
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier: eWSgNdayO29fYSstB07lbRfIYiwfoY0PbWpTh6LcG8Y=
Subject key identifier: 9F:4D:DC:55:7F:F5:AB:EC:00:FB:FA:D9:41:CB:26:81:72:FD:50:63
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial: 07C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number: 07B0
Signing time: Mon 02 Mar 2026 00:05:13 +0000
Manifest this update: Mon 02 Mar 2026 00:05:12 +0000
Manifest next update: Mon 09 Mar 2026 00:05:12 +0000
Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: qK+JBTinhIra8USC5gaH2mLvI43Rq6foTRTAiGLALaw=)
2: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
3: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Validity
Not Before: Mar 2 00:05:12 2026 GMT
Not After : Mar 9 00:05:12 2026 GMT
Subject: CN=69a4d439-f89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:99:2b:44:5c:13:ff:71:47:61:fe:99:f9:
12:90:ad:0f:96:45:03:39:21:5e:2c:00:6e:21:77:
28:94:54:0f:fe:3d:c2:e8:b4:80:9c:0f:45:77:56:
11:76:ad:0f:70:93:5b:c6:02:51:76:dd:b6:5e:43:
3a:ff:64:e8:7d:28:f2:91:57:9b:04:99:8f:e4:a7:
9e:86:bd:43:65:cc:d6:f3:b9:43:23:1b:9c:cd:ec:
87:3a:7e:02:1e:67:4b:db:48:a7:6c:4e:e7:72:f1:
f8:4f:e6:f1:3a:61:1b:c9:0d:bf:e4:b3:b3:63:f7:
4e:70:ed:22:2c:a6:c2:cb:18:c4:e3:22:64:48:34:
c6:45:40:d2:6d:5b:1e:c0:a5:7d:ef:50:7f:ab:8e:
85:9d:52:90:cb:54:9b:4c:29:3c:a0:7e:54:ce:69:
eb:ea:f0:75:4d:08:8c:00:6e:b5:d2:53:cf:7f:8e:
0b:ef:6c:be:38:3f:70:7f:2d:5d:1c:f5:65:58:9e:
41:f9:57:9d:92:e3:3a:e7:ca:8d:c4:52:24:05:0f:
46:9b:7a:b3:22:26:3b:98:31:c3:c5:2c:fa:11:d0:
e7:98:0f:09:3b:f0:db:72:75:a9:5c:a7:6f:61:cd:
d3:77:c7:a0:06:f6:e6:96:63:a0:d0:73:b7:9a:33:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:DC:55:7F:F5:AB:EC:00:FB:FA:D9:41:CB:26:81:72:FD:50:63
X509v3 Authority Key Identifier:
keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:73:a0:01:19:6f:20:a8:c3:b5:04:da:06:63:c7:90:9a:
75:e1:64:16:b5:8a:63:eb:aa:66:bc:e3:9e:7c:22:8b:35:08:
e4:f2:f5:4d:f4:03:b4:13:e9:14:e5:ce:33:e6:14:00:aa:af:
3a:1e:b2:cc:e7:74:dd:a6:97:b7:cd:1e:a3:57:51:be:8a:b1:
aa:50:d3:39:64:39:e1:60:2c:9f:69:ef:28:04:e1:24:59:8f:
ee:65:94:b1:69:9a:9d:f9:61:6c:41:6a:0c:39:ab:8c:75:15:
94:53:09:84:81:7e:96:3f:af:d5:26:59:c1:c6:43:66:75:e5:
e9:5a:39:77:59:ea:ba:01:d0:43:a2:b2:92:70:c6:b4:fd:33:
bc:1c:b5:d8:0c:89:0f:aa:b1:31:bd:a3:bb:4a:31:bd:4e:25:
b6:7e:da:fe:aa:d4:d8:14:a4:9d:b9:93:00:91:70:4a:89:bd:
72:08:92:43:bc:9f:fa:0a:02:46:8d:a1:0d:02:2e:7a:9b:92:
47:7a:e5:19:99:f4:11:41:98:16:2e:df:aa:3d:54:d5:67:d0:
b0:f0:7c:d7:4f:6b:bc:2b:a8:20:b0:ff:b8:c0:00:5c:43:2c:
8f:e9:07:62:29:0c:4a:40:e3:4c:7f:ec:13:37:8b:de:c8:ee:
e7:3d:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:58 2026 by rpki-client