
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: lPrBem0dTCyLYnVcZ28KKMAicqWDVfZ5ww7TcizD4J8=
Subject key identifier: A3:3C:A5:03:30:A4:EC:B5:B9:20:6C:6C:38:D7:1A:F2:E8:B9:FF:03
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 0204
Signing time: Sun 01 Mar 2026 03:48:10 +0000
Manifest this update: Sun 01 Mar 2026 03:48:09 +0000
Manifest next update: Sun 08 Mar 2026 03:48:09 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: KSTeSifiYCdBJpJIcDm6+V7wcedwD75yKR9oOdWqs18=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Mar 1 03:48:09 2026 GMT
Not After : Mar 8 03:48:09 2026 GMT
Subject: CN=69a3b6fa-3814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:66:02:5e:d6:00:f2:5c:83:ff:2d:7a:67:
32:bb:82:a4:ef:c9:79:c5:fe:99:9b:ed:41:76:07:
90:a2:ac:8c:a2:5b:68:13:92:08:73:18:d4:b4:68:
f8:2b:35:78:ee:07:9b:d5:8d:56:20:00:2c:4b:47:
01:dc:a1:5b:e9:a6:3d:0f:26:71:7a:a3:7d:9c:a4:
5d:c3:b1:6e:dc:9a:73:7b:b7:91:d5:b7:f6:a7:15:
84:df:61:f7:24:db:f8:e6:12:42:6e:aa:6e:33:e6:
6f:a6:f4:df:49:ce:21:d9:49:66:ad:48:f3:a8:f1:
5f:04:08:d9:3c:2e:9a:d6:21:0f:26:99:44:14:76:
d2:93:c6:f9:fc:20:67:4f:3d:ab:24:2a:5c:aa:8d:
71:8c:b4:97:30:ad:82:fd:d4:69:36:e2:5d:58:0c:
2d:66:23:0b:41:53:71:54:af:64:09:26:09:25:13:
e8:32:07:16:2d:0d:67:08:f3:20:aa:7c:d1:73:03:
fc:c9:58:13:b5:41:37:78:7a:0c:a6:1f:fa:72:45:
c2:e5:a5:ba:f4:63:f7:98:5c:43:ac:83:45:55:87:
4d:85:31:da:90:0a:85:b9:b0:8e:1e:5b:94:7e:14:
e7:26:b1:d6:e4:cb:bd:44:8e:63:36:67:75:ef:90:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:A5:03:30:A4:EC:B5:B9:20:6C:6C:38:D7:1A:F2:E8:B9:FF:03
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:94:55:d1:08:f1:48:7b:bb:49:b8:d7:af:02:84:32:0f:b1:
95:38:02:98:32:00:71:ee:05:e7:c4:2b:8d:ea:13:44:c6:63:
f3:33:4d:7e:6d:c9:d1:b0:43:35:24:10:d7:8a:fc:79:e1:a5:
a8:6f:f9:14:56:04:ac:f8:97:49:97:62:9e:32:6b:65:ca:4a:
5c:88:53:a9:ac:98:8a:56:18:f5:b6:6d:22:d3:8c:b2:f6:78:
b8:e6:d3:6f:9d:8b:c1:a7:82:25:e3:d0:b8:ec:c3:33:02:43:
c8:90:80:7d:03:1b:2a:0f:e2:7b:e8:5a:57:ff:77:bf:69:5f:
3f:8a:9d:cd:66:dc:5a:d4:16:d5:12:0f:3f:ca:5e:d0:a4:a8:
ab:39:b6:68:3d:cd:4d:62:77:de:5e:45:63:27:ad:de:7d:39:
13:f5:43:ca:22:d9:18:94:bb:a3:c7:d1:11:b1:c7:7b:a0:5e:
8d:85:b1:ab:91:a1:68:22:0e:3a:33:25:f1:04:0d:92:11:2e:
db:f1:dc:5e:ba:74:39:4e:f8:91:2c:87:6a:ca:5b:d4:02:16:
58:bc:5a:98:b6:f2:ed:f9:cd:43:39:a3:00:4c:5a:5c:c7:b2:
41:16:68:56:52:f1:d6:a2:e8:ab:38:44:f0:27:d5:fe:8e:88:
39:65:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:21 2026 by rpki-client