
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json)
Hash identifier: ELC6oAou01MFMNaDR0pDAESSTlTKcg8qzAEwV32TH64=
Subject key identifier: 58:20:0D:EA:AD:CF:79:F0:F9:05:FD:29:E7:9A:38:46:F5:7E:8B:78
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
Manifest number: 7E
Signing time: Mon 02 Mar 2026 00:12:02 +0000
Manifest this update: Mon 02 Mar 2026 00:12:00 +0000
Manifest next update: Mon 09 Mar 2026 00:12:00 +0000
Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: 8E1rgk7QbpoWQ/OVXZX1ZUsCj5nHiOV8Fy3nO4uhg3o=)
2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: cYTCxTJqdWhfcLPLf4tTyEX/AXCjDKPWHXDI+ywAuSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Validity
Not Before: Mar 2 00:12:00 2026 GMT
Not After : Mar 9 00:12:00 2026 GMT
Subject: CN=69a4d5d1-0dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:41:7f:e9:1d:d7:69:57:52:a0:6b:ec:29:
ef:76:99:10:99:67:92:5d:a1:4b:5d:c3:49:03:47:
36:4f:b3:14:7d:b5:9d:88:88:c9:e1:b6:39:f2:6f:
90:c6:e5:98:3a:bf:40:b2:49:2f:50:7a:3f:04:f7:
ee:64:90:86:c1:ef:66:35:e0:2e:6d:8b:b6:27:30:
4c:ff:fe:e5:74:47:5e:36:c5:91:f8:9b:59:09:66:
66:ff:9b:02:41:70:71:3e:59:63:0e:d7:0c:f2:6d:
20:55:b7:5d:6a:33:e1:1f:8f:9f:fd:ce:e0:50:9d:
aa:52:34:6d:a8:e7:2a:1c:97:38:80:1c:2e:9f:0a:
0f:ef:99:fd:45:82:38:d1:59:36:f9:92:a2:76:3f:
d1:90:78:7e:bd:3f:2a:e7:ef:45:71:1c:76:0b:ae:
93:04:96:91:93:e1:0d:35:03:22:fc:80:0f:49:b1:
f8:99:1a:25:5c:e1:10:1a:49:10:53:35:05:b3:c2:
63:c3:c2:c5:c8:24:3b:e3:c2:25:71:d3:d2:5e:cc:
c1:c3:76:1f:03:4c:e3:6d:10:d5:ed:26:c0:af:02:
9c:a7:23:61:ea:db:e7:07:db:5d:10:b9:ed:b0:54:
5d:e5:e2:b0:bd:ad:84:76:62:b7:c4:62:61:de:f4:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:0D:EA:AD:CF:79:F0:F9:05:FD:29:E7:9A:38:46:F5:7E:8B:78
X509v3 Authority Key Identifier:
keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:5f:66:23:1a:71:bc:55:b2:5a:3f:54:7e:ff:54:b1:89:0d:
ea:d5:35:36:63:ec:ae:9a:c2:7b:3d:2d:f0:30:59:31:72:3a:
15:66:f3:51:45:6b:0a:b8:e0:9e:20:9d:ca:c7:b9:5c:e6:7a:
88:94:2c:ac:88:bd:f0:10:aa:50:b1:ea:80:2c:38:84:66:f2:
5d:52:df:b8:c4:af:a9:ed:02:cb:b2:0a:18:a3:06:c0:8a:64:
9d:f1:f8:a8:f8:30:85:91:68:c5:7f:00:75:83:3b:9a:d4:d2:
ad:9f:31:bf:fe:11:f2:b3:94:19:d3:2b:1d:b8:a4:ed:ad:64:
e1:2f:37:99:d4:af:10:57:08:52:f3:04:9f:b5:09:64:61:ea:
e3:19:66:16:00:40:8a:e4:49:70:ae:8a:80:92:01:7e:06:a2:
8a:a4:25:55:7a:a6:60:f6:92:02:bc:ee:65:79:51:88:45:bb:
2c:29:58:f9:59:34:7e:6e:4d:40:b7:df:f4:5b:3d:5a:59:9f:
65:ba:19:e9:1c:8b:4d:74:64:28:22:de:0d:9e:9c:72:83:7c:
f4:9b:f2:62:60:57:10:92:2d:4e:24:c1:3e:5c:b4:c8:19:65:
38:bc:40:b6:6d:88:8f:9f:88:0b:8a:8a:66:0a:06:5e:bc:73:
77:05:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:17 2026 by rpki-client