
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json)
Hash identifier: cJvcJpiS4MYx4P3cfHsjHrc9LkaOqVwwSm4QGt3BaWU=
Subject key identifier: 05:10:E6:A8:4E:E8:5F:09:1D:E2:AB:DD:C9:43:73:B5:E9:3F:4E:F1
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
Manifest number: D9
Signing time: Fri 17 Apr 2026 06:22:57 +0000
Manifest this update: Fri 17 Apr 2026 06:22:57 +0000
Manifest next update: Fri 24 Apr 2026 06:22:57 +0000
Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: ff8fa1EUJv1C5ix/JAU/CLMEKUnhd013XN2qwV6ztPc=)
2: AA456842107211F09A9E631FC4F9AE02.roa (hash: LcGkey/fSRG4e+wg3SB8Jm7E3DdOa6idSZbn5QgtWZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Validity
Not Before: Apr 17 06:22:57 2026 GMT
Not After : Apr 24 06:22:57 2026 GMT
Subject: CN=69e1d1c1-8e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:b2:cb:14:63:cb:49:e9:27:e7:5e:e0:58:
7b:2d:4a:83:26:3f:93:2c:b1:2b:a0:5d:99:79:0e:
d8:e3:fe:b4:cd:63:0d:43:42:ea:07:41:2f:dc:d8:
a2:c8:e8:6f:2c:67:e6:50:2e:93:4a:5d:83:87:19:
31:f1:67:9e:a2:75:2f:9a:b8:e4:0d:1a:cc:c6:63:
44:2d:34:04:46:26:b9:a9:4d:0a:6f:f9:ea:e6:c8:
38:a1:5a:31:c9:ab:d0:d2:02:90:a4:4e:c2:51:70:
d4:de:ae:cd:41:40:3f:cb:cf:c5:5c:62:cf:d0:0a:
37:03:c4:78:01:1b:0f:bc:51:42:b5:27:30:e9:39:
5f:7d:ea:8b:9d:67:a1:0d:db:6d:0b:4b:0d:d7:78:
0b:6e:2d:36:fb:f2:76:f9:98:4e:98:11:bf:1f:d4:
35:a9:a8:4d:b3:fc:62:01:e6:3a:4a:08:12:49:2a:
ea:91:01:05:d2:43:25:0a:d1:46:90:4c:28:25:c4:
8d:52:33:44:e9:7b:ea:34:b5:c5:c1:41:9c:10:cb:
f2:dc:38:48:61:3f:3d:14:88:a3:e0:a2:8e:4a:bf:
34:46:c7:ad:3a:0c:06:8a:f8:64:15:cb:44:a9:34:
1e:b8:e2:23:8a:20:40:65:a8:4e:1f:52:3d:a1:87:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:10:E6:A8:4E:E8:5F:09:1D:E2:AB:DD:C9:43:73:B5:E9:3F:4E:F1
X509v3 Authority Key Identifier:
keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:e4:28:36:10:de:cb:9a:70:bc:55:a8:e4:e3:68:7a:53:36:
ea:60:3d:5d:e0:a2:c4:ce:f8:6a:ce:d5:8f:e1:05:30:45:f0:
9c:73:4d:1a:d4:32:ef:5b:78:a0:be:10:c6:0a:6e:d7:4c:db:
63:03:a1:2c:3f:4a:10:17:55:37:18:1a:88:fa:b1:54:41:bd:
b4:3d:c5:02:3a:23:a0:f6:28:a6:cc:b7:0f:b5:3b:68:80:c5:
36:68:ce:8a:d5:82:fc:ce:da:bb:e0:f0:6a:49:2d:2b:36:ce:
a1:d7:43:a3:31:51:55:72:82:85:16:af:59:d8:e5:70:d0:de:
93:9f:31:0e:4b:a1:0b:5d:58:23:6e:78:36:18:b4:a6:a2:c1:
e1:99:9f:e2:62:33:aa:0f:2c:a7:a1:5d:35:fd:9d:80:41:74:
b9:64:1e:b8:62:9d:73:8d:e2:92:87:c5:a5:ad:a5:b7:5c:d3:
7d:f3:7c:a0:b5:5f:96:d8:fd:29:00:58:66:83:76:bb:db:53:
ee:40:2d:40:e0:0d:d6:fb:f5:a8:b4:14:bc:20:12:db:49:39:
5b:db:48:0b:b0:a5:74:fd:0e:ed:d3:2e:7a:dd:71:57:86:cc:
bb:a5:40:0c:d6:ec:5f:e6:2d:06:2a:29:f3:95:6c:aa:1b:92:
b7:0d:b2:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUyOEUxMTAvBgNVBAUTKDVGQzFCNjM4Q0NDREZGOTlENjQ0NTY1NTI5QzgwNzA4
Njg2ODlCMzEwHhcNMjYwNDE3MDYyMjU3WhcNMjYwNDI0MDYyMjU3WjAYMRYwFAYD
VQQDEw02OWUxZDFjMS04ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLSyyxRjy0npJ+de4Fh7LUqDJj+TLLEroF2ZeQ7Y4/60zWMNQ0LqB0Ev3Nii
yOhvLGfmUC6TSl2Dhxkx8WeeonUvmrjkDRrMxmNELTQERia5qU0Kb/nq5sg4oVox
yavQ0gKQpE7CUXDU3q7NQUA/y8/FXGLP0Ao3A8R4ARsPvFFCtScw6TlffeqLnWeh
DdttC0sN13gLbi02+/J2+ZhOmBG/H9Q1qahNs/xiAeY6SggSSSrqkQEF0kMlCtFG
kEwoJcSNUjNE6XvqNLXFwUGcEMvy3DhIYT89FIij4KKOSr80RsetOgwGivhkFctE
qTQeuOIjiiBAZahOH1I9oYdnEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUQ5qhO
6F8JHeKr3clDc7XpP07xMB8GA1UdIwQYMBaAFF/BtjjMzf+Z1kRWVSnIBwhoaJsx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI4RS9DREEzQTcxRUY1
OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81bldSRlpWS2NnSENHaG9t
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4RzJPTXpOXzVuV1JGWlZLY2dIQ0dob216RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTI4RS9DREEzQTcxRUY1OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9YOEcyT016Tl81
bldSRlpWS2NnSENHaG9tekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmOQoNhDey5pwvFWo5ONoelM26mA9XeCixM74as7Vj+EFMEXwnHNNGtQy71t4
oL4Qxgpu10zbYwOhLD9KEBdVNxgaiPqxVEG9tD3FAjojoPYopsy3D7U7aIDFNmjO
itWC/M7au+DwakktKzbOoddDozFRVXKChRavWdjlcNDek58xDkuhC11YI254Nhi0
pqLB4Zmf4mIzqg8sp6FdNf2dgEF0uWQeuGKdc43ikofFpa2lt1zTffN8oLVfltj9
KQBYZoN2u9tT7kAtQOAN1vv1qLQUvCAS20k5W9tIC7CldP0O7dMuet1xV4bMu6VA
DNbsX+YtBiop85VsqhuStw2yxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:45 2026 by rpki-client