
$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier: WIS5K4LT7Tor+D6WX3G04yUVpCSxDZtX2mq/9u4z0eU=
Subject key identifier: 3B:1F:4B:4C:25:BB:61:F6:D9:6C:0C:E9:FA:87:AA:ED:4C:68:BA:93
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial: 075C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number: 0747
Signing time: Mon 02 Mar 2026 02:54:50 +0000
Manifest this update: Mon 02 Mar 2026 02:54:49 +0000
Manifest next update: Mon 09 Mar 2026 02:54:49 +0000
Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: 7rMNxbTqlzHtoHzfjSLrnblt961A6oZbPjXV4HSI4p0=)
2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884 (0x75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Validity
Not Before: Mar 2 02:54:49 2026 GMT
Not After : Mar 9 02:54:49 2026 GMT
Subject: CN=69a4fbfa-10f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:ab:51:7f:28:d1:9d:84:66:7f:8a:62:3d:
b3:c6:4d:bb:07:38:80:d7:22:f0:a8:45:91:9b:22:
81:5e:9c:de:ec:5b:f0:ed:6e:19:04:38:d5:b0:80:
12:3f:5b:55:f1:7c:bd:b3:cf:a2:94:bf:82:a4:b7:
43:50:8c:2c:62:2f:93:89:8b:6a:cb:aa:f5:cb:4c:
56:e8:98:46:a3:40:ed:20:ac:8a:cc:12:64:60:76:
d6:57:c6:07:31:6a:58:9b:c2:22:4e:0d:d5:73:64:
39:b2:7d:bd:fd:72:1b:b7:2b:ef:e9:9f:6c:41:b4:
fe:68:0d:31:85:1d:8a:08:6f:c3:0a:20:3b:01:fd:
5c:da:26:7d:28:7c:89:5b:f5:52:b6:fd:95:e3:62:
62:52:7d:16:be:f8:31:e0:c0:a9:3a:e5:ae:77:16:
37:74:e6:f6:26:37:0a:f1:a5:00:10:36:4d:ba:40:
3a:90:e2:04:93:69:d2:9f:c7:70:c5:c4:3f:33:04:
45:f5:bb:2a:39:50:83:7f:a1:50:a1:9f:c9:48:47:
24:21:a6:4b:97:4a:c6:49:3a:b5:5f:a9:31:79:d1:
8d:54:56:5c:15:31:54:9a:b9:aa:31:3e:b2:57:aa:
6c:7d:7a:33:81:8a:f1:72:99:60:df:17:39:ea:02:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:4B:4C:25:BB:61:F6:D9:6C:0C:E9:FA:87:AA:ED:4C:68:BA:93
X509v3 Authority Key Identifier:
keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e6:94:38:21:1e:ee:d0:93:8c:c6:6a:a7:aa:bd:f5:41:57:
ea:2d:07:e9:01:d1:35:58:96:98:6b:e2:6b:99:27:02:ef:7e:
5f:64:1b:35:8e:fd:d6:e9:d3:6d:12:c9:cf:60:d0:9d:64:56:
ee:d9:c7:f9:a9:70:47:fc:bb:d7:4e:0e:39:a2:ef:92:e0:42:
97:75:0e:9a:25:80:38:00:98:80:f1:71:e1:a6:9c:24:e9:90:
01:87:86:96:ba:43:67:8c:6b:50:fc:15:8e:9b:84:0f:57:82:
87:fd:a9:57:0a:f0:39:73:ff:a6:93:4f:2f:ac:0e:61:53:d8:
58:1e:cc:77:d4:16:f6:e3:5f:e9:48:46:09:46:d4:63:72:74:
58:f9:65:d5:fc:44:8d:dc:8c:a9:3a:5a:68:09:34:ca:a6:2e:
45:13:10:35:f2:39:49:bf:3a:f3:c4:67:27:a0:e9:dc:47:b1:
ec:ec:d7:b9:d3:33:7b:48:7c:9b:dd:37:82:a3:79:69:30:22:
00:41:fc:bb:73:89:ac:b1:c7:b4:c4:50:f6:a2:bb:c4:cf:c9:
ea:f3:a8:7b:48:7f:1d:3d:95:c7:fe:45:0e:a5:a3:e4:99:0b:
a5:47:a2:b6:69:a7:b0:d0:47:e7:da:5a:3a:f8:fd:54:cf:78:
eb:60:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:44 2026 by rpki-client