
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json)
Hash identifier: fGVXua5C+krfwxzFj1F5tWgdZnRupV+rNtRBLSHCzMU=
Subject key identifier: A2:64:3A:76:EC:9C:2F:E3:C1:0A:77:05:21:11:1E:94:26:68:94:75
Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
Manifest number: 0762
Signing time: Sat 28 Feb 2026 22:05:25 +0000
Manifest this update: Sat 28 Feb 2026 22:05:24 +0000
Manifest next update: Sat 07 Mar 2026 22:05:24 +0000
Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: q48lVHU9OGnotXnHqL9fZ3Me/t15aOUsv5WWOK15PG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6
Validity
Not Before: Feb 28 22:05:24 2026 GMT
Not After : Mar 7 22:05:24 2026 GMT
Subject: CN=69a366a5-edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:96:f4:4e:a6:8a:35:03:d3:67:2e:16:46:
a3:75:40:3a:20:47:d5:f6:e5:e8:65:38:11:bc:e8:
48:28:c4:05:95:7f:06:53:8d:a5:07:91:99:75:a2:
ec:3a:32:cb:fb:9c:a5:af:0c:58:05:2e:88:a0:75:
b8:d9:c5:c2:5d:73:d5:b8:99:fe:28:df:22:08:53:
69:e9:fb:aa:46:86:88:ad:00:39:c3:80:b3:fa:78:
1f:a9:cd:05:56:ed:ea:d6:a8:8d:7e:56:75:fb:08:
2c:41:e7:09:8f:82:e1:ee:9a:0b:28:d9:84:c1:f5:
ab:cb:e3:41:3b:ff:26:f0:32:b4:7d:37:22:d4:15:
4d:7c:ce:a6:d6:7b:28:4d:47:3e:2e:80:ac:a8:6a:
49:49:db:38:03:ee:ed:73:92:92:2f:02:30:8c:94:
ed:f4:ef:2b:21:19:c9:5c:e8:fa:fa:2b:29:5d:1f:
46:ad:a1:72:e2:69:13:7e:01:b3:fb:d5:da:d5:21:
ef:cc:62:12:67:33:59:00:e3:50:57:8d:87:ed:90:
5c:09:8a:cb:50:af:ac:0f:1a:22:87:27:26:ee:08:
df:2a:ab:19:c1:d2:92:3e:70:c4:8f:44:7d:fe:fc:
a1:8f:c7:79:8c:34:28:f2:b5:8f:7c:49:56:cf:aa:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:3A:76:EC:9C:2F:E3:C1:0A:77:05:21:11:1E:94:26:68:94:75
X509v3 Authority Key Identifier:
keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:06:8f:a3:2e:42:ec:0b:53:18:df:e4:3b:dd:ed:c1:1f:
15:dd:1f:28:bc:3c:51:b9:c2:6a:73:1e:ed:b9:6a:41:e3:a0:
48:6b:b1:ec:95:ab:8e:a3:04:e4:51:2f:28:a6:14:5f:c4:35:
07:c9:3a:1c:2c:d6:56:3e:de:79:7d:6f:6c:ac:0a:32:5d:72:
c4:70:31:d7:50:61:1c:e0:4a:75:2c:c6:01:5d:00:c2:4b:ae:
50:da:ca:36:1e:af:84:4a:92:94:4a:25:4c:87:8f:b3:57:f1:
f3:e6:91:08:13:e9:b0:9d:5d:f2:1b:00:d3:a9:2a:ee:4f:eb:
a4:8b:0b:d0:d4:4b:34:48:3e:68:4b:93:af:da:88:a2:e0:14:
8f:7f:36:b3:29:67:73:94:f5:9f:5a:25:db:29:9e:2b:46:a6:
4c:82:6f:e7:0c:6f:a0:fe:93:b3:ea:66:f9:9c:7f:44:85:2c:
90:32:31:33:bb:95:a9:19:ad:fd:17:f5:17:62:b6:e9:09:3a:
4f:85:6d:f7:ed:73:5d:bd:c5:92:26:7b:2c:70:d7:0f:37:f2:
4c:94:45:39:64:c9:d5:d7:7b:a1:3c:a1:ea:b4:63:91:5f:98:
c9:02:2a:14:cb:80:09:9a:9b:a6:51:f6:f3:72:ef:d5:57:f1:
3e:d0:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:30 2026 by rpki-client