
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File: xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier: W03ghGmKEEhc/bDHc3yq9XVLy2AAxRLfkBxWSWKD6Q8=
Subject key identifier: F5:B4:7A:56:7D:9B:6E:2C:9E:B2:61:F5:37:A6:7F:92:98:3D:E2:D3
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer: /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number: 0866
Signing time: Sat 28 Feb 2026 21:02:36 +0000
Manifest this update: Sat 28 Feb 2026 21:02:35 +0000
Manifest next update: Sat 07 Mar 2026 21:02:35 +0000
Files and hashes: 1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: UZU0shjNTFHhZkhf8gpqtEz/WiDeKiEw8o2Jio8Df/0=)
2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: Y1XODsYMVyKyWg/5bFmuk9Xe0SDzwsDCSzbtwlv6QeM=)
3: 15335506DD8C11F0AEC3F5743D6F56BC.roa (hash: WxkHRDNlNggLuKpNpic7favNnxMTOs4ZljClz0yQynU=)
4: 15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (hash: KqRvZo5E4wBhdqUsLILZB4n2af8w3vLwVtn67zB2JnU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Validity
Not Before: Feb 28 21:02:35 2026 GMT
Not After : Mar 7 21:02:35 2026 GMT
Subject: CN=69a357ec-ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:8b:f2:50:5b:65:7f:8e:d0:1e:b9:5e:2d:
a1:51:36:64:93:dd:af:a6:ed:55:23:89:2f:cb:44:
ff:41:f9:57:7b:88:95:ee:48:78:44:8c:be:27:55:
42:c3:76:a3:23:84:07:e6:6f:b3:d0:38:d6:7a:6d:
de:9b:1c:bb:be:8e:76:f6:37:8d:7b:ea:70:83:47:
ae:a3:df:88:e9:04:6b:d5:16:97:7f:eb:c5:19:f9:
97:38:96:b7:6b:a8:af:7e:28:16:5c:74:3b:86:84:
9b:89:df:a4:22:e3:ec:cb:8e:c4:c8:34:7a:fb:34:
f7:fe:55:ce:b6:08:13:92:6b:69:86:17:e6:b2:3d:
a2:20:c3:2f:bf:b8:40:fb:df:5b:23:94:db:56:19:
3a:be:0c:94:15:6c:d1:21:2a:7d:dd:d5:45:1f:52:
f3:18:35:fe:92:02:a1:42:ac:90:3a:f8:ff:fd:58:
42:33:68:cd:00:e8:7b:ab:e8:69:5e:1b:62:97:12:
54:19:27:a3:d7:43:76:9a:2d:07:d2:67:48:89:7f:
d9:35:3b:66:ee:98:8c:66:46:85:11:92:14:63:14:
bc:04:57:be:29:fd:4f:e8:1a:29:57:44:81:14:3a:
34:e8:80:e1:92:9e:e1:7d:24:63:86:30:6f:12:f5:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:7A:56:7D:9B:6E:2C:9E:B2:61:F5:37:A6:7F:92:98:3D:E2:D3
X509v3 Authority Key Identifier:
keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:92:1a:d9:01:d8:c9:9a:4d:f2:41:f4:7e:66:20:11:9f:
c0:f8:41:d6:6c:9e:6a:60:b6:17:78:df:5a:ef:df:5e:fb:da:
2f:d9:57:cd:84:31:98:75:38:55:0a:71:fa:b4:0c:5c:8c:c2:
ce:9e:5d:19:61:11:4c:75:48:c1:91:42:65:fc:4c:73:38:8d:
d8:ae:29:b1:ec:6c:8d:e0:cf:10:74:7b:b0:98:21:3f:30:5f:
e4:0e:e3:ab:35:4b:a6:4c:d1:17:37:58:65:d0:0d:33:bf:68:
c7:c3:c4:16:7d:c3:ea:f6:5b:ad:55:44:75:89:a8:2b:92:0b:
d2:d8:b2:56:e4:db:56:65:2a:c2:2e:88:02:e4:4e:66:9a:ed:
6c:d6:67:91:37:45:84:d9:41:b3:06:98:72:16:33:dd:14:fc:
a0:3e:cb:7d:46:d5:63:ee:88:1c:c1:b8:4c:c9:97:60:5f:65:
83:e0:30:3c:7e:d7:f9:15:c6:93:84:dd:46:e9:56:93:47:3a:
b2:48:f7:16:33:b6:da:ed:69:c2:66:38:08:3c:e2:12:f0:6a:
9c:f0:ed:ab:3c:34:7c:e9:cf:3c:29:6f:84:c0:e2:f6:f3:d5:
3f:1c:44:12:d5:46:ad:25:ab:a7:91:90:cb:36:61:69:ce:12:
6c:6f:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:13 2026 by rpki-client