
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier: fSugnfXOopQQSv4Shcs64HG+IIj6pVqgk6/GbjCqaB8=
Subject key identifier: 32:1C:1C:EE:06:B8:04:C8:E2:07:DC:59:FA:90:88:A9:D5:AE:6F:A4
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 06:56:51 +0000
Manifest this update: Sat 13 Jun 2026 06:56:50 +0000
Manifest next update: Sat 20 Jun 2026 06:56:50 +0000
Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: b92WpCBTw8w9Z7IS+u5XzMEyeyiKAUux/OQX2uunGEo=)
2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Validity
Not Before: Jun 13 06:56:50 2026 GMT
Not After : Jun 20 06:56:50 2026 GMT
Subject: CN=6a2cff32-8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:e8:48:88:6a:9f:b5:20:a6:d4:54:3b:5b:
20:e5:f4:38:5d:41:48:ff:32:04:a4:29:32:26:e9:
e9:e9:6c:01:81:90:e7:40:95:69:c8:90:7d:b2:14:
5b:67:3a:32:cf:18:05:29:9d:e8:97:92:e8:c3:3a:
1d:48:86:6e:29:88:7b:fc:83:0a:14:96:c1:a3:45:
b0:e7:3a:c6:91:8f:df:2e:5f:b8:02:3e:90:97:f2:
2c:0b:4c:fc:27:5a:e9:60:60:4e:3e:29:3d:db:a3:
4b:ae:05:74:e4:c4:01:da:a3:f4:17:e8:db:9c:94:
36:37:58:7c:29:cb:dd:0d:81:85:60:c1:a6:c2:71:
50:39:33:4e:c8:3e:b3:12:17:8a:14:54:b9:f6:b0:
31:c0:b0:dd:ff:b3:b4:ba:aa:25:7c:34:c4:2e:fa:
10:a3:7e:22:c5:03:bc:ab:11:e2:8f:df:fc:3b:47:
7b:87:83:9f:8f:c6:4e:ed:d1:92:a6:72:d0:b5:3c:
4b:ec:81:53:d4:42:10:62:8d:71:ef:56:db:f9:14:
b8:6c:19:05:8b:3d:a3:88:d3:67:05:4a:0a:a8:e8:
d2:48:52:28:eb:39:76:52:d7:da:44:bf:89:67:46:
ed:92:e2:49:b4:40:15:9f:a2:28:c0:d3:74:b7:9b:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:1C:EE:06:B8:04:C8:E2:07:DC:59:FA:90:88:A9:D5:AE:6F:A4
X509v3 Authority Key Identifier:
keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:59:ae:d2:48:2d:77:67:fc:ba:c2:f8:24:83:54:52:ee:
3e:34:b0:ae:26:4f:43:4b:26:34:57:2e:91:6c:b8:66:5b:49:
1a:1e:66:b0:42:38:4d:43:91:b5:1e:ed:f0:68:06:ae:93:d2:
8b:6a:04:95:70:bc:9a:87:6c:bc:62:77:9c:b8:4d:f8:1e:a8:
d0:bc:ae:d2:4b:a0:fd:a1:19:63:08:bc:c3:21:4d:ac:db:11:
09:ab:1f:10:11:db:4e:b1:29:54:fb:ad:04:7d:e6:e3:fb:19:
d0:0c:08:8e:c5:e1:e1:7f:2c:f8:c1:e9:76:ad:89:f1:b8:85:
dc:38:ba:14:01:3d:ad:d1:bf:84:c9:a7:a1:a5:99:6e:8e:56:
84:d9:dc:3d:a1:f1:2b:c7:7e:fc:67:f6:48:16:30:c3:81:49:
1e:eb:1e:01:c8:fb:23:e8:31:73:83:5a:2d:03:09:4e:40:77:
5c:43:1e:83:bb:86:51:a5:47:c7:ac:31:7c:88:63:2e:f4:c1:
f8:a7:da:35:cc:df:23:dd:a7:bb:43:ca:89:d4:e8:90:3f:e9:
c4:a8:c2:96:9a:02:4a:6d:af:c6:78:39:30:a2:4c:7e:3d:cf:
5a:5e:9e:23:39:8b:4c:84:a7:00:ff:3d:4e:8c:80:c3:4b:f7:
0d:0e:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:34 2026 by rpki-client