
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json)
Hash identifier: HwW+Esb851r4UjfWfOp11kN36KNOEd4XDBpKr3BE+E8=
Subject key identifier: 55:FE:2A:65:D7:E3:A7:6A:DB:1C:C3:2D:FD:0E:1F:E5:DE:49:70:76
Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
Manifest number: 08CD
Signing time: Sat 28 Feb 2026 21:00:11 +0000
Manifest this update: Sat 28 Feb 2026 21:00:11 +0000
Manifest next update: Sat 07 Mar 2026 21:00:11 +0000
Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: iJSnuOelYNN1XUF8TuRoRt2Y6xB0Pb0zAmkpc9x5Ka0=)
2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: z3byFN5IfEv+WZ84P4Hf1mQWrRSXQ5bot07gaZA1QjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Validity
Not Before: Feb 28 21:00:11 2026 GMT
Not After : Mar 7 21:00:11 2026 GMT
Subject: CN=69a3575b-d82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:10:08:31:d3:0b:c9:b4:ed:b8:22:46:af:
67:f0:70:03:07:22:48:9e:82:ec:1c:10:61:b9:4a:
67:8b:e0:b6:77:2a:70:f4:b1:9e:d1:4a:fb:1d:41:
96:e4:4e:42:d8:b1:65:3a:88:e5:3a:2f:7d:97:1a:
5b:91:1d:06:04:2d:bd:4b:83:c4:62:91:02:a1:78:
f9:db:16:4b:71:e4:23:f5:b2:1d:83:d2:e7:6c:a3:
68:d9:6f:3c:ec:a4:70:39:c6:57:11:a4:28:47:55:
89:20:88:e7:1e:d0:d5:2c:a9:2d:a8:40:d9:ce:e7:
0e:55:a5:90:6a:13:91:70:a5:ce:fd:71:c3:8a:27:
5c:5b:04:db:e5:83:ac:68:cf:37:f2:be:31:4d:7a:
ea:7e:4b:cc:e1:09:0f:ef:67:96:44:46:86:ec:08:
f7:dd:c0:10:47:1e:dd:9d:34:ce:0d:d7:ed:17:34:
d8:7a:db:46:40:a1:7d:40:13:48:af:29:05:22:ab:
b3:8a:c8:2f:9a:1d:b8:e6:6a:fe:54:9a:34:f5:88:
28:34:75:9b:e8:d7:35:15:c3:d3:bd:d3:c6:7c:74:
0d:02:42:3e:a4:c4:07:e0:5e:6d:5f:01:0b:8b:de:
a3:c5:3e:17:cc:6d:49:f3:64:f7:e0:1c:23:d6:6c:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:2A:65:D7:E3:A7:6A:DB:1C:C3:2D:FD:0E:1F:E5:DE:49:70:76
X509v3 Authority Key Identifier:
keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:7f:bc:6c:54:64:00:bb:58:1f:a5:36:67:f3:ec:a1:ba:0b:
9c:dd:2e:43:e1:33:75:d4:ae:17:0f:9b:a9:f6:bc:a9:8c:bf:
82:79:fe:be:99:e4:91:6c:96:e1:6b:f7:05:47:4d:e4:29:f2:
ca:97:5b:6a:bf:3b:ee:ba:72:e8:2d:1d:a0:49:35:51:37:47:
c3:78:5a:7a:bf:4e:b8:73:50:f3:01:7e:5d:3b:fa:05:c8:74:
f1:e3:c4:7a:36:8e:da:be:83:42:5c:50:5e:6e:de:07:e5:ff:
2b:d7:e2:19:5e:d8:ac:68:1b:63:b8:97:bf:80:83:ae:29:99:
bd:8b:f7:13:36:c5:c3:b7:f2:56:0d:10:98:54:93:f6:d1:92:
e0:34:f9:05:a3:63:0c:f8:99:d6:6a:b9:77:9e:99:a7:12:eb:
3a:be:a1:9c:e8:35:30:f9:1f:40:fc:45:ba:89:7c:e4:f0:c9:
78:ad:5f:58:1e:37:ea:75:f2:60:53:de:81:8d:6b:b2:2e:2c:
39:70:3e:28:12:4e:b4:23:0d:50:44:f0:66:9c:31:3a:7e:a5:
b7:28:5d:99:c7:cd:b0:14:35:73:13:c9:30:0a:2f:7f:c7:94:
8d:57:b6:ee:b7:78:62:48:65:94:e3:a6:fb:9e:4c:47:ec:66:
80:da:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:10 2026 by rpki-client