
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: wzquVv4C+KJG9spaJqLIqTx9zX3jl0O8GGriTReTpB0=
Subject key identifier: C3:73:94:92:9C:A1:3E:B1:47:70:B4:9F:60:0D:DA:9C:EE:6A:11:42
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0C11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0BFE
Signing time: Fri 12 Jun 2026 18:53:00 +0000
Manifest this update: Fri 12 Jun 2026 18:52:59 +0000
Manifest next update: Fri 19 Jun 2026 18:52:59 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: yh/Y0jmBBqAWlxNXq3ICjWpui8D5dRLBTiruDRU+Isc=)
2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Jun 12 18:52:59 2026 GMT
Not After : Jun 19 18:52:59 2026 GMT
Subject: CN=6a2c558b-9e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:c9:a6:23:a1:0d:19:7b:62:da:cc:85:81:
d4:89:c6:30:88:2f:92:3d:31:f9:f8:92:68:2d:af:
33:88:59:b0:e2:86:2b:b7:5a:87:19:20:e6:24:aa:
ea:f1:d7:31:3f:7e:7e:65:3e:65:00:70:8d:e7:1f:
60:8a:83:2b:24:5c:f5:89:5f:6e:ba:e9:b3:c9:43:
c3:8e:2b:b6:f9:b2:5d:35:ee:e5:4b:f6:77:03:cd:
1f:78:8d:24:f3:42:0c:bd:08:9c:06:86:64:c5:e6:
f8:fe:7d:3f:d6:e7:ac:74:6f:5d:ba:1f:79:81:39:
f1:db:e4:94:b8:e2:bf:c7:9c:a8:d6:dd:56:91:d2:
fa:c6:34:79:03:90:f8:51:49:b5:9d:55:94:08:9f:
e0:f7:f8:d4:48:37:87:72:c1:c9:dc:d7:ef:f7:ba:
ea:36:53:78:2e:70:84:c9:19:24:b0:bd:cc:bd:dd:
2a:9f:0c:53:27:c2:5a:a6:ae:af:fb:04:2f:ec:44:
0b:bb:46:13:12:82:eb:80:22:2b:d1:82:4e:ae:32:
ae:ec:1a:3e:57:ba:3d:ba:af:39:f3:e0:4d:a1:31:
34:45:22:29:43:b0:7b:22:56:02:0e:34:10:d1:cb:
f0:82:b9:50:64:9d:ec:9b:12:d0:b0:56:5a:4b:d5:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:73:94:92:9C:A1:3E:B1:47:70:B4:9F:60:0D:DA:9C:EE:6A:11:42
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:44:99:9a:4c:6c:4c:6d:f9:57:a7:ba:93:cf:00:8d:af:
d8:54:02:2c:d7:eb:05:68:ce:95:73:bd:23:47:17:21:b5:e5:
9e:36:94:4f:f3:64:55:02:b0:eb:87:43:39:1b:e4:5c:66:d6:
a0:e9:1a:03:be:29:62:2b:f9:0f:43:b9:8e:ab:ee:05:17:87:
30:9c:17:1e:0f:3f:51:07:e4:37:cc:43:59:64:5e:20:77:e4:
93:21:45:32:b3:78:7a:c4:9d:5a:93:09:2c:c2:fe:0f:53:85:
6b:e1:5b:f8:0e:00:87:cc:07:a6:5b:2d:e1:80:8a:77:a2:5d:
b6:b6:c4:d7:41:0d:99:c2:bf:53:60:73:18:df:b2:1e:ff:10:
43:f4:db:c7:f2:cf:d7:3a:ce:49:69:01:c3:1b:80:16:5d:eb:
a6:dd:93:02:cf:8b:b6:37:2b:f8:6a:24:21:5c:c6:36:aa:ed:
19:f6:97:19:ff:f2:34:23:87:40:b4:7c:65:6b:14:79:48:8b:
b2:a0:51:fb:77:9b:47:c9:54:50:a2:2f:e1:d8:69:fd:26:8e:
94:c8:e5:56:22:71:ac:14:46:08:83:d5:0b:29:44:63:8e:c0:
07:f3:1a:31:5d:5c:94:f6:7c:b1:9f:b3:0b:02:5e:32:45:48:
0f:b5:b1:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2
QTA4MTRCQUMwHhcNMjYwNjEyMTg1MjU5WhcNMjYwNjE5MTg1MjU5WjAYMRYwFAYD
VQQDEw02YTJjNTU4Yi05ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXzJpiOhDRl7YtrMhYHUicYwiC+SPTH5+JJoLa8ziFmw4oYrt1qHGSDmJKrq
8dcxP35+ZT5lAHCN5x9gioMrJFz1iV9uuumzyUPDjiu2+bJdNe7lS/Z3A80feI0k
80IMvQicBoZkxeb4/n0/1uesdG9duh95gTnx2+SUuOK/x5yo1t1WkdL6xjR5A5D4
UUm1nVWUCJ/g9/jUSDeHcsHJ3Nfv97rqNlN4LnCEyRkksL3Mvd0qnwxTJ8Japq6v
+wQv7EQLu0YTEoLrgCIr0YJOrjKu7Bo+V7o9uq858+BNoTE0RSIpQ7B7IlYCDjQQ
0cvwgrlQZJ3smxLQsFZaS9XRSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNzlJKc
oT6xR3C0n2AN2pzuahFCMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5
NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI
c2pXUWxJVmRpZUZxQ0JTNncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ3hEmZpMbExt+VenupPPAI2v2FQCLNfrBWjOlXO9I0cXIbXlnjaUT/NkVQKw
64dDORvkXGbWoOkaA74pYiv5D0O5jqvuBReHMJwXHg8/UQfkN8xDWWReIHfkkyFF
MrN4esSdWpMJLML+D1OFa+Fb+A4Ah8wHplst4YCKd6JdtrbE10ENmcK/U2BzGN+y
Hv8QQ/Tbx/LP1zrOSWkBwxuAFl3rpt2TAs+Ltjcr+GokIVzGNqrtGfaXGf/yNCOH
QLR8ZWsUeUiLsqBR+3ebR8lUUKIv4dhp/SaOlMjlViJxrBRGCIPVCylEY47AB/Ma
MV1clPZ8sZ+zCwJeMkVID7Wxmg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:03 2026 by rpki-client