
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier: /WtKHa9kL/+Iggvgpu2VcvKrBQXASD4hltUbJeQ8eNA=
Subject key identifier: 97:E4:85:80:AA:A5:3E:34:2C:11:40:37:00:D9:71:22:FB:FE:9B:0F
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 23A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number: 2389
Signing time: Sat 28 Feb 2026 15:50:36 +0000
Manifest this update: Sat 28 Feb 2026 15:50:36 +0000
Manifest next update: Sat 07 Mar 2026 15:50:36 +0000
Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: jWTx1Z6LKlxDraK70AhWQQHoQnLCYz5NrHbSi0UcZ6A=)
2: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: q9f3k0/9mzu8O0vPfqHE4bUZ+gNN9LNqZG8y9E2uN+g=)
3: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: ARvhdF03jn08FnkPuGyPsUdLGmIPEz8JSlhGmy6zysU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9124 (0x23a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Validity
Not Before: Feb 28 15:50:36 2026 GMT
Not After : Mar 7 15:50:36 2026 GMT
Subject: CN=69a30ecc-5d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:b8:94:19:b3:24:87:48:2d:4c:ca:fb:ef:
5c:1f:4a:80:2d:4f:b0:a5:cb:d4:69:af:85:75:82:
4d:0e:56:55:b2:e6:5c:e9:04:27:3d:91:65:f4:80:
bf:0d:c5:88:3c:d9:33:ea:10:14:d2:2c:7b:71:91:
b5:33:32:d5:91:63:03:95:d9:ea:82:b8:f5:f9:a9:
a4:6b:57:22:e0:f7:10:f7:9c:e8:10:dc:97:f5:21:
8d:66:fd:de:47:d1:55:33:fa:77:eb:6a:0c:17:e7:
d9:ab:20:17:5e:c3:7f:e4:9b:ba:f3:47:82:64:87:
f3:b5:da:89:f6:43:ee:ee:50:95:ab:e4:c5:a5:4e:
40:d3:9c:54:25:7b:bc:5b:fb:3f:9b:3c:ae:15:8c:
64:3e:6a:26:d5:db:cc:7a:59:ba:0a:bf:37:7f:c5:
a0:e0:09:4f:48:f9:8a:8e:01:36:14:d1:9c:9d:6c:
39:b0:b8:04:cd:d5:93:79:30:4b:f5:da:8f:ea:2e:
fe:4b:58:48:fd:ac:64:5c:6f:1d:66:90:1d:3b:02:
14:e0:10:5d:ca:48:e8:a5:b2:3c:2a:c5:39:4d:30:
74:b4:9b:38:6a:4f:41:b0:70:d8:a9:aa:a4:af:25:
d8:fe:43:13:bb:4b:f9:63:8b:94:ba:7b:23:d9:5c:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:85:80:AA:A5:3E:34:2C:11:40:37:00:D9:71:22:FB:FE:9B:0F
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:27:9f:53:ed:a3:58:5c:cf:75:b6:77:55:25:8d:2b:04:
7a:97:e4:af:84:c3:62:f6:06:97:f7:34:0e:bc:37:fa:cc:8d:
58:32:83:a8:61:02:2a:3c:4a:1e:f7:83:c3:ee:c1:1d:b1:11:
43:46:43:16:83:d5:92:78:a6:64:62:6f:ad:3a:65:31:e5:64:
d0:68:2a:4d:44:4a:75:69:ea:5e:05:a6:36:6b:cf:1e:5b:40:
d8:ed:39:d6:8f:9d:c6:7a:0d:88:4b:d6:7d:7a:a3:ed:14:fc:
73:82:3a:7f:92:9e:bd:1f:0c:7f:ae:09:eb:9c:e5:28:31:7f:
32:c6:d8:e6:f3:38:ce:c0:99:6e:3d:7f:7c:1b:61:e8:b2:92:
d0:34:a7:34:9e:7a:f3:32:99:75:f2:91:6e:c3:e9:8d:53:50:
a2:dc:b4:b9:f2:ab:b4:1a:fa:ad:b8:6f:d3:73:83:e0:b5:9e:
eb:43:f3:95:4c:2d:f7:16:7d:b8:4d:9d:c3:a5:82:aa:c0:fa:
4e:ab:c0:70:1d:be:53:d2:a0:73:da:67:91:ac:b0:de:d5:c5:
0d:26:52:8e:19:60:2e:0c:14:86:e1:b8:c9:d8:dd:c6:3e:47:
dd:ba:f2:87:2b:c9:3a:55:76:d0:0a:50:16:10:41:ef:d0:e6:
bc:cd:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:49 2026 by rpki-client