
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json)
Hash identifier: 9TEa9V/CeHOCEYdcvTGgoquVagOQVQXydG8DCjjKIek=
Subject key identifier: 1A:C4:46:49:05:C9:F3:96:99:AD:7E:9D:65:50:38:6D:91:F1:B2:34
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
Manifest number: 0251
Signing time: Mon 02 Mar 2026 01:25:03 +0000
Manifest this update: Mon 02 Mar 2026 01:25:01 +0000
Manifest next update: Mon 09 Mar 2026 01:25:01 +0000
Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: KbNdDPgLchqurikzma9PZn/MR1HjyX00WW/c7OpIDQU=)
2: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: v3YArWNkFrdMq+ee+R0bqrCDqiwPYpiGlz8cLqE3fYY=)
3: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: s7T3fDzFUmaFMuceB1FEdhH7hiWK+2N1YXF00t2ZV8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Validity
Not Before: Mar 2 01:25:01 2026 GMT
Not After : Mar 9 01:25:01 2026 GMT
Subject: CN=69a4e6ee-ac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:de:53:06:0a:1a:ca:e1:53:e8:a5:95:c9:d8:
4c:fd:21:07:81:e9:04:5c:78:c6:a1:d1:4d:fa:80:
19:3f:03:08:34:2b:08:e2:76:f2:fe:01:15:78:7a:
c8:d8:64:ca:03:66:2d:99:05:60:c5:01:f3:a7:92:
46:d8:9e:4f:19:f9:05:c1:d5:38:8c:1c:c1:63:83:
e1:07:08:bc:76:5f:c1:6f:91:df:e2:e9:f3:91:02:
fd:27:89:b4:dd:a3:e9:a0:09:72:e5:10:93:79:d1:
93:08:2d:4c:27:da:81:91:6a:32:03:46:da:04:42:
09:08:9e:ea:b0:7e:d9:48:6f:7a:36:45:14:0a:38:
02:7c:51:71:20:d9:de:ad:91:74:11:5e:36:d7:17:
1c:41:60:1c:2d:eb:68:bd:2a:e9:dc:a3:a9:e0:b3:
b8:bd:92:cd:4a:34:02:ef:79:30:22:3d:ff:7c:b2:
b1:16:f9:cc:2b:b3:81:ba:ba:a3:54:01:0b:3c:e6:
8e:9d:81:71:c3:69:b7:d1:ed:62:d1:77:0a:a4:f5:
b2:39:24:5b:38:e9:c7:6a:e0:9d:8c:ae:07:d7:e2:
d5:7c:b0:f4:13:ee:f9:79:47:2f:30:4e:55:78:57:
6d:ba:8d:2d:01:01:7e:f2:37:4e:f4:20:60:f4:37:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:46:49:05:C9:F3:96:99:AD:7E:9D:65:50:38:6D:91:F1:B2:34
X509v3 Authority Key Identifier:
keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:27:3c:c8:4d:23:c7:23:13:27:58:b7:0c:1d:f3:92:0e:67:
98:00:d1:ff:1a:2d:01:33:78:7b:81:2b:24:3d:79:11:e4:3e:
d4:94:6b:ad:86:27:f7:d7:6d:2d:d0:09:96:8e:d3:e0:c7:4d:
ca:f6:a9:2c:d3:9e:2a:76:7c:85:84:c0:2d:c4:51:ec:a4:95:
37:99:72:ff:af:15:f4:53:36:87:68:9c:8d:93:0e:9b:85:25:
b3:ed:6f:34:75:c9:ba:02:05:63:68:52:dc:a5:4a:84:20:7d:
a1:32:a5:f9:d6:78:5c:3f:b2:29:9a:9d:e8:72:70:b3:33:b3:
4e:20:61:e3:22:a7:74:7c:8c:42:5a:ce:d2:6d:21:2d:97:7d:
d4:32:d3:94:00:ce:ac:af:8e:61:43:dc:2e:d9:ce:37:d4:68:
49:c0:90:a9:26:85:8e:17:2a:51:96:c7:15:27:59:af:c3:04:
7b:85:76:44:f0:ca:2f:42:a2:df:a8:a7:ef:69:eb:56:b1:ed:
57:0f:d5:51:c4:0e:d2:0e:7e:76:f9:70:20:3d:16:7a:63:d0:
a9:05:b4:07:ce:e8:31:10:31:60:ef:fc:28:d2:bf:92:7b:bc:
17:d2:a9:63:7a:09:f7:48:ad:12:ee:61:ae:ea:65:32:b0:2c:
54:85:69:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw
NzA4MzBCNzEwHhcNMjYwMzAyMDEyNTAxWhcNMjYwMzA5MDEyNTAxWjAYMRYwFAYD
VQQDEw02OWE0ZTZlZS1hYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8d5TBgoayuFT6KWVydhM/SEHgekEXHjGodFN+oAZPwMINCsI4nby/gEVeHrI
2GTKA2YtmQVgxQHzp5JG2J5PGfkFwdU4jBzBY4PhBwi8dl/Bb5Hf4unzkQL9J4m0
3aPpoAly5RCTedGTCC1MJ9qBkWoyA0baBEIJCJ7qsH7ZSG96NkUUCjgCfFFxINne
rZF0EV421xccQWAcLetovSrp3KOp4LO4vZLNSjQC73kwIj3/fLKxFvnMK7OBurqj
VAELPOaOnYFxw2m30e1i0XcKpPWyOSRbOOnHauCdjK4H1+LVfLD0E+75eUcvME5V
eFdtuo0tAQF+8jdO9CBg9DcueQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrERkkF
yfOWma1+nWVQOG2R8bI0MB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB
M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s
eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqic8yE0jxyMTJ1i3DB3zkg5nmADR/xotATN4e4ErJD15EeQ+1JRrrYYn99dt
LdAJlo7T4MdNyvapLNOeKnZ8hYTALcRR7KSVN5ly/68V9FM2h2icjZMOm4Uls+1v
NHXJugIFY2hS3KVKhCB9oTKl+dZ4XD+yKZqd6HJwszOzTiBh4yKndHyMQlrO0m0h
LZd91DLTlADOrK+OYUPcLtnON9RoScCQqSaFjhcqUZbHFSdZr8MEe4V2RPDKL0Ki
36in72nrVrHtVw/VUcQO0g5+dvlwID0WemPQqQW0B87oMRAxYO/8KNK/knu8F9Kp
Y3oJ90itEu5hruplMrAsVIVp2Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:50 2026 by rpki-client