
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json)
Hash identifier: 3ltcWiRvbVAage7WqaEvlZRMuPFECEDAb0mQPHkJ3zI=
Subject key identifier: F4:3A:28:D7:C3:50:32:D3:BB:F0:14:EA:AF:F3:16:D5:09:5D:76:41
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
Manifest number: 0133
Signing time: Fri 09 Oct 2026 06:18:08 +0000
Manifest this update: Fri 09 Oct 2026 06:18:07 +0000
Manifest next update: Fri 16 Oct 2026 06:18:07 +0000
Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: R/3DZSna2KE/hnuQoGi1evqidaXBLEICHyfP4kG+l+Q=)
2: AA456842107211F09A9E631FC4F9AE02.roa (hash: f6Cvx3N7h4aMk1PWUAl7FuI3n29BObBDdjQTOWyJ4SU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Validity
Not Before: Oct 9 06:18:07 2026 GMT
Not After : Oct 16 06:18:07 2026 GMT
Subject: CN=6ac8871f-8743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:9f:f4:e8:b1:44:da:75:69:bc:f4:d0:5f:
6f:3b:9d:a6:0c:25:91:0c:b0:23:fd:fc:6c:fe:d2:
17:d9:82:23:30:26:93:2b:6f:c4:25:56:09:86:0e:
49:1a:4b:2f:48:ef:17:9a:8f:6b:33:7c:8c:3a:cc:
eb:27:09:0c:ff:97:e6:66:c5:9b:79:ed:7b:45:a6:
98:9d:4b:60:f3:5f:1a:09:88:6a:11:b0:57:d8:eb:
12:05:d0:4c:4c:e2:73:6a:3d:4e:c7:a7:d4:be:c1:
e4:0d:42:02:fd:5a:73:e7:a8:e6:1b:40:83:a2:43:
70:ac:f6:7a:78:cd:e9:4d:63:6d:1a:5b:3a:be:62:
2e:b8:58:52:ba:19:e7:16:3b:8f:b4:cc:69:3b:05:
35:59:ce:b3:38:6e:b5:f6:a3:9d:3e:bc:9f:61:5b:
32:b3:4e:58:06:51:d1:af:11:9a:3e:68:b0:c9:a9:
4f:09:f2:1d:41:03:50:02:b9:ed:78:9b:49:5d:35:
c5:0f:8f:85:bc:f9:80:cf:fe:b7:b1:8e:67:e8:1b:
4a:6e:94:1a:ac:79:12:d8:22:4d:ff:4c:f5:47:0f:
8e:58:27:34:2b:10:5f:c1:d1:ff:c0:22:12:59:9d:
4e:d8:ee:89:ed:e5:4a:ca:a8:71:78:24:e7:b9:e9:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:28:D7:C3:50:32:D3:BB:F0:14:EA:AF:F3:16:D5:09:5D:76:41
X509v3 Authority Key Identifier:
keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:c0:47:59:7e:6d:7f:40:62:1f:44:e7:41:f3:bc:1e:33:
bb:ad:4e:df:19:1d:f4:09:f4:4a:9d:3c:22:49:97:96:6b:59:
7b:3c:0c:02:f4:0e:1e:f0:b9:69:0b:a3:df:5a:c3:62:20:30:
7e:cb:64:85:41:a7:77:d7:df:8f:36:b7:48:17:5a:62:fb:34:
23:da:c9:83:e5:11:f9:0f:6b:18:ad:c7:86:e2:be:9a:0f:6d:
b9:31:5e:32:82:b5:b0:19:d5:e9:2e:7e:82:27:04:23:0d:9c:
78:9b:1a:4d:95:3f:44:ac:c1:e3:b2:64:e3:1b:72:ce:1d:9a:
29:9d:54:c1:d4:a2:b3:a0:c4:57:ba:1e:5c:33:03:a2:07:77:
9c:22:69:df:36:e8:0a:a8:70:8d:98:6b:c3:d5:d4:42:d8:17:
f4:3e:13:8a:cd:12:2d:c1:b5:20:30:15:92:d0:04:18:8a:c6:
87:87:a9:c7:5e:c6:c6:ba:7f:a4:29:79:4d:c2:18:7d:77:7c:
cf:f5:d0:7d:c7:14:df:9d:34:ac:fb:e6:0b:41:f6:8e:8e:32:
8a:4e:6e:0c:d8:aa:9e:0b:5e:a9:d3:2e:74:23:79:f8:88:1a:
3d:40:f3:87:05:ec:7e:a1:49:92:d5:75:35:88:45:11:f8:c6:
0f:73:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:24:41 2026 by rpki-client