
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json)
Hash identifier: x1lrAIYaBoQnAmLCyY1uQA/B3TiESepnGvYogRgQzow=
Subject key identifier: E9:66:D5:EB:6E:FC:1E:CC:EE:B6:67:68:C2:94:8B:5F:96:7B:5D:0B
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial: 0664
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
Manifest number: 065C
Signing time: Thu 16 Apr 2026 22:33:52 +0000
Manifest this update: Thu 16 Apr 2026 22:33:51 +0000
Manifest next update: Thu 23 Apr 2026 22:33:51 +0000
Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: CnkEbn5Nt+tFBKLY7G4VlocgexfZQE6X0lSI6LlI9es=)
2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: qAEw4cfCPVqW7FS+d2/zPSE0MsVbQiymPW0bXvjNNYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Validity
Not Before: Apr 16 22:33:51 2026 GMT
Not After : Apr 23 22:33:51 2026 GMT
Subject: CN=69e163d0-e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:a5:5b:68:b0:e8:8b:65:0d:4f:9e:fe:8c:
21:10:19:c1:26:31:08:b4:9f:b1:20:ae:5c:29:68:
67:7d:eb:95:8b:da:d1:fa:c8:a4:83:c2:3f:e0:18:
3d:29:da:d7:a1:f3:31:3a:9b:32:ad:16:3b:9d:5b:
30:f8:ae:c0:8c:b0:ad:d9:39:c3:11:22:59:50:32:
90:86:7f:1a:ce:7c:6e:19:6e:82:39:37:eb:a2:1c:
55:3c:ec:c7:be:64:4d:0a:81:85:b9:c7:46:1e:68:
57:0e:98:43:c8:e8:05:4f:f2:d9:32:57:96:26:0d:
79:05:e6:d4:59:2d:54:1a:0f:6f:8c:ee:2e:23:fa:
d8:5f:16:8b:04:3c:a4:70:d3:65:b6:ee:e6:f1:81:
9a:86:bc:e0:37:b9:f5:b9:98:8b:67:9c:0a:76:a6:
da:b4:32:ed:bd:b7:d7:bd:0e:e3:3a:89:ae:fa:b3:
8f:e4:49:27:8f:89:91:77:b5:48:bd:44:f8:ae:83:
48:46:dd:31:d6:e1:87:a7:bb:d6:1f:50:bf:13:1e:
93:b4:a1:f3:2e:49:1c:11:d2:6b:5e:66:2f:9c:fa:
20:91:49:54:ef:e3:21:58:5b:26:19:87:d8:dd:0f:
7a:bc:b3:08:25:31:fa:f9:82:e1:35:78:de:10:7c:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:D5:EB:6E:FC:1E:CC:EE:B6:67:68:C2:94:8B:5F:96:7B:5D:0B
X509v3 Authority Key Identifier:
keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:fb:7f:22:80:ef:97:78:fc:15:45:62:36:e3:78:99:80:
20:d4:17:49:20:ac:72:f0:f3:db:4f:31:3d:45:2a:1c:bc:90:
ed:49:b9:5b:7d:9c:fb:2b:23:1f:98:35:5e:1e:51:fe:2d:a7:
99:c4:f8:d9:2f:8b:f7:65:f8:77:0d:8a:cb:18:fa:b4:35:99:
75:10:11:5a:e8:c3:13:3d:93:7f:ef:74:bd:aa:70:68:af:fc:
40:02:37:dd:fd:b1:95:85:b7:2f:36:f5:73:14:b3:f5:40:63:
9b:dd:74:04:98:1b:5f:9f:fc:13:56:4e:58:ec:af:3a:be:f9:
ad:55:22:4b:e7:f9:fb:2a:12:70:f3:17:78:b0:b8:7e:b4:ce:
b9:0b:ba:d6:6f:68:8a:30:af:68:c7:7a:6a:03:33:97:db:89:
80:4f:7f:c4:9b:40:53:8a:9b:0f:7b:8e:99:01:be:d2:58:23:
75:67:cf:1a:9c:03:a6:82:2f:4d:8a:10:29:8a:7a:8a:75:c9:
11:bf:fd:6e:7d:ff:ac:79:e9:5e:6d:52:a8:48:65:44:37:ff:
3e:b3:17:f9:e6:7b:52:bb:da:fc:33:5f:ea:29:31:18:cb:70:
05:d4:a6:a5:90:dd:bd:46:d4:db:2e:38:5a:97:e4:7d:75:27:
9f:0a:7d:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE
NjU4NDQ3NkEwHhcNMjYwNDE2MjIzMzUxWhcNMjYwNDIzMjIzMzUxWjAYMRYwFAYD
VQQDEw02OWUxNjNkMC1lN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAClW2iw6ItlDU+e/owhEBnBJjEItJ+xIK5cKWhnfeuVi9rR+sikg8I/4Bg9
KdrXofMxOpsyrRY7nVsw+K7AjLCt2TnDESJZUDKQhn8aznxuGW6COTfrohxVPOzH
vmRNCoGFucdGHmhXDphDyOgFT/LZMleWJg15BebUWS1UGg9vjO4uI/rYXxaLBDyk
cNNltu7m8YGahrzgN7n1uZiLZ5wKdqbatDLtvbfXvQ7jOomu+rOP5Eknj4mRd7VI
vUT4roNIRt0x1uGHp7vWH1C/Ex6TtKHzLkkcEdJrXmYvnPogkUlU7+MhWFsmGYfY
3Q96vLMIJTH6+YLhNXjeEHw9DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOlm1etu
/B7M7rZnaMKUi1+We10LMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4
MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1
Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMWf7fyKA75d4/BVFYjbjeJmAINQXSSCscvDz208xPUUqHLyQ7Um5W32c+ysj
H5g1Xh5R/i2nmcT42S+L92X4dw2Kyxj6tDWZdRARWujDEz2Tf+90vapwaK/8QAI3
3f2xlYW3Lzb1cxSz9UBjm910BJgbX5/8E1ZOWOyvOr75rVUiS+f5+yoScPMXeLC4
frTOuQu61m9oijCvaMd6agMzl9uJgE9/xJtAU4qbD3uOmQG+0lgjdWfPGpwDpoIv
TYoQKYp6inXJEb/9bn3/rHnpXm1SqEhlRDf/PrMX+eZ7Urva/DNf6ikxGMtwBdSm
pZDdvUbU2y44WpfkfXUnnwp9AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:22 2026 by rpki-client