
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: ZRJYMs5Es2D6LiSmo2vR5qplXTjqV8THMYZVvjb/xsI=
Subject key identifier: B4:B1:6B:FE:62:65:7C:58:0B:91:39:EE:CC:1B:F6:8B:4B:79:67:11
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: 016F
Signing time: Sun 01 Mar 2026 05:48:19 +0000
Manifest this update: Sun 01 Mar 2026 05:48:19 +0000
Manifest next update: Sun 08 Mar 2026 05:48:19 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: UMEa85sRjuNut4ExaDSv45WW4iywYOQgxgHHFg7HCdI=)
2: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: EKYVn1LnE/qYTW245x3NVrE53P336TlJMyIXtYLhWG4=)
3: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: AhOHyTR8Y1BKmfRUj0AuSJ2KJPys3xbmw5f4K4GCzjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Mar 1 05:48:19 2026 GMT
Not After : Mar 8 05:48:19 2026 GMT
Subject: CN=69a3d323-a287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:87:c7:4b:2c:44:da:8f:dd:21:c7:88:66:
2d:1f:e8:ca:95:0e:31:00:aa:56:7a:55:e9:ab:61:
0b:04:ba:6b:61:da:59:c4:4f:95:f7:da:c3:d9:3c:
ce:65:91:eb:86:67:37:f8:fb:34:7b:23:21:f8:96:
e4:b7:be:41:84:27:57:b3:03:5d:1d:9b:1a:9e:cc:
da:77:e3:82:91:f0:4d:de:57:ec:08:64:bd:1a:f8:
1f:fe:39:97:30:11:47:d7:27:6b:c2:4a:99:9a:71:
a7:f1:ba:a1:15:fc:86:c1:c1:ca:b4:ba:9b:d9:cd:
75:bf:32:3d:91:fa:66:b3:ec:df:8f:2a:19:41:cb:
04:dc:e5:15:96:cd:79:74:72:a8:1c:b9:a6:76:7d:
20:59:9d:67:d3:d8:bc:fc:a1:0f:ef:aa:cb:3a:c2:
26:d2:8c:66:e4:75:cb:eb:21:c6:2a:c7:9f:29:28:
c8:23:40:c5:48:52:4f:3f:6a:8c:d0:f2:6d:93:b0:
69:fc:50:cb:00:b1:8f:ac:96:17:e3:e3:f3:17:a7:
ae:2a:f4:77:90:4d:db:42:62:a1:42:56:01:90:e0:
8c:10:eb:40:18:13:28:66:39:c2:9a:a5:82:2d:16:
6c:8a:90:23:83:e1:63:7d:9b:62:d1:6b:11:db:81:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B1:6B:FE:62:65:7C:58:0B:91:39:EE:CC:1B:F6:8B:4B:79:67:11
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b8:58:12:08:5c:71:d2:d0:5a:4f:18:94:d4:9e:ef:0a:1c:
95:4a:cb:b0:0b:7b:fb:2c:b1:f8:10:cd:75:ad:fa:fe:06:de:
37:b1:57:f7:0b:0d:6d:6f:94:58:85:10:81:82:9f:00:97:55:
77:4a:ba:31:ec:e8:f3:cf:10:a8:a6:c6:2a:44:b7:1c:e2:1b:
67:0a:a3:d4:a1:ad:01:aa:47:3a:75:31:cc:58:dd:92:08:1b:
dd:77:1a:0f:32:91:47:32:c7:e7:da:f5:d7:33:e9:25:42:20:
ab:ce:5f:eb:ae:47:05:66:27:8e:88:d1:80:04:0c:a6:3a:2a:
88:fe:00:57:73:71:03:ba:e0:5e:6f:34:98:4b:c3:d8:b4:a0:
ea:94:65:dd:d6:c2:76:8d:b3:9e:cf:f3:65:d0:f9:70:29:ae:
b1:38:f9:14:ba:92:12:1f:83:fd:03:88:56:c9:6b:5c:c5:de:
c1:60:ec:34:d5:56:88:d4:e4:46:4b:68:6b:ea:b5:2d:6f:eb:
7d:51:0b:96:f0:d2:e4:ae:05:e7:a9:72:e3:f7:10:a1:9c:47:
e3:34:f8:88:75:99:5a:e2:ce:5a:37:fc:82:d6:05:55:ef:c5:
68:bf:3b:1a:45:d4:a2:04:7c:2a:08:0f:df:ae:ed:fb:a2:03:
fb:bb:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:56 2026 by rpki-client