
$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier: yvHBkAf81+tmesIbG5vTuTs+OEXZZXcsV1iEm57bVVU=
Subject key identifier: E2:8D:BF:6E:C3:48:7A:1F:7D:5F:0D:20:9D:F3:E4:DF:5E:BD:BA:DA
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial: 0310
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number: 0309
Signing time: Mon 02 Mar 2026 02:23:25 +0000
Manifest this update: Mon 02 Mar 2026 02:23:24 +0000
Manifest next update: Mon 09 Mar 2026 02:23:24 +0000
Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: PW6NTz0+B1TwxYjOAmEHqk4YqWpT6LXH7wZmHdfpwao=)
2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: GH8dqSP0QmMlKcJcp63ed2knJx2c+htyAC4yLriIV0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784 (0x310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Validity
Not Before: Mar 2 02:23:24 2026 GMT
Not After : Mar 9 02:23:24 2026 GMT
Subject: CN=69a4f49d-c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:39:d0:fa:45:fb:c4:d0:f9:da:38:5b:64:
3e:2e:9c:ac:0c:41:8e:17:14:d8:6e:67:3d:8b:29:
88:38:5d:ac:bd:37:93:87:f4:c9:71:ee:3a:cc:fd:
2f:4c:2e:be:72:88:f1:03:91:d4:07:b5:e9:54:e3:
35:23:ab:c9:7c:6e:74:63:df:95:42:5e:46:69:12:
03:6c:31:3b:48:11:8a:76:e8:5e:76:23:7d:44:d2:
4f:66:48:b2:3a:e5:c1:d1:3e:fa:ea:6c:b2:0e:20:
60:ef:34:3e:67:c3:b1:79:c3:bc:e2:fb:04:7d:ca:
3f:ff:f3:d8:ea:68:f1:4d:e7:29:77:f9:74:98:20:
51:00:da:bd:a3:25:a9:8c:35:e8:dd:19:1f:f7:a4:
70:c8:62:3d:4b:00:af:6b:49:b7:56:b5:8b:8c:8a:
9a:46:49:f6:5f:c9:28:a4:36:0a:60:dc:05:5a:78:
ff:44:26:6f:cd:4a:1c:ac:1a:51:a3:ce:f7:1f:32:
c8:1e:07:b7:9e:07:1d:a1:19:84:1e:65:bc:d3:fe:
43:22:e6:68:75:13:1d:92:22:12:ee:ef:ab:18:8c:
72:b3:0d:77:63:a3:19:1a:2f:8f:68:96:1e:89:98:
7b:48:50:43:36:95:40:f7:fb:cf:30:b3:12:62:fe:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:BF:6E:C3:48:7A:1F:7D:5F:0D:20:9D:F3:E4:DF:5E:BD:BA:DA
X509v3 Authority Key Identifier:
keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:d8:c9:d7:4f:ed:5d:11:c5:47:9a:36:26:5e:a8:69:47:
58:0b:50:52:e7:44:2b:08:a4:a7:17:83:92:d8:94:85:c1:a0:
e1:d0:3d:2c:ac:bb:1d:4c:83:b2:c0:b4:db:20:04:97:83:82:
c0:7f:6e:cf:db:85:5f:59:72:0f:d4:0c:61:5f:3b:33:fe:80:
7f:42:7d:d8:8f:44:e0:35:b8:dd:b1:fb:54:18:24:7e:2f:d2:
8e:a1:e8:24:52:98:b2:b8:58:af:d7:4e:40:1b:5d:8f:19:9f:
d6:97:b5:94:c0:03:c2:0e:7b:77:36:d6:c4:ac:e9:7c:9f:3d:
d6:48:75:f6:d5:4a:30:a9:7d:d0:41:8e:38:5a:e3:8e:af:66:
ad:24:ab:9f:dc:23:1b:35:63:6f:cd:89:df:eb:cc:80:b8:03:
a2:e3:e4:08:e0:d1:9b:3c:8a:11:23:6b:5f:4f:f0:69:7f:7d:
df:6d:5f:8a:09:1f:87:0d:af:3b:80:7f:44:84:64:78:85:02:
fc:e5:22:19:56:ae:04:4a:4b:3b:76:5a:33:04:6d:0f:cf:5b:
db:12:c2:80:d3:99:ff:40:27:46:de:09:88:6b:3f:be:c4:b8:
6e:9b:bd:48:c4:c0:31:f7:ef:48:27:04:26:c5:aa:30:31:9c:
a9:72:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:20 2026 by rpki-client