
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier: we81vZCPsJr6manm7xW7h69qDAdrVV5lOxfzl14dZyI=
Subject key identifier: D8:DD:BD:BF:52:16:F3:35:1C:4B:02:A0:C3:37:0C:BE:44:1F:F0:25
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number: 0231
Signing time: Sun 01 Mar 2026 03:41:35 +0000
Manifest this update: Sun 01 Mar 2026 03:41:34 +0000
Manifest next update: Sun 08 Mar 2026 03:41:34 +0000
Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: ii/ThYHf1SQcfpLKbjcVCJQ8zqTggbixv+4h2lMdWao=)
2: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=)
3: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: vFnHMZDmaAEJX6sDkXcevocgA5u3JoklJPdgGoC+BEI=)
4: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=)
5: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=)
6: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Mar 1 03:41:34 2026 GMT
Not After : Mar 8 03:41:34 2026 GMT
Subject: CN=69a3b56f-ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:dc:87:48:cb:d5:2b:dc:42:d5:ca:47:dc:
f4:24:93:98:10:f4:69:76:51:51:2d:4d:91:f9:48:
f5:a4:02:28:98:18:47:9b:94:6e:18:f4:0b:26:46:
59:a5:73:37:08:69:4b:f8:fc:db:5e:09:89:23:da:
fb:85:38:ac:1a:92:c6:ba:97:2c:9e:e6:c7:16:93:
11:39:0f:ae:08:74:59:88:b0:b8:42:47:d5:25:58:
22:7d:6d:3a:1c:23:ac:0a:7f:29:39:bc:66:6c:12:
95:d1:a0:29:c7:8a:26:69:80:78:0a:07:e7:7b:04:
18:b6:1e:ce:a7:ae:d8:d4:ff:fe:95:6c:bd:42:88:
95:3b:a4:56:fb:3a:f8:a5:92:d3:e8:33:9e:0a:c9:
f9:a3:7c:f2:bb:c3:76:bf:ad:6e:44:56:84:a7:85:
f4:1f:ea:26:0d:23:14:0a:99:2c:7a:ff:7e:d8:1c:
ba:f2:33:50:9c:ab:17:2b:fc:59:6a:88:1e:6e:c6:
5e:99:b9:cd:a1:d3:62:1d:3b:cc:d3:fb:0b:23:e2:
ce:7e:d7:ea:89:32:82:1a:86:80:08:10:1a:91:6d:
c2:9a:d7:1b:2d:dd:5d:85:e0:39:d4:70:97:72:69:
8c:d1:b8:d9:90:04:b2:4e:ec:f1:1e:0c:db:00:0a:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:BD:BF:52:16:F3:35:1C:4B:02:A0:C3:37:0C:BE:44:1F:F0:25
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:79:02:dc:fa:8f:ec:39:d0:b7:85:b8:c1:e7:2e:21:2c:96:
b8:e6:01:e9:f2:6f:47:f9:a7:8a:f1:53:72:f5:54:77:1c:98:
5c:7e:14:2e:45:55:8d:50:5d:5f:7c:85:3c:dd:f2:a7:6d:1a:
6b:ac:f5:2e:df:49:3e:24:04:9a:91:36:e3:c1:51:d0:41:cb:
5d:97:c6:e1:b0:cf:20:68:70:f2:48:af:5e:15:67:a8:d4:f2:
df:73:19:2b:0e:7f:36:8f:4c:8d:e7:ab:39:80:c5:1f:06:2c:
79:98:54:62:cb:0b:88:1b:74:7a:c6:f6:c4:9c:38:10:b0:a8:
80:91:ee:e7:7a:80:fc:98:45:92:17:6f:5e:79:d8:b0:4b:37:
7a:64:10:70:9a:04:52:6d:31:d7:e0:8e:eb:cd:f9:72:6c:6d:
9a:60:a5:8b:89:25:61:91:08:db:c0:27:40:e3:64:2e:1c:81:
39:d7:10:a3:78:df:e7:27:27:8f:61:b3:89:67:28:c1:eb:b7:
f4:b2:97:b7:9c:d9:ad:de:bc:38:ab:9e:f2:a8:88:05:fd:09:
e8:90:d1:a9:a7:e0:f2:cc:de:ad:a5:62:f1:bc:36:10:c6:e2:
06:95:0a:bf:db:b0:51:d9:3f:b8:5d:16:bc:c3:50:d7:92:d5:
9d:eb:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:43 2026 by rpki-client