
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier: Ayr5xgT8o9RqZtjZwiSxwlnqvaLy5UotblbaKK/5Two=
Subject key identifier: 1E:3A:09:A6:EF:90:0A:7F:4E:36:4C:24:3F:BC:E4:FA:47:0F:0B:85
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 0707
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number: 06C3
Signing time: Mon 02 Mar 2026 01:39:44 +0000
Manifest this update: Mon 02 Mar 2026 01:39:42 +0000
Manifest next update: Mon 09 Mar 2026 01:39:42 +0000
Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: RWYxbtaWk4G8RiZ5UNdpjSObSy3rxBbcl78/GWiJxYg=)
2: E1201A0422D611EFAE700044C4F9AE02.roa (hash: vKRLCMHI6DzeezZqcA22y1WOCwRUjFKs9GH1QdWcjCQ=)
3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: pf1K+6UJXd5dAs7JKyICOO/jFMb69psfiJsvXQNbxBs=)
4: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: iiiauVlcS/qlYnD0UVeEkPiESSpS7cLvUj/CtgxabWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Validity
Not Before: Mar 2 01:39:42 2026 GMT
Not After : Mar 9 01:39:42 2026 GMT
Subject: CN=69a4ea5f-095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:7b:09:1e:8a:fc:22:c5:a8:b4:2c:31:50:
c7:91:05:21:4a:9d:db:55:24:af:f4:85:b8:97:86:
68:ac:53:73:01:9a:17:67:71:7a:a9:9a:c3:53:70:
5b:40:ea:02:fd:0d:99:d0:be:58:ed:6d:c3:9d:f1:
d5:3c:eb:1a:09:e7:85:02:2f:d4:53:45:1e:f7:f6:
17:e7:82:3c:31:69:77:f5:33:32:a0:3b:6c:7e:d0:
77:a9:d9:1b:03:9b:1a:61:55:79:9c:ff:a8:00:f7:
ab:88:9e:d6:d5:2a:eb:8b:c9:96:51:9d:54:b5:2f:
ac:1a:24:04:e7:c8:5a:4f:b5:20:7c:20:21:d4:ad:
77:0e:63:02:8e:48:92:57:a1:f9:0c:92:1a:07:af:
b4:a1:a5:8a:fc:6d:b1:74:4d:dc:be:62:a0:52:85:
fa:0f:a4:4b:cf:93:a2:35:de:05:6e:ae:4e:92:a0:
47:b4:53:10:3c:32:2d:47:ba:2a:42:ee:06:7a:9b:
4f:37:a4:8e:4b:5d:e2:f3:77:4e:18:80:16:7d:95:
0d:dc:f9:93:c9:70:0c:be:4b:9a:fe:04:5e:ad:97:
79:e9:dc:19:31:01:bb:20:1e:75:9c:ae:3a:9d:66:
fd:bb:52:4d:41:52:0b:2b:06:3a:3a:16:0f:15:b5:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:09:A6:EF:90:0A:7F:4E:36:4C:24:3F:BC:E4:FA:47:0F:0B:85
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:48:57:01:c9:9e:e3:a4:ac:77:97:a7:27:a9:0f:05:ae:
d4:91:bd:b6:b6:3f:e8:e5:20:6f:77:6f:64:ff:42:5f:c2:bf:
8f:1e:24:4a:3d:a2:dd:65:71:f5:8d:ed:a6:21:cd:06:b0:c5:
be:0c:ed:50:53:c7:36:90:b3:0a:00:98:55:e1:d0:ba:af:18:
ee:28:96:bb:d0:96:6c:b6:00:57:15:1d:9b:22:ad:a2:c9:d8:
48:e1:b5:86:26:66:ba:30:3d:94:14:dc:ce:2f:58:a2:38:0c:
16:8a:71:b4:d8:b6:fd:0a:6f:21:5e:90:2f:25:6f:dc:fc:2b:
a2:b3:f4:cd:f7:25:92:bc:71:df:f7:ab:25:74:28:5c:dd:38:
67:31:f9:b4:51:a9:f8:c8:d0:1e:5d:d8:d6:ff:22:6e:c3:54:
76:eb:74:07:3a:78:19:58:b8:9c:95:fd:57:f2:22:26:81:a6:
6e:e2:0d:00:7e:a0:1e:3e:f5:5c:36:57:25:3e:0b:a0:ba:5d:
b5:02:52:1c:c1:92:f0:29:d7:7a:06:34:64:c5:3f:de:7b:fd:
e2:3a:a9:9e:8b:61:38:03:e5:14:4e:3e:e0:e2:0f:c4:90:27:
1f:d5:19:29:c0:6f:f5:1e:47:e7:6c:d2:b4:d4:36:3f:3e:56:
b0:98:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:34 2026 by rpki-client