
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File: xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier: vrXdGonm+eAE/uUyAUd/zGDQBLE/SYB8hUsxpEcl2qc=
Subject key identifier: D1:5B:F0:AA:DB:17:E6:13:FC:5D:05:B3:A6:E9:93:FD:67:6A:BC:AD
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial: 0467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number: 0461
Signing time: Fri 17 Apr 2026 00:03:27 +0000
Manifest this update: Fri 17 Apr 2026 00:03:27 +0000
Manifest next update: Fri 24 Apr 2026 00:03:27 +0000
Files and hashes: 1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: YIrTTqqAGFEW6NIzhdZBd9YHFevWWIQQBc8KN7hQTlI=)
2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: hVWOem+pLii4MQTJ55oAfG4bFT1qvrHFyRRkJ/xs+Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Validity
Not Before: Apr 17 00:03:27 2026 GMT
Not After : Apr 24 00:03:27 2026 GMT
Subject: CN=69e178cf-bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:cf:08:58:0b:b4:28:0d:9a:94:e0:7e:39:
17:90:83:5a:3b:01:64:e4:7f:78:8f:b7:1e:93:71:
fa:f2:0f:13:33:43:cd:b1:9c:8e:bc:f9:3c:3d:12:
af:8c:c5:45:b1:db:4a:24:5c:16:7b:88:e5:27:3a:
42:e4:99:87:fa:5f:67:48:5d:da:2c:f2:27:cd:ba:
34:68:d2:28:d3:9d:ad:f8:aa:a1:ed:72:5b:59:53:
ad:26:3a:e4:fb:d5:64:bd:d2:ce:cd:e6:ad:e5:da:
06:0f:b5:e3:78:aa:58:99:e5:92:de:a7:8f:65:b3:
f0:6a:46:04:4a:1d:5b:87:a5:19:3e:62:c9:9a:f6:
21:e7:e2:6e:bf:38:6c:39:bb:f4:9b:f5:53:e2:f1:
49:3e:b8:b2:07:fa:9d:c1:e3:6e:3e:cc:88:6a:45:
4a:e2:a7:0c:63:43:69:c5:4f:67:a9:93:9a:a3:6a:
2c:1f:60:35:8f:18:e9:41:c0:45:dc:e6:e9:2c:e0:
b5:82:15:7a:e9:4c:0c:4a:77:78:7c:2c:80:16:83:
05:d5:6b:9d:9f:03:dc:6d:39:ce:77:3c:fc:ea:d2:
e4:0b:70:a5:8a:6a:9b:65:2d:83:ba:aa:4d:54:57:
ae:1b:b9:b2:50:12:55:1c:31:96:d9:6f:e3:2c:8f:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:F0:AA:DB:17:E6:13:FC:5D:05:B3:A6:E9:93:FD:67:6A:BC:AD
X509v3 Authority Key Identifier:
keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:8e:b2:3f:a5:cf:53:ba:54:90:15:6b:b3:8f:ab:b8:92:
28:20:c9:25:58:af:1f:46:c4:38:6d:be:95:ba:64:ed:84:27:
f4:33:37:3d:a1:33:b2:f1:01:35:ff:ce:3e:4d:f1:00:b0:23:
8b:9d:b2:aa:28:5b:36:4a:9c:ea:aa:f7:18:2c:5c:6d:38:f1:
a4:92:24:e1:34:5e:22:3e:8f:27:8c:47:57:67:40:68:f5:7a:
23:88:43:03:7f:75:d5:d3:05:c9:2b:93:20:28:91:ba:4e:57:
75:a2:8a:ac:ec:e1:8b:fd:95:2a:dc:ba:aa:ab:ed:dd:06:da:
1a:59:a5:e1:a2:d7:82:65:87:42:a7:ba:1d:64:62:57:c2:d1:
96:93:0d:25:e4:45:83:f6:40:b8:64:6d:87:6b:30:0c:85:8d:
77:1e:83:f3:76:1f:3e:65:78:88:36:00:b6:68:47:e7:6d:85:
f5:c9:75:ed:74:d3:c7:68:1d:0c:69:49:79:cf:e0:dd:63:ae:
f4:c1:2d:4e:04:f0:a0:8a:6e:ec:09:24:17:a6:78:fe:67:d0:
d4:f8:d9:cb:77:db:aa:4e:5b:14:47:b2:be:46:78:ac:f6:4a:
ba:42:21:86:f1:99:8d:f5:61:54:bf:77:d7:97:70:ef:21:f3:
39:ea:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:23 2026 by rpki-client