
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File: xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier: AJka4RUoQolqXjx8HIzuphS/3yxbKjAbYYmNkODrTq0=
Subject key identifier: 5C:C6:8A:9D:82:F3:66:FE:83:F4:9E:19:7C:AB:91:8F:16:7A:C9:56
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer: /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number: 10
Signing time: Sun 01 Mar 2026 10:39:23 +0000
Manifest this update: Sun 01 Mar 2026 10:39:22 +0000
Manifest next update: Sun 08 Mar 2026 10:39:22 +0000
Files and hashes: 1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: iAyrihsPeB3c6jQxSvkD/a3m3f9mbXtk93QhCfSWrYI=)
2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Validity
Not Before: Mar 1 10:39:22 2026 GMT
Not After : Mar 8 10:39:22 2026 GMT
Subject: CN=69a4175a-4f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:b1:45:fe:99:3c:95:54:59:5d:b2:0a:b0:
43:2b:8a:47:e3:39:08:23:bc:21:f5:8a:1a:d2:77:
02:ad:ee:54:22:35:ba:e2:96:52:00:df:be:93:a0:
4d:dd:08:35:5e:37:95:30:2a:ce:e0:42:35:d3:7f:
24:ef:ba:70:18:c6:da:c6:1f:62:2c:84:67:06:1c:
2e:43:73:c9:e1:bf:0f:3d:dd:b1:f9:08:55:8c:dd:
05:b9:db:43:2c:01:81:3f:32:41:94:1b:a6:b7:b9:
66:8b:9d:f7:d5:7f:b8:4f:ac:bf:67:93:29:66:63:
28:d0:a6:44:2a:76:24:4d:b0:90:db:73:b4:d2:6f:
21:fe:03:f4:37:fd:6c:2b:14:c5:19:40:45:2d:a9:
15:2b:9a:97:ad:c0:05:31:08:28:32:da:29:83:91:
eb:a3:25:f5:31:a2:7e:f4:3b:2b:17:29:34:9d:79:
86:a7:4d:0a:9e:99:c5:53:b4:bb:24:71:53:82:cf:
5d:58:66:b0:69:fe:8b:12:58:e2:cc:f6:c6:d8:96:
fa:c0:2d:d0:cb:99:0d:bc:f3:d0:78:53:64:a4:37:
ea:05:65:85:35:40:6c:39:b3:f5:80:46:3f:4c:b6:
98:94:a6:cf:1d:50:3c:55:98:82:aa:85:e8:51:63:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:8A:9D:82:F3:66:FE:83:F4:9E:19:7C:AB:91:8F:16:7A:C9:56
X509v3 Authority Key Identifier:
keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9e:87:2f:a3:bf:63:14:6b:b0:b5:4d:77:45:b7:c4:ee:09:
5c:39:06:eb:a9:12:cf:71:2d:43:96:a2:a0:b2:e9:e7:9f:b8:
28:53:1e:b2:91:50:84:c7:fb:b9:68:de:7a:f1:7b:3e:ea:df:
49:ca:cb:d6:a2:13:b3:1c:ed:4a:5f:15:d2:c5:e4:e3:4e:86:
1c:cc:3d:ea:ca:e9:97:1d:1a:5c:9e:09:e1:9b:05:44:8e:78:
ad:fc:03:9b:d4:c7:59:a4:2f:cb:a6:a9:22:85:dc:11:96:ee:
c3:16:3f:0b:71:3e:d1:08:dd:be:17:0f:f8:cf:9c:1a:1c:7d:
05:07:21:0b:f1:d4:b7:6c:b2:44:df:55:75:32:a0:87:c0:59:
9d:c0:6b:ff:5b:c6:d4:8e:5d:63:39:d7:b9:98:f4:24:f8:ce:
1b:09:8c:fb:7a:99:dc:60:54:51:80:09:f5:19:4c:5f:d4:29:
86:01:e4:4d:5a:39:02:77:97:42:26:61:73:cd:dc:f1:fb:a9:
e9:a8:c3:7b:94:bd:83:44:53:07:85:2f:ef:62:e4:62:ef:bc:
4a:f8:b6:28:05:05:28:a3:55:fe:27:8b:52:ea:57:26:ae:ca:
fb:6f:cd:9b:c1:eb:6b:a8:e7:69:10:99:57:dd:aa:68:91:a5:
a1:61:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:40:45 2026 by rpki-client