
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: GHVHYp4g86yuGzWheXlLEalDlRr2YKisUP50ZzYeTmg=
Subject key identifier: 33:13:9F:D9:15:31:73:29:0E:EA:71:84:4F:0F:5D:83:FB:0A:F6:A9
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 1A09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19FC
Signing time: Thu 24 Sep 2026 16:20:24 +0000
Manifest this update: Thu 24 Sep 2026 16:20:24 +0000
Manifest next update: Thu 01 Oct 2026 16:20:24 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: Iv/KDnnrhjUVt80uBIIYwQe22B7/Xj5zNxs5hMLW6ro=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: /wO07VK/99aXev5AumAxW3oQhnQNNhg5LiUR2P7i400=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6665 (0x1a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Sep 24 16:20:24 2026 GMT
Not After : Oct 1 16:20:24 2026 GMT
Subject: CN=6ab54dc8-1f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:1f:25:9c:27:c0:8a:c2:8a:49:58:d1:02:
5f:29:d1:f0:61:54:23:2a:ff:f4:b4:f3:33:84:50:
c1:88:47:8f:e4:50:33:25:23:fc:3e:ca:0d:91:18:
f9:e7:17:22:69:b8:18:c7:41:b1:48:58:a2:75:60:
54:10:f7:8b:89:a3:f3:59:89:b9:bb:d9:92:56:68:
be:5e:42:61:98:75:23:d2:c3:a8:22:f7:58:34:2a:
2b:45:ac:17:82:80:40:13:1a:ef:1e:7b:00:2c:bd:
c6:7b:a7:74:30:2d:9c:e7:3e:aa:bb:1f:dd:8c:07:
8a:ea:14:47:5a:82:9d:27:0f:df:df:10:11:9e:68:
3d:39:44:4f:82:fb:35:a0:f3:34:41:37:46:bf:a9:
01:7a:e0:2f:d0:a9:58:d4:6a:4a:d5:c3:2a:50:46:
6a:a7:dd:b1:51:c0:a6:4c:b6:12:16:46:a5:c2:52:
61:09:79:d8:97:63:fd:6a:eb:69:0b:34:b2:b9:ea:
bb:0e:f0:96:81:14:3b:98:29:65:12:0b:59:96:29:
9b:fa:a3:26:99:5b:d9:e7:f6:94:46:78:fc:b4:b4:
8e:1e:9b:5f:d1:d7:01:fd:97:9b:78:f3:18:18:8c:
bd:a0:77:5e:61:29:0a:4a:9f:1b:53:6a:33:ae:13:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:9F:D9:15:31:73:29:0E:EA:71:84:4F:0F:5D:83:FB:0A:F6:A9
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:bf:8d:2b:66:2e:24:fe:16:d2:ac:0f:f3:37:58:83:56:88:
6e:d1:55:86:70:59:f0:37:f0:65:5b:a1:0f:e2:96:85:dd:70:
3a:88:34:fc:79:1e:6b:5b:f4:ee:70:1a:c0:13:94:40:12:7b:
0a:c9:95:4f:6a:99:a3:ec:a0:f8:05:27:39:7f:22:79:79:67:
b8:47:bb:46:e3:76:5f:cb:43:2d:90:05:b9:46:d0:7d:8f:d0:
0e:b0:af:4b:11:5e:18:39:cc:88:9b:86:c8:c1:47:c5:d1:b2:
ef:29:de:de:4c:53:29:20:55:88:f2:44:94:c3:71:e1:c6:bd:
92:6b:eb:ea:b4:fb:25:85:31:a2:55:98:e4:1a:23:07:ad:b8:
d0:ef:1a:84:e6:16:52:4f:ae:51:b9:c2:f8:f7:33:82:18:65:
33:9c:d0:cc:b1:85:9c:9c:48:e0:5d:55:34:8b:37:65:7e:50:
eb:07:6b:48:ea:2c:8b:98:fd:27:b5:48:b9:c6:2a:fd:d3:98:
68:c4:ac:ec:3f:4a:0e:69:de:29:31:09:ff:6c:82:c4:d7:7b:
33:c4:af:22:4f:9c:e3:5a:87:c7:1a:04:38:55:e1:d5:ce:3e:
44:54:0a:c5:d6:2c:ab:48:1e:b0:c6:8c:ee:58:14:74:08:4b:
de:41:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:24 2026 by rpki-client