
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json)
Hash identifier: xbjSNaL3iYzYwA5kkzdd+m3JyhtD4qwXqh28kbTTotQ=
Subject key identifier: F2:E2:95:D9:0A:E7:CD:30:6D:51:96:DF:B2:B1:7E:EA:D2:F5:3E:38
Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
Manifest number: 09A3
Signing time: Sun 20 Sep 2026 20:20:57 +0000
Manifest this update: Sun 20 Sep 2026 20:20:57 +0000
Manifest next update: Sun 27 Sep 2026 20:20:57 +0000
Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: n+PgrBjFT//COwvIK7AbF7dG2E9JQH+B3ryXB7h03bs=)
2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: jIvecyaNUKHM1Z6so6WtYRHY+CV5901LNEJc6GLn6Zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Validity
Not Before: Sep 20 20:20:57 2026 GMT
Not After : Sep 27 20:20:57 2026 GMT
Subject: CN=6ab04029-af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:bb:20:ed:5d:62:6b:93:6d:81:30:ae:f4:
6c:6e:5e:ea:e5:27:28:7b:b7:8c:46:08:c2:1c:fc:
cb:76:55:9c:5f:38:85:b0:3a:7f:e8:d1:d9:1d:f8:
3c:bb:60:d0:96:58:4d:c2:b6:4b:33:12:8f:e9:02:
56:f9:7b:73:84:ac:ff:00:de:0a:ab:f5:bf:e8:f0:
7f:79:a4:c9:93:3e:b6:48:f4:1b:19:40:60:e9:91:
34:66:a0:bb:48:37:a8:2f:cf:20:42:37:5b:ae:79:
2e:aa:14:43:67:55:dc:58:f0:ed:8f:bb:cf:f0:ed:
e6:16:f1:09:5f:39:0e:b1:99:82:0a:c4:bb:b3:d6:
82:f0:3f:22:a4:ae:81:8c:a6:21:1a:ab:77:74:29:
2d:ec:19:64:bf:94:f7:f8:a3:31:d4:a3:12:34:cb:
ec:2b:60:5c:63:ca:f1:61:34:3d:cc:7c:64:2f:31:
6c:1d:6b:8a:e2:39:8b:07:ad:38:5a:b1:ca:e3:d1:
95:51:9c:55:c5:47:ff:2c:94:bc:38:57:3f:71:e9:
4b:cc:39:06:83:6e:a3:16:b8:93:c8:d2:74:36:7f:
ba:ce:80:7c:8b:82:31:68:31:53:37:3a:ad:20:1a:
4f:37:f4:c8:83:f0:2f:cc:40:b6:49:59:9c:60:ca:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:95:D9:0A:E7:CD:30:6D:51:96:DF:B2:B1:7E:EA:D2:F5:3E:38
X509v3 Authority Key Identifier:
keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:fd:2a:a6:66:eb:d9:d1:06:9a:88:76:7b:c6:37:63:80:
1e:1c:aa:b4:ce:2e:1e:77:ee:99:2b:ac:f0:e6:5d:69:00:3e:
e9:4d:96:fd:e0:9d:0e:54:d5:9d:45:28:7e:e0:e0:d2:7e:1a:
bf:0c:93:7b:d3:f3:08:91:e7:30:89:66:f6:77:07:ea:95:ec:
d4:e0:24:0d:3f:0a:28:cf:13:a4:e5:9c:3a:75:55:21:cf:51:
1a:2f:e6:b2:89:d1:b7:d7:e4:0c:9c:b2:1c:72:a8:17:cb:25:
78:e6:2c:aa:50:55:7b:bf:92:69:59:a7:bf:ba:31:34:9f:a3:
75:4d:bc:55:35:36:f6:ff:69:64:ea:59:1e:ed:13:13:d3:68:
f2:c5:ea:83:d1:23:0d:03:d6:fb:43:55:cb:cf:56:c3:9d:2a:
30:a2:87:0d:c0:c4:73:69:d0:16:af:94:b6:46:01:a0:f7:4e:
6f:cd:dd:68:fa:40:00:e0:05:8e:7a:e9:40:57:71:77:c1:65:
44:e8:21:68:f4:ea:67:fe:40:0f:c8:bb:89:95:f6:7c:0d:cb:
d7:a3:3f:96:16:fe:f3:ce:46:b0:f8:c8:0f:b9:03:e7:fc:c0:
03:80:1f:1f:87:81:da:c9:6d:21:67:07:4f:6f:8c:cf:49:60:
1d:c6:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:41:18 2026 by rpki-client