
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: KPw6U/XHxcBhUi82mlZBuRoK5iR83B7GxGuDamwT4tk=
Subject key identifier: F4:94:62:EE:5E:63:FD:EC:0B:4F:03:20:FF:6B:98:2E:AC:D3:DD:71
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0BF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0BDF
Signing time: Thu 16 Apr 2026 18:49:10 +0000
Manifest this update: Thu 16 Apr 2026 18:49:10 +0000
Manifest next update: Thu 23 Apr 2026 18:49:10 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: OlM/LCiXM9P6VeHt4x7AhMf1NAlMaGH24DTSGJQs58s=)
2: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Uo93hzMxNF+jVqkGOria3VXRV3+weXxYw/vG0YhBuJs=)
3: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: SSQpbtCsMq8SLI9YHkAv1i1dNu2TaU1odweqDk/00YQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Apr 16 18:49:10 2026 GMT
Not After : Apr 23 18:49:10 2026 GMT
Subject: CN=69e12f26-861c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:cf:f9:3d:aa:46:ba:e4:28:6a:46:93:c9:
b1:e3:99:86:b0:b5:9b:7d:1e:88:c6:8a:46:41:c4:
0c:b5:97:b8:6b:7d:21:00:a1:0e:07:3b:ce:b2:0d:
60:8c:5a:8e:d3:b4:99:48:74:d7:08:2d:b3:f2:3a:
4c:ac:42:ce:cc:c1:7a:00:fc:61:e1:d0:52:70:a9:
49:ef:1c:bc:15:0b:d3:16:30:ab:a8:cb:57:16:ba:
8a:cc:42:87:0d:b3:44:54:26:07:94:49:a6:f3:71:
b9:00:65:a9:e3:36:47:18:2c:d2:97:3b:18:55:17:
5a:89:81:aa:f1:e4:64:b9:bb:7d:0f:4a:f7:9d:3a:
ce:10:4c:db:78:84:ee:7e:1c:aa:54:a1:96:6c:4e:
c4:e4:06:7d:ec:fe:e8:93:b5:51:b8:b4:bc:14:94:
80:d1:8e:21:06:a1:46:f5:b4:7f:2f:bb:0c:5c:ec:
e6:35:4e:40:ea:68:0a:e5:76:d2:84:df:e6:40:4f:
08:70:f9:02:3a:a9:48:11:3a:58:b7:a5:ab:d9:8f:
be:63:f9:36:44:d5:b1:6c:06:8c:04:86:6e:54:59:
6c:15:b4:c0:23:ed:5d:6e:cb:f7:43:99:7c:e1:df:
b1:00:3a:4b:99:69:9d:2e:2c:32:0a:ab:41:21:cc:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:62:EE:5E:63:FD:EC:0B:4F:03:20:FF:6B:98:2E:AC:D3:DD:71
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ac:40:e7:56:9e:2a:dc:52:d1:60:e2:27:87:6c:71:06:8f:
d3:27:d1:2b:32:60:2e:67:3e:0d:1c:af:7f:37:51:8d:2e:e0:
f6:99:9f:04:c5:55:30:68:fe:e0:63:51:73:31:a6:81:03:41:
e2:3e:95:8d:4a:b4:d9:ea:c2:03:a7:9a:51:21:cf:fb:52:ca:
31:99:cb:ec:a9:ff:2f:16:58:53:cc:4c:1a:01:4a:00:13:e7:
34:67:ee:9d:67:0a:f2:c6:7a:c6:4a:30:36:8b:fa:19:cb:4e:
21:6a:94:38:42:ba:dc:e8:e5:e6:47:c0:ad:6c:85:24:c6:5b:
bc:36:9e:c7:1c:dd:75:1d:f1:7e:3b:6a:b7:57:54:09:ed:73:
d9:25:18:25:84:a2:48:83:0e:36:22:8d:96:39:c2:fd:d5:d8:
64:1e:3d:15:2b:54:2a:50:88:98:f5:ea:c4:95:88:5f:74:08:
76:3f:de:3c:52:84:3b:53:28:31:fb:35:34:6e:0d:cb:71:a9:
72:70:c7:fd:3b:43:65:a5:ac:6f:e9:3b:aa:17:20:49:04:0a:
bd:d8:3f:ef:ba:e4:90:ea:b0:09:e4:32:d4:06:5b:3a:86:aa:
91:da:40:ef:13:a8:7a:78:2c:4c:d7:a1:04:be:72:55:73:26:
ed:48:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:06:04 2026 by rpki-client