
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier: i+VCFe/w0BrhCk5A7zJ7uQdCSabK+1OxKnuhmomGKJI=
Subject key identifier: E6:AB:08:68:60:57:B6:2B:D6:0D:1D:5D:56:F5:F9:74:CE:DA:DC:2B
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number: 02AE
Signing time: Mon 21 Sep 2026 01:31:47 +0000
Manifest this update: Mon 21 Sep 2026 01:31:46 +0000
Manifest next update: Mon 28 Sep 2026 01:31:46 +0000
Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: 5aWRtff5uMRRnlNoAr33UoWgH9blvJagYgoM6Vdv+/s=)
2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Validity
Not Before: Sep 21 01:31:46 2026 GMT
Not After : Sep 28 01:31:46 2026 GMT
Subject: CN=6ab08902-c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:bc:d1:95:59:c6:bb:4a:d1:75:8a:a5:91:
e0:a4:8a:84:11:6b:0e:e2:90:fa:00:7e:46:e6:de:
aa:71:ac:f6:aa:c1:28:4a:56:b1:75:99:1e:dd:95:
6a:76:6f:49:85:6f:43:d7:eb:e4:54:d3:f4:56:99:
7c:04:27:d0:1e:22:92:88:0b:89:41:32:2c:2a:82:
3f:ed:32:4d:d4:07:ea:aa:9e:67:d9:49:8a:ae:fa:
57:82:5c:2c:19:a3:ed:f1:52:e2:4e:63:35:8f:06:
b6:34:da:dc:8f:a5:c7:f4:b4:b6:59:78:7c:74:e1:
b7:4a:9c:ee:52:0b:0f:8f:eb:c9:01:31:13:3f:50:
8d:04:c7:9e:31:36:7e:c2:1c:60:b2:ba:fe:b4:54:
05:f7:9a:85:60:91:c7:df:38:31:0a:24:26:bf:61:
77:30:dc:0e:84:84:f9:64:58:b7:8c:6f:75:1f:95:
fe:51:ec:a8:03:f4:65:82:e7:fc:1f:b7:2d:a8:c4:
94:fc:ad:7a:cc:33:18:d5:ba:21:24:95:ca:c9:33:
56:25:f7:78:34:3c:ad:fb:ae:16:e6:b4:5b:8c:87:
a2:eb:55:da:29:75:8c:54:52:e3:91:48:21:35:24:
43:41:57:6c:50:db:0d:c5:93:40:bb:12:a7:57:29:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:08:68:60:57:B6:2B:D6:0D:1D:5D:56:F5:F9:74:CE:DA:DC:2B
X509v3 Authority Key Identifier:
keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:d4:f9:b7:b2:f6:98:90:de:a1:ac:45:1f:7d:26:65:6d:
f2:69:15:9e:62:05:dd:1f:4d:43:71:71:3d:9b:f4:8a:e4:48:
d6:31:76:0f:0a:81:9b:b0:c0:43:2e:18:2d:05:51:c2:82:3b:
92:94:fe:b7:02:6a:a9:85:d2:dd:cc:fb:60:29:66:a6:31:43:
f5:16:17:5b:eb:24:fc:f7:91:06:2e:5e:59:8b:42:95:db:2f:
89:51:7b:51:e1:f6:27:0e:3d:43:73:1d:2c:c4:05:16:39:17:
2c:04:c0:ec:ba:94:55:4b:ac:95:d4:74:a8:aa:b8:6f:e6:af:
50:cf:82:cf:c9:4a:83:05:21:15:7c:a9:4f:12:08:80:ea:a2:
4b:c5:3e:b9:df:94:3f:49:cc:99:10:e8:d3:5d:57:78:84:60:
d9:94:2a:b6:43:3d:01:d6:db:95:1e:af:73:bc:70:7e:55:4c:
ee:d4:7b:32:19:39:c3:cc:40:24:64:0d:6e:2f:48:3e:1f:6e:
f2:46:16:cd:b9:f7:79:ee:53:84:03:8e:ef:4d:bb:53:0a:74:
e5:fc:6b:2d:b9:e6:06:80:c8:11:da:cc:56:5f:17:f5:c6:56:
9b:97:d2:cb:ec:d9:04:70:7f:88:53:b2:ac:a1:6f:98:38:37:
29:a2:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:59:02 2026 by rpki-client