
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier: qRj5hnpBfj8L0f3bBJbL5hSu8wYfHpI8KcJyge/TXlw=
Subject key identifier: 74:B3:B2:22:F5:68:5E:66:58:2C:A8:E3:BB:D2:51:B1:D2:9F:C4:C6
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial: 0BD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number: 0BC7
Signing time: Mon 02 Mar 2026 02:05:58 +0000
Manifest this update: Mon 02 Mar 2026 02:05:54 +0000
Manifest next update: Mon 09 Mar 2026 02:05:54 +0000
Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: kH7eMaL31MHXUww3Chs7Ji3fIGFbEicMZoH0xk2fXJY=)
2: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Uo93hzMxNF+jVqkGOria3VXRV3+weXxYw/vG0YhBuJs=)
3: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: SSQpbtCsMq8SLI9YHkAv1i1dNu2TaU1odweqDk/00YQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Validity
Not Before: Mar 2 02:05:54 2026 GMT
Not After : Mar 9 02:05:54 2026 GMT
Subject: CN=69a4f085-eb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:7d:f0:74:1b:41:ee:d3:85:3c:7b:67:b2:
14:34:36:a1:9e:42:5f:de:c7:b2:78:14:9b:98:63:
7e:d5:93:fe:59:07:f6:68:90:8b:5d:4a:5e:7e:ce:
ae:00:e3:4f:48:c6:bf:d7:6b:78:0a:cc:d0:50:e4:
a5:3a:a3:30:90:1f:e8:43:d0:23:03:4c:5e:77:d2:
1b:82:96:48:d5:4b:ea:5f:c6:ec:7e:1d:2e:6f:80:
60:a1:62:91:11:82:4b:c9:50:a2:c3:50:5e:21:b6:
c8:62:b0:eb:53:7b:04:a6:71:03:9d:26:db:b0:94:
7d:16:ab:e0:65:42:59:9b:25:67:66:2e:ab:fd:cb:
57:0e:42:c7:04:1e:30:f8:dc:49:4e:ff:5e:18:27:
91:48:e8:ab:e0:3b:e2:35:dc:cb:e9:69:15:4a:d8:
e3:0b:78:40:b6:5b:02:8e:87:49:8c:09:a6:b5:4a:
17:57:de:a7:0e:64:1d:5b:c0:a7:7f:d0:cd:a6:63:
2f:58:48:f4:f9:6a:33:70:c0:ee:c8:c4:4b:23:4e:
84:c8:50:a2:00:8f:a2:de:6e:67:8c:30:98:b8:04:
32:b5:28:5e:b8:43:59:b4:66:22:c1:9b:39:e9:36:
7a:e9:73:e5:62:1a:0f:84:ed:50:da:7c:e9:61:f2:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B3:B2:22:F5:68:5E:66:58:2C:A8:E3:BB:D2:51:B1:D2:9F:C4:C6
X509v3 Authority Key Identifier:
keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1e:35:56:49:2a:11:7d:06:70:26:b1:a8:0f:b0:1a:f7:24:
79:37:68:2c:d3:ef:1e:6e:95:94:2c:90:74:1d:57:42:55:6d:
68:84:89:13:c5:9a:89:de:4a:b6:f7:e1:93:64:3e:49:72:84:
55:07:18:a5:68:b3:b1:5f:d7:42:51:93:08:b3:2f:c5:2a:73:
39:0b:37:57:da:be:4b:6c:d9:2a:17:ce:11:1f:d2:23:0e:74:
4e:94:88:5f:bc:c4:bc:c7:d6:11:ed:c5:bc:8f:8e:52:f0:df:
86:ba:39:7d:5a:c6:f6:df:da:62:cb:da:20:b6:9a:ac:5e:dd:
4d:a4:f8:0d:a4:a4:69:f7:e1:9e:a9:32:32:59:b4:ee:7c:bb:
fe:8c:66:64:73:3b:7f:f3:24:d5:64:df:8a:37:75:00:3b:0e:
74:50:14:5c:cb:cf:4a:64:34:e6:6e:fc:b3:84:dd:40:2c:dc:
80:b4:b6:a2:cf:47:e4:85:86:ef:c5:8a:fb:4c:0d:48:72:00:
76:06:97:73:34:7f:eb:b7:3f:9e:02:e3:f2:0a:4b:25:56:70:
3c:e9:55:34:3b:74:33:28:34:b5:1e:07:b9:dd:56:9e:cb:c5:
dc:bc:c9:43:a6:09:e1:de:13:6d:ec:27:75:2d:2e:c8:81:7e:
d5:92:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:17 2026 by rpki-client