
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier: 974K09YkInr+/rlxjswUSIDX1h8qKuBVvvXYMB2KzlY=
Subject key identifier: 3B:0F:28:72:D6:84:DC:E1:7B:43:D4:9D:5A:ED:D3:75:DB:18:49:10
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial: 032B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number: 0324
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Fri 24 Apr 2026 01:00:38 +0000
Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: YI8FIzO8xZAIqy4uzwNYFPr8k2xmI/RinlwOFU4YsEE=)
2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: J2PApqr+PhuIOFT4jmSyae2c/UdsfNvMzE8JRIfQl+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811 (0x32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 24 01:00:38 2026 GMT
Subject: CN=69e18636-7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:eb:c0:10:d9:fa:9c:48:98:f6:fa:be:d4:
47:a9:d0:7e:86:6a:1f:cd:61:16:43:9b:c9:bf:eb:
44:0d:7a:5e:1c:b9:db:12:93:75:f2:d7:f6:d4:11:
77:9f:70:8f:59:8f:7a:45:63:51:7b:da:95:5e:20:
0c:12:cb:36:82:ec:f3:b4:09:40:20:94:6e:63:7c:
e9:9c:20:63:c1:fc:06:ca:3c:da:7b:40:f8:d5:4d:
c3:4d:29:82:92:ac:cd:6b:14:1a:e5:3c:cc:a8:f7:
9e:e0:7b:d1:a3:c7:43:59:4c:f3:34:9c:89:8b:79:
20:b8:7b:1e:c1:55:45:6d:c7:4e:26:cb:18:cd:ab:
03:6a:c6:c8:80:43:ef:f8:d9:55:b8:46:10:74:b0:
0f:fb:ad:ac:58:22:68:55:23:65:28:be:4a:58:95:
ef:3f:19:7f:05:70:3b:b5:ab:45:69:e0:77:6b:8d:
fb:07:4a:b5:93:7f:64:57:38:b4:6c:91:2d:bc:af:
ec:3b:e3:87:0e:3f:8d:8a:b1:c6:b2:43:cc:1d:7d:
c4:7f:3f:74:b6:1a:e7:d4:a7:e0:86:95:31:31:0d:
6a:10:68:30:69:a0:22:30:5d:d6:70:80:bc:02:4c:
c7:24:af:fe:bc:73:ca:34:2f:17:bf:11:0d:fd:5e:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:28:72:D6:84:DC:E1:7B:43:D4:9D:5A:ED:D3:75:DB:18:49:10
X509v3 Authority Key Identifier:
keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:9e:2a:e0:d0:ad:0c:ce:7d:7e:45:2d:54:32:0f:f7:45:16:
4a:fe:32:b1:5c:d3:2a:54:9d:a0:71:e7:48:d0:04:10:2e:f5:
31:22:67:56:d9:0b:da:db:51:d1:f8:80:7a:22:ee:33:51:55:
0d:3d:4b:1f:97:e2:48:e8:c3:16:43:43:48:f0:ba:df:93:46:
1b:e6:2e:63:53:d0:5b:1d:be:86:00:8d:f3:7b:43:b3:90:f5:
c4:97:84:5a:89:c4:77:8d:d7:e4:41:39:a0:d9:67:08:7e:42:
ce:29:86:f8:06:70:9e:48:86:90:8f:11:64:1d:2b:cf:e9:ea:
22:77:e1:5a:c2:7c:04:5c:b0:17:56:29:f0:96:f7:c1:9f:af:
11:e2:0d:08:c2:f5:1f:11:53:3c:33:69:d8:f8:62:d0:2d:19:
ad:20:ef:e7:ce:aa:c5:40:e1:ae:ea:90:9e:53:ef:50:85:39:
59:a3:d0:20:93:96:44:c2:dd:0b:59:72:1b:27:a5:98:ab:84:
c9:dc:0e:a1:91:a6:64:dc:ed:8e:5a:46:05:61:23:9c:eb:af:
d1:38:5c:d7:15:41:dc:79:50:ec:e2:03:96:14:3d:3f:53:f3:
8b:95:34:db:df:84:66:02:d1:01:b5:00:0f:b5:15:02:09:53:
0f:4a:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:03 2026 by rpki-client