
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json)
Hash identifier: rF+3pJprrlfLhEK6HqSAkPHYKLIubp5CgPC7JGQKQR0=
Subject key identifier: DA:A4:D1:33:A8:D4:F5:F0:E3:BF:C0:52:DC:57:7E:1F:2B:51:4E:75
Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
Manifest number: 0107
Signing time: Fri 17 Apr 2026 05:47:38 +0000
Manifest this update: Fri 17 Apr 2026 05:47:38 +0000
Manifest next update: Fri 24 Apr 2026 05:47:38 +0000
Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: SLbSmEXt4sJXuZ3d/YChrY3/OmYyOEW2wjbU7N6Ej5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Validity
Not Before: Apr 17 05:47:38 2026 GMT
Not After : Apr 24 05:47:38 2026 GMT
Subject: CN=69e1c97a-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:7c:62:0f:31:75:77:6e:61:5e:e1:0f:e4:
97:60:90:de:d0:2d:28:eb:bf:23:ea:77:17:d8:0e:
7c:f3:9b:11:c8:5d:0a:2c:f7:8c:6b:92:e1:d6:dc:
08:d6:77:3e:7b:8b:4f:3b:b3:53:6a:9e:f1:b3:07:
c1:b4:4a:19:1c:d2:30:bf:de:66:28:42:ed:34:4b:
37:b1:ea:53:b2:26:43:ea:50:68:c3:2e:80:09:45:
06:9a:53:b3:58:e9:ea:ca:16:9c:1c:85:9a:a4:e8:
09:da:27:6d:b3:1f:88:d3:c7:c5:2f:6e:6f:55:31:
6d:c8:88:97:f2:58:c7:6a:8d:78:c4:58:2a:ad:58:
68:b9:06:49:71:15:4a:61:60:ab:33:dd:bd:34:3d:
a0:87:e0:e9:88:53:50:6f:79:63:60:c4:d4:41:85:
be:b0:a6:39:e0:6c:0d:42:31:00:7c:28:d7:07:a7:
ae:08:49:99:7c:7b:4c:3a:76:35:6f:51:99:71:06:
25:28:9d:e4:eb:d8:6c:cb:52:dc:e7:11:3e:6a:ad:
65:a2:76:c5:52:00:0f:1a:b9:e0:a7:e8:1d:60:b2:
34:b2:13:50:08:bb:1e:d8:c6:06:30:32:7a:0b:8c:
7f:36:dd:31:b9:0d:ba:13:c3:44:1a:81:69:6c:e2:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:D1:33:A8:D4:F5:F0:E3:BF:C0:52:DC:57:7E:1F:2B:51:4E:75
X509v3 Authority Key Identifier:
keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b6:88:e3:27:71:67:5c:54:52:95:ce:6f:31:5e:64:ca:52:
7a:bb:28:ba:c3:50:63:ca:8a:71:da:c1:0d:e0:bc:8b:86:00:
65:27:02:d5:ce:86:3e:6d:9d:6f:22:a1:d7:de:3b:c0:0e:e6:
95:2e:2e:e4:e5:f7:e8:5a:78:07:dd:4e:f7:21:9e:1f:f2:cd:
7a:93:01:a4:d4:86:35:c7:90:3d:41:da:eb:95:fe:15:73:83:
20:67:f7:e0:44:7e:e1:df:13:a8:b9:c8:54:f8:65:1e:7e:f9:
4c:6c:d1:a2:82:56:ca:3f:f5:ff:fb:8a:37:3b:b4:57:e0:95:
79:bd:b4:f7:54:2e:68:60:70:c9:97:f8:39:14:89:a1:9d:45:
b3:02:dc:51:78:c1:92:ba:71:7f:dc:bf:28:b3:69:90:0e:85:
42:87:6b:82:ab:18:f3:99:a1:6c:48:b6:e6:31:90:c4:73:22:
a8:c3:29:26:dd:e0:2a:a5:8f:47:e9:b9:c9:05:6b:e7:a0:93:
be:bb:04:fd:82:e3:02:b4:2a:72:d4:2e:b9:3a:dd:de:39:d4:
95:7f:20:f2:05:13:43:4d:7f:e8:80:86:13:76:b3:67:f1:47:
0b:7a:9e:1d:87:79:dc:c0:f0:30:6b:33:0e:31:99:62:c6:d3:
e0:4b:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:41 2026 by rpki-client