
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: e0NXbmiy5ZAtE24DHFr+tcUDm0EEv81lL8CNcpTJF64=
Subject key identifier: EA:70:DF:15:B9:A1:3C:F6:9E:D5:E8:01:E7:F9:25:63:E3:C6:6E:79
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 19B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19A8
Signing time: Thu 16 Apr 2026 16:20:23 +0000
Manifest this update: Thu 16 Apr 2026 16:20:22 +0000
Manifest next update: Thu 23 Apr 2026 16:20:22 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: pzxg5lPgwsf4J4AAVVKTLuEw4vg+D9q87AgTPtRMO54=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6580 (0x19b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Apr 16 16:20:22 2026 GMT
Not After : Apr 23 16:20:22 2026 GMT
Subject: CN=69e10c46-db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:ef:dc:d3:67:91:06:5d:0e:48:9f:52:21:
c3:f2:db:39:6a:a6:62:ea:c5:2d:25:1d:83:76:16:
09:9e:db:4b:75:8f:ec:35:42:d0:11:89:13:80:43:
64:36:90:a0:4c:48:9b:c2:15:14:86:9a:f1:ff:25:
39:08:b7:04:8a:47:bd:5a:46:46:b9:47:48:02:e4:
18:00:b4:20:e9:ec:db:27:9d:69:18:ad:8c:3a:34:
6d:5e:44:55:2d:2c:1c:29:fd:38:ac:6b:7f:34:66:
ac:43:92:58:67:36:de:0f:0b:dc:a3:11:9d:16:a3:
0e:4d:10:3a:83:a1:e1:a1:2b:56:7e:27:75:ad:84:
77:09:31:00:eb:3f:19:0c:ad:9d:62:30:87:ec:ba:
e1:69:81:c4:dd:be:1b:d6:c8:da:48:e0:fa:c7:3a:
1f:00:c8:2b:5b:21:14:7b:2b:e8:35:87:2a:ce:f1:
1f:7d:7b:d9:99:ea:89:84:7d:4b:b2:66:dc:c5:21:
83:9c:91:15:ab:d6:54:f1:df:f0:29:0e:8e:25:34:
e9:c5:ad:16:93:ce:0c:b4:f7:3b:f2:1f:fa:4c:b0:
d0:c7:e7:dc:e5:be:fb:40:ff:ca:43:4c:66:d8:35:
e7:ab:25:11:05:ae:82:63:63:2a:a7:ca:33:d0:86:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:DF:15:B9:A1:3C:F6:9E:D5:E8:01:E7:F9:25:63:E3:C6:6E:79
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:5a:a7:c2:8c:d0:d8:3f:3a:57:b0:d0:ea:ed:63:bf:71:b9:
e8:c0:9d:8a:27:b4:dc:40:fe:30:74:ed:e0:87:d0:1d:b5:c3:
5a:e1:23:cf:b4:a6:1d:aa:31:44:4b:be:b5:f9:ca:a9:06:03:
1d:46:e0:ff:d5:3c:0b:16:3e:f6:04:38:23:65:3f:75:a4:73:
e4:eb:ed:79:dd:30:19:1a:39:e2:b4:4b:28:03:9b:8c:e5:da:
dd:a2:2d:5d:cc:08:21:ef:37:a0:16:27:f5:f8:39:80:90:c1:
df:28:78:29:51:d4:8d:52:26:7c:80:da:c9:10:f7:2a:1c:62:
d2:27:07:24:2d:43:2b:20:df:0f:ae:6d:5d:3f:15:84:51:2a:
44:77:34:0d:31:df:ab:c4:37:55:50:e8:39:cd:1f:1b:46:d3:
42:8b:b1:79:b5:cb:c4:85:19:7e:59:0f:af:63:63:b9:a8:c9:
6c:34:ec:0a:18:24:13:56:81:98:0f:b8:a0:4e:b8:a6:36:f6:
7b:8f:88:d3:6e:ca:e3:45:a0:14:ba:31:07:03:e6:d9:d6:d3:
50:e2:0b:a7:9a:f8:26:50:90:6d:38:e0:e0:54:68:f6:bb:f8:
e7:81:57:07:7a:b9:ab:73:8f:7c:1b:3a:3b:6c:94:fa:2e:e1:
3d:9f:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:11 2026 by rpki-client