
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier: GcC2YgL4FD3uZZaGlC3yYCkwKLs9pRZ+WOuOt4I+ZI8=
Subject key identifier: 3F:50:0D:11:27:34:A9:5A:68:79:7F:12:3A:7B:33:96:A4:1B:4B:C4
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial: 07D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number: 07AA
Signing time: Sun 01 Mar 2026 23:42:17 +0000
Manifest this update: Sun 01 Mar 2026 23:42:15 +0000
Manifest next update: Sun 08 Mar 2026 23:42:15 +0000
Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: kzFLHKr5yY3gbfj3KVu3JSVOr9P+xIRss/gU7wfmCoU=)
2: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: fd9coejzcsoiqesc2VF0Mz7qwgS6TdRdfl0oHVDlkks=)
3: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: qRC2GewBVSIqQ+ig/xN3YEhCI38Ss813sjwAiEiNdvA=)
4: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 4A9cjVIsZQeEEDqt6rbEK+PEOyKosJlw9CrW47qHz2A=)
5: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: yRhveptOybuAbHuUoLtUOV/CTXTLqG2BYsPsTe+oTEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Validity
Not Before: Mar 1 23:42:15 2026 GMT
Not After : Mar 8 23:42:15 2026 GMT
Subject: CN=69a4ced8-c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:38:51:44:cb:45:96:7b:19:7e:46:39:f9:
9d:7a:26:95:68:ba:29:e0:62:62:25:3b:1f:3d:04:
69:c9:9d:5d:e6:96:e2:28:0d:a6:87:0e:74:77:c3:
90:aa:0c:5e:06:ce:05:f7:ec:a8:e2:8b:17:d2:c3:
ab:93:95:13:12:f7:03:cd:36:57:be:8d:b2:b4:31:
8f:89:e8:4e:fe:8f:2d:08:d7:49:62:1f:46:f2:d3:
ac:15:ce:bd:6f:9c:1c:22:45:5f:4f:99:69:8e:84:
67:a7:ac:9a:f4:57:13:78:ca:d3:6d:c0:52:22:51:
60:ff:da:fd:ef:a7:a0:06:96:28:b6:27:52:5e:a7:
6d:88:f4:a3:5d:1a:9f:8b:3f:d1:ed:5a:d5:0a:75:
3f:9a:3b:58:a4:0c:d1:43:09:d4:09:ab:59:76:a1:
91:6a:7f:e0:d1:d7:5d:dd:84:ae:ac:3e:4a:d7:7c:
b9:13:07:48:8f:b1:84:e3:6f:9a:0b:e7:cf:b7:23:
46:e4:f6:90:8e:56:c6:96:f0:34:47:79:f0:1e:08:
f2:ae:a3:87:84:2c:8e:55:12:c4:ac:b2:1b:6b:b1:
a7:b6:fc:60:c4:b7:7f:05:87:2e:8d:33:64:0c:f9:
ba:59:60:cf:95:aa:25:54:9a:e1:67:a8:00:4b:2c:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:0D:11:27:34:A9:5A:68:79:7F:12:3A:7B:33:96:A4:1B:4B:C4
X509v3 Authority Key Identifier:
keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:c9:2c:13:e0:01:ea:df:66:f3:47:11:12:23:7f:5e:f7:
4e:b1:8e:0c:1b:1a:28:ac:ad:e0:5b:ba:93:aa:d0:d4:7a:c1:
c8:f9:54:c4:ba:8c:8d:92:3f:e0:cc:aa:17:0c:a2:cd:92:5e:
f4:a1:d5:3f:de:44:da:f0:e5:52:f7:da:e7:ea:0f:b0:da:d1:
1e:ea:cc:8f:04:b9:d9:38:fe:fd:65:a4:67:a1:bc:2e:32:f4:
86:db:ea:5e:3a:df:9a:66:dc:97:13:0a:a7:e3:dd:4b:02:87:
9f:30:52:a9:c2:12:9b:7b:cd:ba:c3:88:82:6a:d9:92:76:7d:
1c:93:c0:68:ed:02:f1:08:ac:0c:a1:89:5c:a9:21:a6:1e:74:
ee:9d:2b:19:89:d4:07:51:31:89:fb:e7:f1:0c:ba:0b:51:1d:
56:da:b0:17:c2:29:ec:d6:59:97:95:4a:3a:1a:2f:83:a3:0f:
5e:57:7e:d1:22:17:17:7b:63:65:49:f7:40:a0:d0:5d:25:e9:
de:90:ef:d6:16:48:46:c1:86:df:b6:61:79:6d:9e:b9:c8:38:
f4:b2:cd:82:d9:db:9f:37:e0:a1:b4:c9:c5:d5:7d:e7:86:bb:
44:52:9a:a7:02:63:9d:75:c5:85:85:62:73:3b:6b:82:0a:13:
bb:6b:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:33 2026 by rpki-client