7:02:1e:75:
1b:1a:2c:a9:42:f8:30:c6:34:5f:90:56:16:c7:43:8b:74:e6:
c0:fa:57:42:9d:90:21:1e:63:6e:c9:8b:3b:1a:6a:5f:a9:ef:
f7:09:30:e8:31:2c:9d:54:78:53:d0:90:f4:73:06:87:04:f6:
fa:2c:09:c2:c0:e4:67:a0:66:2a:13:35:f0:f0:3c:92:7f:3c:
62:0c:a4:57:db:15:e8:5a:40:f5:be:0c:5f:e2:7c:b5:ae:bf:
19:80:f1:18:7b:0e:57:e7:66:6e:98:09:35:5a:39:0e:0c:5a:
e9:37:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:23 2026 by rpki-client