
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: malQ958I6AfKSyWjkzCScKTd0JE61y09zRybmprLNfA=
Subject key identifier: EC:0B:92:AF:1C:F0:4A:40:AA:68:44:BB:80:D5:78:5F:4C:CE:66:79
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 06FB
Signing time: Thu 16 Apr 2026 22:03:16 +0000
Manifest this update: Thu 16 Apr 2026 22:03:16 +0000
Manifest next update: Thu 23 Apr 2026 22:03:16 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: CWH4p3D1QDPCHl8UhpWI6okxNyBe5mrm4uv7Gk238co=)
2: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: 4Yctf7pVojVoLeOsbRRT3x+cHPSFWCwaq3gnRgVoij8=)
3: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: 9yCoaAzqnb7RI3mFeVlrKPZEvH7Wmo/VgdUCWIgtGfI=)
4: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: HKoKRFcJwi5Gs9u7ltKGml2Yd1/FTu80z0zBCUgrM9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Apr 16 22:03:16 2026 GMT
Not After : Apr 23 22:03:16 2026 GMT
Subject: CN=69e15ca4-75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:dc:f9:1f:9c:28:ad:23:04:96:bb:a5:bb:
eb:00:7a:0b:fb:76:4c:72:1d:f4:fe:71:d9:98:6f:
19:4e:76:67:c6:f1:3a:6c:24:1d:ad:f3:d9:ea:8c:
ad:87:7e:93:a0:d6:5e:3c:fd:a2:6f:5e:eb:a6:42:
4f:40:0f:b8:89:8e:05:da:88:76:17:28:64:70:bc:
32:eb:98:2e:01:7a:9c:3e:ba:95:38:45:70:7e:42:
35:6e:cd:d4:fe:1a:f8:66:12:4a:54:c1:dd:f6:d8:
96:ea:1a:a0:3e:80:3f:0d:e8:81:ed:01:a1:f1:f4:
8c:6f:19:ce:59:69:35:9e:dd:16:60:59:79:06:75:
03:4f:92:cb:b5:58:52:75:6d:d4:75:96:81:16:4b:
2a:1a:1c:9c:7e:f9:05:af:c7:81:3c:fc:e0:6c:a7:
34:16:a1:e4:4b:c4:6b:5b:ff:ae:9c:97:fa:d5:f6:
13:46:9e:b8:1c:5e:b2:0b:2e:39:92:4e:be:ef:d8:
55:a0:d0:83:0f:ff:8a:2c:cb:3f:b8:0f:b7:23:09:
b3:ee:7c:3a:ab:4d:77:fa:30:a7:30:f4:dd:b8:a8:
45:50:7f:e4:86:16:99:91:d6:39:d9:9f:c3:54:38:
d1:df:44:4a:f4:3f:c6:2e:58:88:37:d2:e3:6f:22:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:92:AF:1C:F0:4A:40:AA:68:44:BB:80:D5:78:5F:4C:CE:66:79
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:71:f7:0b:63:d1:54:0a:43:0f:e3:72:8e:6f:aa:d6:e8:
47:c2:7d:bf:fa:bc:68:47:2d:08:48:b7:53:a3:b3:27:36:0f:
53:7d:90:1b:bf:d2:74:8d:5d:12:4f:de:ef:0b:e4:ba:9b:5c:
1a:10:67:e9:28:34:1f:75:e1:3e:fc:b9:be:02:cd:ad:15:07:
1c:d7:da:dd:77:d8:1e:53:93:66:6f:82:0a:7a:f3:c1:8d:4b:
f5:2c:b1:27:69:ce:ba:51:c9:f1:17:2e:d0:25:3d:d4:bf:f7:
e0:04:2d:f6:3c:e0:15:ab:1a:14:a5:2b:17:49:92:78:b0:b7:
e7:76:ea:65:c0:49:5d:f8:a6:ac:66:ea:dd:12:f1:04:7d:a6:
0e:9e:e5:30:ee:71:19:7f:aa:b2:c0:ce:3f:47:17:68:53:81:
55:e7:0c:48:46:18:e3:cf:97:75:cd:b5:f4:82:9a:53:3f:c8:
06:0c:85:a2:97:98:56:ff:86:c5:77:57:8b:33:a7:9b:98:35:
59:8f:21:a6:96:37:a3:68:52:69:fc:13:46:72:68:dc:61:7e:
c3:54:5c:5a:87:09:8d:77:5b:43:ed:63:5b:a5:91:ba:ff:8d:
26:23:c1:41:bd:1b:e1:63:ad:1b:e6:36:02:f4:8b:55:6d:59:
fb:e9:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:26 2026 by rpki-client