
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json)
Hash identifier: nlZAll6RLtM5SLjOQkZpet2bpbvorF2d39h/rHLc2PM=
Subject key identifier: BE:B1:BC:C3:43:1C:FB:D8:46:67:B4:F6:23:E3:EA:06:18:39:F5:0B
Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B
Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
Certificate serial: 080D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
Manifest number: 0805
Signing time: Sun 26 Jul 2026 21:54:05 +0000
Manifest this update: Sun 26 Jul 2026 21:54:05 +0000
Manifest next update: Sun 02 Aug 2026 21:54:05 +0000
Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: NiPMJfek/nvwoEMvxYKLnLCmrXqQTYRA4J0iC/iETfc=)
2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: mKwK5iOPGex40HNrt/NQkPkIKFqlB9W9tlJIyUVibC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl
rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B
Validity
Not Before: Jul 26 21:54:05 2026 GMT
Not After : Aug 2 21:54:05 2026 GMT
Subject: CN=6a6681fd-91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:98:6f:ea:d7:f2:5d:f5:be:ce:74:3a:0d:
14:15:ba:8d:0a:69:69:89:15:6e:7c:88:03:e2:b7:
c4:88:27:04:ac:b1:0a:23:d6:26:38:38:2b:d1:a8:
7e:1a:54:b6:fd:11:19:af:85:c1:4f:c7:3f:04:6c:
17:ec:90:11:28:d7:d7:63:b2:db:19:00:c5:74:33:
ea:89:94:15:51:95:15:52:b8:73:5c:58:06:29:30:
cf:fe:f3:ae:1d:9f:f1:6d:b0:40:36:46:f8:cf:f5:
08:b4:19:91:0f:a8:02:ef:0f:e0:db:63:f0:86:cb:
d1:d6:63:eb:02:a9:7c:ba:a8:4f:85:6f:39:35:26:
0d:ce:68:c9:45:25:86:b0:21:3f:5b:07:27:fc:c8:
fb:75:e2:71:08:ec:cc:35:00:ab:7d:24:f1:c6:47:
1b:e9:f6:b7:f8:75:3a:87:c7:64:94:79:22:de:70:
4b:33:48:13:09:03:7d:73:1d:8b:86:e3:92:e5:a4:
a9:40:91:2a:56:7f:7c:51:4c:c9:a2:e6:0a:88:67:
32:c3:eb:17:b6:c4:63:a8:2f:99:ca:bf:ad:9b:67:
95:c6:6f:ca:2b:46:4d:6a:72:ef:38:4d:ed:ca:fc:
06:eb:99:88:29:60:7d:02:26:6c:40:ff:fd:2f:aa:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:BC:C3:43:1C:FB:D8:46:67:B4:F6:23:E3:EA:06:18:39:F5:0B
X509v3 Authority Key Identifier:
keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:47:99:1c:1c:2c:e5:45:ba:d0:d3:5b:24:3e:dc:ed:f5:26:
ef:9f:62:56:94:0f:cf:1f:93:00:d2:bf:9f:86:3c:64:b8:80:
ed:dc:b0:82:34:86:06:55:38:23:71:54:97:29:32:5b:52:52:
cf:4f:9f:5d:cc:3a:17:e2:9b:76:97:bd:e7:fd:85:d6:67:75:
f0:22:2e:d7:47:f3:49:06:96:32:f6:76:d5:72:52:04:ff:65:
f0:fe:11:dc:8a:bb:69:1d:0c:c5:ac:40:11:46:a1:ec:0b:93:
29:ed:42:d0:ea:2b:b6:39:50:6e:5f:63:ae:4d:a3:cf:98:30:
ec:35:27:f6:01:b8:97:0f:ad:fb:d1:db:cd:71:85:e6:1f:05:
3a:16:1c:17:1b:0d:91:78:b9:3a:e3:1f:70:10:31:42:9f:e8:
bd:b5:4a:ce:99:c5:8d:f9:31:d9:0a:3f:ee:4f:31:db:d8:21:
b9:bc:47:42:33:c7:7c:83:a0:cb:58:9c:32:60:28:77:d4:68:
08:d5:dc:e3:47:fb:cf:2d:d5:5f:b0:18:be:dc:bc:4b:84:53:
0d:e2:e8:78:7b:5b:e8:19:eb:70:9f:35:30:e1:e3:38:39:c3:
8d:9a:87:10:54:f7:49:d7:e7:4f:c7:ff:da:7a:28:c9:2a:00:
eb:21:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:35 2026 by rpki-client