
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json)
Hash identifier: W+mtj9KhHRU2Qv0yRoOtL7pX6pFxs/45b2PYWZHOQt4=
Subject key identifier: 9E:C0:36:42:81:5B:BA:95:D5:B9:5F:07:D4:1F:D3:7C:6A:53:09:C4
Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
Manifest number: 8F
Signing time: Fri 17 Apr 2026 07:13:59 +0000
Manifest this update: Fri 17 Apr 2026 07:13:59 +0000
Manifest next update: Fri 24 Apr 2026 07:13:59 +0000
Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: IXUG3FSUt8dmVFL8t3o3mQADKnCL5Jl0arZuvm85B7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Validity
Not Before: Apr 17 07:13:59 2026 GMT
Not After : Apr 24 07:13:59 2026 GMT
Subject: CN=69e1ddb7-93e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:db:18:b9:e2:9a:70:f4:e2:c2:91:98:0a:
6c:b0:b0:90:33:d6:5d:9f:26:54:dc:e3:8c:bc:a4:
35:97:51:27:74:ff:93:ef:09:55:b6:ab:16:72:f2:
6a:c2:3c:86:ee:1d:e9:77:96:bd:8f:8c:a1:9c:a6:
9b:90:41:46:56:e6:7f:d5:57:57:48:16:e4:6e:d2:
4c:66:a2:83:bd:3d:39:8f:7b:2b:40:c8:55:0a:97:
8a:6b:6a:f9:62:80:17:73:28:39:e8:ee:81:c5:85:
11:7c:8a:8e:36:ad:ca:75:9f:0a:38:f1:e8:4c:f9:
e3:79:46:91:14:05:bd:35:0d:f2:9f:15:51:95:19:
a2:6e:f5:1a:88:70:3d:4e:22:07:49:1d:1e:f8:c6:
06:ff:fc:29:63:6d:65:f3:39:de:e8:fe:9c:a9:0a:
f2:df:94:ff:d4:2f:78:b9:26:78:d4:83:24:38:b4:
21:39:da:1a:94:ca:0a:b7:e3:cb:b7:ee:62:1a:41:
98:d0:c3:17:f3:8b:2b:15:31:72:1f:a3:47:06:40:
02:b9:6d:30:bb:35:9e:69:e2:b1:8d:b7:32:50:54:
3e:28:e7:af:b3:08:19:56:e1:0d:6a:f6:17:90:ea:
80:5f:37:82:d1:26:d5:c7:c7:c3:f5:0b:43:76:5f:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:36:42:81:5B:BA:95:D5:B9:5F:07:D4:1F:D3:7C:6A:53:09:C4
X509v3 Authority Key Identifier:
keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:67:73:d9:10:37:f3:f0:c4:cc:0b:21:ef:27:38:78:43:66:
7f:d0:ca:68:98:11:28:51:63:e6:b3:9f:b5:4c:bc:c7:86:29:
26:e3:bd:ee:64:3e:1b:c2:01:e6:18:ef:42:f7:1e:52:5a:9c:
93:60:4b:5f:bd:56:07:13:d3:e6:4a:32:ec:c3:d4:a9:96:db:
09:32:bb:be:11:f2:9c:d2:0e:f8:47:33:59:59:3d:c3:49:3b:
38:6b:d2:c9:c0:75:cc:27:73:4c:2d:ed:e2:9a:a3:4d:06:72:
0f:13:f0:c6:f3:79:45:c8:65:fb:42:48:ff:82:13:75:38:2b:
5d:b3:d6:62:33:e5:49:28:72:af:25:82:23:42:11:22:0e:c4:
6c:c3:b1:55:d7:3f:b7:3f:fb:1a:11:46:d4:25:ce:ab:d1:de:
6b:67:5e:03:46:ca:f8:ed:47:78:3d:c9:da:34:55:f2:10:fe:
88:b7:7a:47:1d:35:2a:2c:f1:e0:4a:f2:d6:a6:59:1c:1f:e7:
a1:42:bd:91:dc:bb:1a:5e:32:9b:b2:3f:e8:bc:a6:1e:56:43:
21:52:f1:00:83:59:82:87:1a:e2:0c:f2:b4:0d:49:59:b2:1c:
4b:9f:97:37:1b:87:0b:1d:69:2f:fe:89:53:b1:82:c3:bf:99:
93:50:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:15 2026 by rpki-client