
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json)
Hash identifier: 9ACGDmvumla3yvnrQC/DJvUj3aL/0GQ6WcqsjG95jWg=
Subject key identifier: 5B:D4:32:BA:FC:41:07:A7:EF:26:7B:66:94:5C:02:48:4A:F1:90:36
Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44
Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
Certificate serial: 06ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
Manifest number: 06E5
Signing time: Thu 16 Apr 2026 22:03:23 +0000
Manifest this update: Thu 16 Apr 2026 22:03:23 +0000
Manifest next update: Thu 23 Apr 2026 22:03:23 +0000
Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: AH4ijVAxd4p9y5k3lqGA1zVFGJY8owq+XHxITK5WtKw=)
2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: kPCD0Fz7/O4ntMHiCFvRFjcWPT4ww4VjwAtUClsCkrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl
rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
Validity
Not Before: Apr 16 22:03:23 2026 GMT
Not After : Apr 23 22:03:23 2026 GMT
Subject: CN=69e15cab-7ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:95:8a:de:3c:14:4d:e4:42:f0:2d:3f:52:
80:c0:b8:75:c0:f1:26:72:ac:9b:87:5c:b1:9d:08:
0a:e3:e1:e6:75:bb:36:e8:64:0a:f3:45:55:3b:63:
0f:3f:67:c7:52:3d:8f:1c:ba:8f:43:d5:92:d6:64:
1d:a2:14:9f:8a:5a:0b:9d:03:d7:4a:22:ea:e2:fb:
28:72:0d:bb:4f:33:03:9d:19:98:97:6a:1a:1c:82:
0c:dd:67:09:98:54:5b:f5:97:03:ba:c3:22:02:ac:
95:b0:71:38:a4:c0:10:d9:5c:e1:d1:80:69:31:ab:
68:f8:65:85:4b:b2:ec:14:eb:b4:41:3b:c8:31:bc:
e9:de:16:e0:12:f6:58:10:3a:31:36:9c:6b:74:e5:
04:f6:52:ad:1a:63:13:6a:95:ac:ad:b4:9c:77:db:
6f:b7:74:24:0f:6f:54:95:8a:ad:af:e7:a6:05:d2:
b2:87:71:7a:1e:6b:6d:38:16:61:1d:9a:a6:69:e9:
d6:41:d6:cb:e7:0b:f6:25:0b:50:f6:82:f4:41:98:
1e:de:95:c4:2f:41:66:dc:2f:6e:0f:df:46:56:e3:
86:9d:0d:09:89:ed:8c:c5:cb:61:48:09:0c:a1:1d:
61:8e:c9:40:44:70:05:78:7e:97:2a:26:e7:f4:f3:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:32:BA:FC:41:07:A7:EF:26:7B:66:94:5C:02:48:4A:F1:90:36
X509v3 Authority Key Identifier:
keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:89:d5:f7:12:b7:d1:de:f7:18:66:04:f6:c5:0a:a3:78:
29:5d:6d:ad:c2:1c:64:f6:76:94:38:26:c3:a8:64:ff:dd:92:
9f:10:74:c3:57:c9:2e:93:e8:16:8b:bd:d6:c4:04:f1:a9:73:
4a:63:e8:0f:43:3f:fd:20:5a:38:7e:f7:bb:69:e8:82:20:d2:
58:ff:b3:32:1e:f5:98:45:ce:94:0d:5e:ef:8b:96:47:e9:f2:
c8:9b:b1:f7:07:37:cc:02:a1:ee:7f:e1:b8:e1:d7:8a:f0:85:
42:fd:dc:6d:6f:4b:69:30:a1:13:2a:26:de:40:a9:e3:9b:a2:
cb:68:ac:ea:f7:bb:cf:bf:d5:c4:41:bf:5b:39:1f:c2:b7:a8:
f1:ec:a8:06:ee:52:e3:6c:f3:fc:80:07:7f:99:1b:0f:a5:e4:
cf:72:ef:8d:18:c8:18:eb:f3:94:29:ae:a2:e9:6d:16:ce:bf:
0d:e0:cf:d6:e4:01:5b:56:ae:ba:98:db:a9:22:79:23:11:e4:
a3:65:f7:56:3e:91:cf:06:89:ee:8d:bc:36:29:e3:09:91:05:
46:e6:32:13:93:10:4b:cf:d5:5a:4f:00:f5:47:a1:3c:33:b5:
43:0e:a9:fb:9b:eb:7e:c7:67:6a:43:0c:29:a0:38:f3:d6:08:
d3:97:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:04 2026 by rpki-client