
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json)
Hash identifier: CBM3HB7AdPnePr4Va3AdU77SzFv8ng6zraUihpNrkfM=
Subject key identifier: C5:A3:3C:F5:CE:95:73:15:52:FF:66:40:40:00:98:CE:F0:F0:49:77
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
Manifest number: 020C
Signing time: Mon 21 Sep 2026 03:08:41 +0000
Manifest this update: Mon 21 Sep 2026 03:08:41 +0000
Manifest next update: Mon 28 Sep 2026 03:08:41 +0000
Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: /Lat6K+lefmMShD2DJDoIzWntsqnShDe/s+UthWWLcU=)
2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: cqGtRkyIvtI6VzYqSOXDeTVxWlR+pKo31+SsEOK5spw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Validity
Not Before: Sep 21 03:08:41 2026 GMT
Not After : Sep 28 03:08:41 2026 GMT
Subject: CN=6ab09fb9-88a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:c4:ea:18:f9:e2:ca:9f:32:90:0b:b8:4d:
78:c6:a6:98:aa:3d:75:e7:07:42:44:76:ed:49:98:
9d:05:5a:43:b7:85:07:1a:87:18:a8:c0:6d:2e:8c:
40:11:10:3d:14:0b:fa:d0:e8:f4:64:24:ed:12:ab:
bc:01:17:65:39:84:db:38:e9:31:f6:92:51:04:7d:
f7:81:a1:36:8c:3d:47:9c:fa:ee:af:6d:2b:50:61:
b9:39:a1:a1:de:44:ab:49:55:fb:2f:b8:cb:eb:15:
d0:76:d7:bf:6a:da:bb:10:1a:fa:6f:24:f3:08:b4:
53:99:e7:e5:02:ef:cb:70:6f:41:05:6c:8e:72:ab:
84:8b:f5:8f:3e:6c:85:f5:76:b9:26:ed:b4:de:cc:
fa:10:12:e9:5c:3f:75:7f:75:f1:ec:ad:af:25:7e:
55:79:f5:9e:c3:38:3c:df:e5:31:ff:17:2d:a7:91:
97:00:a2:8f:1e:c8:61:2c:e9:23:95:f6:12:40:28:
7f:92:df:38:86:17:da:79:83:49:15:c7:92:88:3f:
ae:dc:0b:47:0a:49:38:78:09:72:5f:e3:94:90:88:
c2:1b:13:83:0e:06:4f:c7:af:96:9b:cb:6c:ec:15:
86:65:00:e0:5c:b6:45:f8:05:ed:db:09:6f:24:ee:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:3C:F5:CE:95:73:15:52:FF:66:40:40:00:98:CE:F0:F0:49:77
X509v3 Authority Key Identifier:
keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:06:8f:09:25:df:e4:a2:8c:96:04:a6:f9:b3:80:72:f6:
12:8f:c0:a1:5b:e8:cb:48:3f:33:72:32:66:4e:57:ff:77:d5:
8c:88:80:8c:73:de:ea:d5:fd:f3:8b:38:53:9f:b5:40:b9:87:
45:06:76:1d:33:92:c8:f2:f5:47:aa:67:cd:a6:4c:c4:53:74:
d7:9d:2c:7c:1d:7f:d2:7b:b2:62:de:43:40:00:a6:74:7c:aa:
6e:4f:ac:5d:11:63:93:4e:af:52:a8:16:9c:e4:b1:dc:6c:f4:
14:3b:03:46:8e:dc:91:c7:ad:44:2b:58:ef:df:18:d5:91:0c:
c5:7c:00:ae:36:fc:44:0f:ec:d3:5c:56:2d:cc:a6:b0:0a:db:
06:cd:07:c0:b0:ee:48:52:e8:2e:88:7e:0f:d9:0b:85:f7:33:
28:9e:45:ac:26:cf:df:20:f3:4a:13:d8:f2:d8:87:9d:01:48:
ed:e2:d2:37:f1:58:72:05:e4:cf:76:1c:e3:19:a2:4e:5d:ef:
25:10:cf:1e:2c:f8:2c:5d:ae:f6:ec:3d:79:68:72:01:13:89:
f6:91:db:1f:70:a0:99:60:a2:5e:b5:fa:5e:6f:89:01:0e:02:
fc:31:bf:50:12:30:0b:62:22:6f:5c:73:37:8a:98:06:44:65:
7a:bd:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:37:29 2026 by rpki-client