
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier: DAf5Vi7jk/s4Yf7EP6NwsZtbVnqitW2T0tdAhSVhhy0=
Subject key identifier: D5:84:F8:72:37:F0:5D:1A:98:55:A9:A8:A1:7E:48:C6:66:0A:6D:34
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number: 027E
Signing time: Fri 17 Apr 2026 01:46:46 +0000
Manifest this update: Fri 17 Apr 2026 01:46:46 +0000
Manifest next update: Fri 24 Apr 2026 01:46:46 +0000
Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: rkyZetCItUBlbB9fBMoo2jGVGTHy65yXUugoP1ECGTw=)
2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Validity
Not Before: Apr 17 01:46:46 2026 GMT
Not After : Apr 24 01:46:46 2026 GMT
Subject: CN=69e19106-2f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:ac:b3:9c:31:bb:9f:8f:f2:95:e1:86:5b:
b2:e3:1c:6b:08:7f:a3:bd:2b:3d:47:5e:93:fd:c0:
98:4c:13:ec:1d:78:e8:94:21:17:49:e2:e5:43:71:
d1:2e:cf:a9:24:d9:db:19:e4:2f:ea:64:23:8c:c9:
6d:43:a9:82:bf:40:4d:8a:7e:a7:3e:03:ab:59:7f:
d8:b0:0a:db:72:57:98:74:58:df:81:00:8d:21:3e:
6a:72:1b:97:36:ed:79:9e:a4:56:35:3f:8b:80:3b:
4f:5b:e7:6a:bf:23:7f:5b:ec:bd:72:53:f3:7b:6a:
41:f9:9b:5d:47:60:ee:c4:e7:b1:cc:11:64:f6:c0:
1d:57:df:6d:9c:4d:c7:aa:92:88:d5:3a:fe:6e:48:
51:e7:82:95:8d:12:37:9a:1d:4c:76:b2:4e:59:0b:
66:94:db:8d:f3:33:da:76:66:83:63:9c:1a:28:cf:
01:7a:4f:33:c3:10:d0:51:e5:5e:88:92:80:f2:9a:
b4:6c:1f:a8:34:af:1b:a6:05:03:b8:89:d3:50:68:
8a:b0:1f:0d:bd:cc:f7:9f:c9:01:75:e8:3d:16:7e:
c4:f4:72:74:28:d0:eb:9c:8a:c6:0c:46:78:34:41:
96:24:81:46:c3:af:7a:22:1d:32:cf:29:15:4a:2f:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:84:F8:72:37:F0:5D:1A:98:55:A9:A8:A1:7E:48:C6:66:0A:6D:34
X509v3 Authority Key Identifier:
keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:f8:a0:74:8d:fe:f1:3c:4d:fb:0d:9c:8f:a7:28:2e:c7:
cb:c2:ab:c7:d7:fe:5e:b6:de:84:38:30:2e:14:0b:74:f0:8e:
99:41:34:05:9a:f6:e8:82:cd:8a:76:e5:ea:0a:4c:7c:31:d1:
93:06:76:4c:80:00:26:af:0a:6e:d3:64:a1:c5:a0:0e:dd:b9:
e5:c7:b0:13:e0:a3:ec:e8:0a:bf:30:2e:6e:21:17:02:97:6d:
85:00:de:51:a7:a5:7a:08:1a:f9:2b:56:95:90:b3:01:5f:67:
bd:f7:67:ec:52:44:cd:76:fe:e1:a1:08:c1:c2:de:99:be:52:
1b:0e:1a:00:03:02:46:70:03:dc:bb:0a:f5:ec:43:e8:ba:4a:
06:90:77:bd:76:c3:5c:00:8b:98:6c:0c:18:5f:b3:87:42:ce:
41:29:f3:cd:08:7b:08:0b:80:6c:8b:0a:2d:8c:0b:e6:67:1a:
b6:2a:51:7b:8d:10:45:3e:98:a7:9a:f0:59:c0:95:b1:a1:b8:
e8:56:ee:d1:35:6a:fc:2b:87:46:e2:dc:73:1b:e8:f8:7f:bd:
53:66:05:31:24:30:df:8a:f6:92:b2:a1:0d:b6:1b:b6:e5:cc:
81:00:0a:21:0c:70:85:4c:95:c0:b5:e9:5f:34:b7:63:66:16:
93:a2:26:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0
N0E1Qzc0NzEwHhcNMjYwNDE3MDE0NjQ2WhcNMjYwNDI0MDE0NjQ2WjAYMRYwFAYD
VQQDEw02OWUxOTEwNi0yZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjw2ss5wxu5+P8pXhhluy4xxrCH+jvSs9R16T/cCYTBPsHXjolCEXSeLlQ3HR
Ls+pJNnbGeQv6mQjjMltQ6mCv0BNin6nPgOrWX/YsArbcleYdFjfgQCNIT5qchuX
Nu15nqRWNT+LgDtPW+dqvyN/W+y9clPze2pB+ZtdR2DuxOexzBFk9sAdV99tnE3H
qpKI1Tr+bkhR54KVjRI3mh1MdrJOWQtmlNuN8zPadmaDY5waKM8Bek8zwxDQUeVe
iJKA8pq0bB+oNK8bpgUDuInTUGiKsB8Nvcz3n8kBdeg9Fn7E9HJ0KNDrnIrGDEZ4
NEGWJIFGw696Ih0yzykVSi+gsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWE+HI3
8F0amFWpqKF+SMZmCm00MB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG
M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS
aWNlZURuU294N2hIcGNkSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfMX4oHSN/vE8TfsNnI+nKC7Hy8Krx9f+XrbehDgwLhQLdPCOmUE0BZr26ILN
inbl6gpMfDHRkwZ2TIAAJq8KbtNkocWgDt255cewE+Cj7OgKvzAubiEXApdthQDe
Uaelegga+StWlZCzAV9nvfdn7FJEzXb+4aEIwcLemb5SGw4aAAMCRnAD3LsK9exD
6LpKBpB3vXbDXACLmGwMGF+zh0LOQSnzzQh7CAuAbIsKLYwL5mcatipRe40QRT6Y
p5rwWcCVsaG46Fbu0TVq/CuHRuLccxvo+H+9U2YFMSQw34r2krKhDbYbtuXMgQAK
IQxwhUyVwLXpXzS3Y2YWk6ImgA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:59 2026 by rpki-client