
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier: 8PsIKSqJRzjUJmn9bKDUMk8kLQQh8v5hQ9cAPig3B0I=
Subject key identifier: 9A:29:65:8D:4F:7D:C4:21:15:B9:54:28:34:2E:04:FC:E6:72:D9:76
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number: 90
Signing time: Sun 01 Mar 2026 08:47:46 +0000
Manifest this update: Sun 01 Mar 2026 08:47:46 +0000
Manifest next update: Sun 08 Mar 2026 08:47:46 +0000
Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: zXBNYxAMA+Qvp/EWfRACO2yrYUfV0vibudg8/5BrmgU=)
2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: Mar 1 08:47:46 2026 GMT
Not After : Mar 8 08:47:46 2026 GMT
Subject: CN=69a3fd32-a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:37:3a:c6:a3:e9:70:4a:47:76:03:68:16:
21:c3:fd:88:f8:37:b9:1a:93:68:c3:e6:3a:c1:cf:
b4:69:d6:4a:40:40:41:6b:32:f2:69:08:4b:d7:ce:
ab:23:51:09:6a:34:c8:8d:bb:12:4d:e3:99:8f:66:
7b:c8:36:58:ea:b5:72:e6:fe:d0:41:c0:18:f4:cd:
b5:98:ba:ae:33:83:07:88:ac:6c:b2:f8:80:07:5e:
85:a1:43:ad:55:a7:e0:37:c8:dc:50:e8:b2:b3:1a:
5a:2d:91:97:f5:7d:5a:76:10:34:c7:85:99:b3:b7:
ff:a5:86:ca:20:c1:6e:f0:09:87:c2:91:a2:97:7d:
97:35:6c:e9:b6:e4:dc:91:f4:d3:8a:5d:17:c6:61:
3b:4d:65:5c:b6:7a:20:f6:db:ea:65:34:db:49:32:
17:20:23:a5:df:a6:ae:be:b3:c5:95:bc:0c:00:38:
5a:ec:58:59:83:a2:6a:ca:96:3a:92:02:9d:43:30:
bc:b2:51:00:52:2d:16:1c:3e:7b:00:51:ff:67:32:
6e:19:b1:91:3d:05:dc:ea:bf:ea:18:3f:04:54:7e:
9a:6b:4f:cc:15:97:38:2a:74:55:26:20:3e:da:a6:
ff:60:bf:4d:e8:49:0d:33:3c:3e:28:fa:a1:83:90:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:65:8D:4F:7D:C4:21:15:B9:54:28:34:2E:04:FC:E6:72:D9:76
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:24:3f:fa:11:05:9f:37:66:75:a8:49:3f:21:05:5d:76:
ae:df:bb:c0:b3:3a:09:aa:fa:43:8e:97:dd:b6:b8:a1:50:9b:
cc:b7:64:bc:f8:db:98:93:84:62:9a:ac:5e:c0:d0:70:77:82:
16:2f:e1:ec:99:89:99:73:d3:dd:b1:0a:6f:e4:87:af:7f:2f:
6a:18:27:93:0e:1f:b8:a7:87:b3:d2:1b:4b:e8:b3:21:ba:e1:
70:bb:61:8c:d2:4c:f6:b4:be:69:78:63:a3:c7:1f:d1:5f:8c:
9c:86:fe:a7:6a:8f:4a:6b:ec:a5:47:3e:c9:aa:7c:89:7a:5d:
d4:a3:84:9b:40:30:3a:52:d4:dd:4b:1d:f4:fa:b5:bc:dd:b8:
91:96:85:54:cb:7d:7c:ff:25:e5:13:f1:2f:c5:20:ac:b3:9b:
76:ec:0a:56:d8:43:7f:7a:41:38:09:7f:69:62:f1:f7:d5:68:
a0:96:d8:6e:0e:1b:dd:74:f2:d6:e0:0c:4e:c2:82:13:00:7b:
b4:5b:eb:69:e9:fd:7f:c9:0f:3b:78:ab:d6:89:47:65:4e:28:
83:ec:0d:de:8f:13:a7:39:50:cb:68:e9:dc:34:e1:fb:30:88:
06:01:ca:9a:f4:de:4e:98:08:e2:31:0d:4f:f1:a7:fd:e8:5a:
1c:a3:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:16 2026 by rpki-client