
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: si+5bDN0yRc3zKHNFALEVh52YmDdT+MQU4L3nXjONjs=
Subject key identifier: F1:F9:72:93:C2:85:23:09:48:E5:9B:C7:41:ED:32:FC:0B:90:E0:81
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 19EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 16:27:59 +0000
Manifest this update: Tue 28 Jul 2026 16:27:59 +0000
Manifest next update: Tue 04 Aug 2026 16:27:59 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: 67IUgCnOwGiBGZO/ltA5xrO5LPyUl8qaj63iS0RkQGM=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: /wO07VK/99aXev5AumAxW3oQhnQNNhg5LiUR2P7i400=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6635 (0x19eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Jul 28 16:27:59 2026 GMT
Not After : Aug 4 16:27:59 2026 GMT
Subject: CN=6a68d88f-1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:a5:50:82:ab:5c:84:92:f3:f4:fd:19:cb:
bc:70:f1:be:55:d1:9d:00:f8:16:01:eb:78:ca:0a:
47:2b:1c:02:48:57:03:aa:32:bb:2c:ea:a5:bf:39:
92:7d:dc:5d:55:40:c9:a3:7e:f8:b7:7b:a5:ab:9c:
ba:4b:05:13:10:9d:19:0a:ae:5d:0d:0b:b4:53:03:
cd:0e:fe:d1:6d:ed:e3:46:d6:0e:a5:91:c3:8e:5d:
15:d3:10:79:69:6a:c5:2d:85:b6:0a:cd:6c:1b:c2:
7a:ea:b8:b5:8d:1b:3b:e8:13:dc:66:c2:cd:1d:25:
ce:35:a3:f5:5b:f2:75:69:09:4a:7e:fd:1b:1b:4b:
bd:dd:1c:9e:0e:38:42:4c:c5:33:d6:17:ba:21:ed:
74:c2:90:24:5b:b1:95:60:85:64:64:f6:20:27:5e:
64:ba:e9:e0:b7:f6:7b:a3:6d:f8:57:f4:b8:3d:89:
03:5b:e3:ef:fa:71:7d:8c:bd:8b:eb:3b:ac:5f:95:
db:b9:61:59:51:df:35:eb:8f:1b:93:c2:ba:1a:60:
11:c8:06:b8:d5:2b:ca:3e:f8:2c:fd:a4:18:af:3f:
6f:42:a1:41:ef:fb:8f:94:a9:d1:98:8d:75:97:d8:
2a:aa:81:4b:bc:04:05:0c:6e:30:77:21:a2:ba:5b:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:72:93:C2:85:23:09:48:E5:9B:C7:41:ED:32:FC:0B:90:E0:81
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:fe:00:96:cf:50:fa:f8:ee:da:bf:4e:b1:b5:ef:e7:cc:
bb:17:f5:46:57:9e:ad:f8:48:22:07:41:56:c8:3e:50:10:46:
10:f1:c6:8a:2d:b1:5f:c2:68:d9:e2:4e:10:ba:f6:70:b8:c3:
5f:8e:e2:3b:4b:ca:23:fa:d8:5f:99:79:4c:98:b4:72:ed:96:
ab:f0:8c:04:9d:e6:ea:36:61:e7:7b:33:1a:05:be:9d:a5:fd:
8c:e7:64:1e:ff:15:9e:57:94:4e:07:8e:73:41:92:f9:13:b4:
89:07:86:3b:a5:67:d6:f1:f4:68:89:1a:4f:09:9d:90:f0:de:
8e:00:4c:f6:8c:49:61:4e:92:83:25:c2:cb:fb:69:83:62:57:
c8:cd:c9:6e:35:4d:58:b4:d5:f9:e2:7e:15:7c:c9:de:e9:83:
dd:f8:4d:b8:4d:23:1b:7d:d1:00:83:59:13:85:4c:ed:9d:f9:
94:ea:55:39:07:e9:aa:41:03:e4:d5:ec:86:06:14:2a:bb:48:
e1:c7:b2:87:a5:8a:74:8c:2b:34:66:e1:3c:84:28:ab:fa:2a:
64:7a:f0:57:c5:21:7e:d6:02:db:b5:cb:4a:fc:17:9b:65:32:
9b:e3:0b:d3:41:92:09:af:d5:ee:6f:94:c0:08:07:a9:c2:b0:
6a:d1:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:30 2026 by rpki-client