
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier: hSgZYEPqYoY1LrNlms2w3ZN3UcFfIhtsArNpfS6wzDQ=
Subject key identifier: 99:88:04:5F:46:E3:B4:3C:B0:84:6B:FF:A4:80:FC:B7:76:19:4B:B3
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial: 199C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number: 1990
Signing time: Mon 02 Mar 2026 01:07:58 +0000
Manifest this update: Mon 02 Mar 2026 01:07:56 +0000
Manifest next update: Mon 09 Mar 2026 01:07:56 +0000
Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: SDTSotUa2oQOXgVy/b3gSrRhnUOgaQLk70T8Jz2P4DE=)
2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6556 (0x199c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Validity
Not Before: Mar 2 01:07:56 2026 GMT
Not After : Mar 9 01:07:56 2026 GMT
Subject: CN=69a4e2ed-6f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:cf:8f:b8:4a:05:20:33:9e:cf:ad:0d:31:
0d:65:65:bb:be:86:f5:f1:95:d4:04:79:31:b6:90:
17:23:d6:74:da:22:05:9b:cb:b7:b2:b8:a4:8f:4a:
f2:d9:e7:09:95:db:33:e5:ef:67:84:fd:43:26:59:
08:8f:e4:f5:62:3a:35:50:7e:46:a4:17:0c:45:13:
a5:6b:16:d3:10:df:43:43:d1:51:7a:87:f2:0c:ef:
bd:e1:f1:90:82:1d:69:25:ab:e6:c6:67:0a:3d:a8:
f7:d0:4a:db:ba:33:ba:1c:cf:65:45:55:18:0a:f8:
ec:30:f4:15:0c:5a:4b:1f:db:ca:e6:37:21:a7:f6:
b2:69:6d:0d:d5:f6:a0:87:5b:84:f0:d4:85:7b:6c:
5f:f0:5c:ba:37:22:8a:07:b1:d6:22:6c:3f:24:b8:
44:a2:93:66:b0:a1:75:b8:cc:96:fa:50:c1:42:f7:
4a:56:e9:11:f3:31:60:fd:0f:68:00:71:7f:99:f6:
87:95:c7:a3:0e:50:4b:da:62:99:0c:f2:e7:9c:4c:
e1:8f:e1:c0:99:d5:e6:bb:fc:7e:88:0e:f0:bb:25:
67:ef:85:0a:b3:f3:49:8c:68:c8:8c:af:30:f9:bb:
ea:62:2f:d2:e8:1e:a1:30:14:f1:d1:37:c2:5b:5e:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:04:5F:46:E3:B4:3C:B0:84:6B:FF:A4:80:FC:B7:76:19:4B:B3
X509v3 Authority Key Identifier:
keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ed:90:60:f7:5f:9f:86:60:9c:71:b8:4a:fa:a0:37:67:fa:
63:41:9a:e6:87:e9:3b:7a:80:8b:fb:22:4a:54:a8:d6:26:79:
7d:af:a9:ac:54:a6:94:f8:7c:9f:1a:21:2f:ff:1d:ab:d0:58:
57:b3:dd:1a:0e:e5:b5:c3:ad:1a:52:24:4d:33:4c:b7:46:5f:
c7:d2:db:e5:ee:d4:94:8c:bc:11:fa:c2:99:22:05:06:40:35:
7c:ea:96:b7:ba:0e:89:e5:29:02:3c:bc:d5:84:63:c2:71:77:
16:cf:e1:c7:61:d6:4f:0f:c8:de:05:e9:97:31:c2:17:cd:47:
37:48:0e:56:bf:30:0d:0a:7a:ad:f2:69:59:b2:df:1b:32:72:
c9:e7:85:91:79:3b:d5:ca:4d:03:62:21:16:67:0d:5a:da:03:
6e:89:c9:5b:75:12:2e:51:d3:73:e5:60:00:0c:da:84:f5:f4:
3f:2f:32:13:9b:a1:c0:16:c7:9e:c7:cd:05:4a:b5:2a:85:9c:
a6:04:1d:74:9f:e3:85:87:9f:de:a2:6e:99:a7:ce:4c:c4:d3:
f0:5a:b3:43:b1:23:6a:cf:9f:66:c6:61:9f:4f:8b:59:29:25:
b1:35:f4:7c:9b:37:d4:5e:84:f0:e6:ad:99:3c:70:3e:54:7d:
07:80:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:47 2026 by rpki-client