
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: Jgy46nVYG8/JmuwedlYRPE/21JGW5FOqjAniVZ49vxg=
Subject key identifier: 49:0B:40:18:B9:AD:37:4F:79:51:20:09:A3:86:67:96:36:0C:31:A0
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 0720
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 071A
Signing time: Thu 16 Apr 2026 21:46:57 +0000
Manifest this update: Thu 16 Apr 2026 21:46:56 +0000
Manifest next update: Thu 23 Apr 2026 21:46:56 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 5u+bhkfvNH0A8adP/yd0f7tLRDxwY2kx3DwQWum4Mq0=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: aSLv1C+EyXbwK3DnNjnFTX370d6LHK+MnR49e8euTIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Apr 16 21:46:56 2026 GMT
Not After : Apr 23 21:46:56 2026 GMT
Subject: CN=69e158d1-7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:2f:00:71:68:01:44:33:c3:ae:27:ba:d1:
4d:0a:56:32:e6:da:aa:fa:a4:2e:51:33:b1:6c:53:
8a:70:b9:26:5b:31:74:52:ba:e9:56:47:48:9a:87:
cb:20:eb:e8:0a:16:97:f6:fa:6c:eb:4c:39:c6:09:
6c:da:88:a9:89:4a:cc:ef:91:ad:2e:43:17:d8:f4:
db:f1:94:43:83:e3:ad:71:78:d7:38:27:e1:09:c7:
a4:e7:88:1d:77:c4:96:10:e1:d5:a4:be:28:8d:0d:
a0:73:45:8f:ab:19:76:9a:19:fe:ff:39:a1:7c:0b:
29:65:9f:d9:70:45:f4:9d:0c:ae:7e:55:7e:3c:e1:
d0:12:14:c2:94:d0:3b:d5:18:c4:89:f4:b1:23:10:
0f:cb:dc:62:3d:93:6b:21:e2:d8:81:26:41:e3:19:
48:a5:9f:8e:6c:e9:86:26:00:10:71:fb:6c:d2:8e:
bd:92:cb:1f:7e:31:4c:f5:97:ec:9f:6c:3a:90:74:
d8:ac:17:1c:58:56:4e:f8:34:61:46:57:61:86:cd:
af:3b:c0:5f:cb:fc:ed:5a:a9:8f:07:f8:d8:47:0f:
51:92:e5:e6:b9:bc:f4:a3:87:f3:0e:f1:a0:5c:33:
2a:73:43:e2:e3:34:83:df:0a:3f:e0:ae:15:07:76:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:40:18:B9:AD:37:4F:79:51:20:09:A3:86:67:96:36:0C:31:A0
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:18:c4:14:c7:59:db:2c:a6:67:ba:cc:17:48:36:7f:77:
18:fa:4f:5a:ec:b1:80:30:6c:b2:c8:01:52:72:4b:8c:77:9a:
33:a7:2e:22:60:2d:a8:ee:4a:13:10:fa:ba:2b:be:90:83:97:
43:c5:17:8f:a4:c2:b4:83:e7:bf:a3:86:1d:4d:01:6a:ab:7e:
87:59:9a:91:98:e4:57:50:b8:d3:9f:9e:be:ed:27:65:c6:d1:
93:3a:35:08:21:5c:7d:1c:9d:93:26:0d:bb:8e:d3:4f:32:e0:
bb:60:d2:9f:e4:8e:1e:81:9d:7a:a4:13:bf:ad:6d:0f:94:29:
b5:5b:ad:ca:1c:c0:e4:0e:cb:21:fa:c0:7e:82:57:7b:98:1c:
5b:0b:a3:5a:63:64:7f:f3:ca:4a:7b:8f:d5:80:e8:cd:68:df:
de:b3:e3:48:93:01:12:9a:f9:51:e7:b0:dd:90:ca:97:52:8f:
38:59:98:51:e3:ac:2b:7c:79:36:bd:d7:d7:55:c0:13:43:05:
6d:43:35:c0:b4:c6:77:ae:18:ad:60:8c:9d:29:b3:0a:cd:3c:
f3:45:13:5e:77:39:23:c6:6e:2f:0b:6d:55:9c:f3:6d:b3:51:
60:66:da:3f:72:a9:d1:d1:f0:65:5e:d1:16:d8:90:08:65:2e:
66:9a:b4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:58 2026 by rpki-client