
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json)
Hash identifier: km5W+XQyNiezpCYGE94PjLhNwIO9ky406bB3iPP5Amk=
Subject key identifier: 46:50:85:A9:1F:6D:96:63:58:66:DB:92:0F:1D:F8:89:92:88:9D:BF
Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
Manifest number: EF
Signing time: Mon 02 Mar 2026 02:36:25 +0000
Manifest this update: Mon 02 Mar 2026 02:36:24 +0000
Manifest next update: Mon 09 Mar 2026 02:36:24 +0000
Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: dpBh6tU5LPEOapQbwz4K6eYvvoTUURjKBA7ki1Qk7WI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Validity
Not Before: Mar 2 02:36:24 2026 GMT
Not After : Mar 9 02:36:24 2026 GMT
Subject: CN=69a4f7a9-7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:1a:11:34:dc:77:66:d4:3d:49:be:45:3d:
6b:88:d0:15:e5:92:88:28:b3:c5:7b:c1:d5:0f:e8:
00:af:20:22:38:8a:cd:63:49:35:49:40:1b:b4:ec:
cb:a5:00:62:0a:de:d1:bb:f6:76:02:ae:7c:7a:64:
4d:00:75:e4:de:ef:64:d9:ab:8f:3e:f5:f4:d0:64:
6f:2c:22:73:8c:46:94:cd:0f:40:f7:db:8f:5f:f7:
d4:a7:99:e7:38:3b:25:65:b6:a5:aa:d5:ea:d1:69:
6a:ef:e9:de:14:e0:51:52:c5:23:8d:ab:3b:7a:74:
c2:5f:de:fc:df:73:fa:df:22:41:5f:a2:44:00:06:
83:96:5c:75:fa:72:2b:77:9d:2c:75:03:69:c7:59:
93:5c:7e:14:dd:6b:84:b5:c1:21:8c:a9:e3:15:5f:
d0:f6:7c:e7:ed:48:c4:b9:20:86:44:fd:16:66:88:
f1:04:90:39:4c:e2:21:a7:ea:da:68:d2:0f:72:59:
df:99:8c:98:70:3b:6c:f2:da:1d:41:29:5b:27:88:
38:39:3c:8a:81:34:32:f8:ef:41:5b:4e:06:ba:4e:
49:90:5e:b6:f8:91:a0:c0:d9:2b:d6:b6:09:97:b8:
b8:74:d0:8d:df:42:12:02:88:c7:a3:bd:01:58:56:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:85:A9:1F:6D:96:63:58:66:DB:92:0F:1D:F8:89:92:88:9D:BF
X509v3 Authority Key Identifier:
keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b9:9b:94:7f:38:80:be:19:28:cc:60:90:b1:f0:2b:24:2d:
36:a2:85:48:15:f7:57:86:15:9d:8e:85:82:06:60:de:e2:1f:
1b:af:7f:5a:d2:9c:32:61:d9:be:da:ff:e1:be:1c:32:49:f5:
cb:a7:5b:d9:7e:4f:ae:e2:3d:4b:0b:03:05:c9:0e:8d:10:27:
b6:7e:ac:66:b0:03:8a:50:1d:37:a8:a9:b2:d7:96:6c:4a:f7:
e1:44:de:9d:27:32:2f:ff:db:51:14:bd:4b:dc:14:a6:76:40:
e9:12:bb:ba:95:4a:95:20:8d:0a:08:38:66:db:3b:5d:71:98:
17:a0:95:38:4d:54:19:4f:e2:26:a3:6b:b0:11:17:6c:bb:6c:
53:71:52:3b:62:d9:da:65:36:cc:f9:d4:99:b3:06:f9:83:0e:
17:f1:3e:08:7c:78:e7:84:9f:46:bb:55:b0:c8:26:eb:22:e3:
86:0d:3f:3e:38:2c:e4:c5:32:f2:f0:8a:84:3f:b8:f0:2d:c2:
48:d1:a1:0d:8d:bd:1c:46:a4:60:51:3d:3a:8a:ba:f1:eb:18:
ca:f6:82:82:cf:b7:28:70:63:ff:7d:48:6e:25:89:d6:2a:b5:
7a:ef:09:84:22:40:c4:42:eb:97:1b:7b:02:cf:4b:7d:dd:b4:
52:5a:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:05 2026 by rpki-client