
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
File: xL9bEU_BXXDIgNvBbowaMCo6LyE.mft (raw, json)
Hash identifier: G4+TyUHPLaaZnX9olHR5OXKBYf1sb6LHyCDxS8sxZew=
Subject key identifier: 0B:82:7F:77:DD:98:EB:03:A8:5A:4E:60:5B:04:D7:8A:DA:BA:68:1A
Authority key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
Certificate issuer: /CN=A9192920/serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
Manifest number: 0808
Signing time: Mon 02 Mar 2026 00:00:07 +0000
Manifest this update: Mon 02 Mar 2026 00:00:05 +0000
Manifest next update: Mon 09 Mar 2026 00:00:05 +0000
Files and hashes: 1: xL9bEU_BXXDIgNvBbowaMCo6LyE.crl (hash: u2USj5Wwcl/l2eudxlYHXbmMv5LYXuFEcHUuo0LGo5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Validity
Not Before: Mar 2 00:00:05 2026 GMT
Not After : Mar 9 00:00:05 2026 GMT
Subject: CN=69a4d307-14c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:b4:ee:23:c6:ff:59:cf:fb:d5:04:ee:e7:
ee:e3:d6:72:3b:37:7f:11:89:f4:74:99:79:5b:88:
e1:ac:c0:00:93:21:a9:14:9a:43:5c:93:9a:c3:40:
82:0c:88:be:d9:10:e5:13:84:b5:97:b5:29:9f:c5:
30:2e:e3:28:e2:21:dc:f5:0b:5c:3b:bd:50:20:00:
34:5c:8d:60:93:01:ce:13:f6:fc:8d:56:94:c4:7b:
26:df:14:46:0d:78:79:b6:34:41:df:ab:c7:3e:10:
64:42:a4:d9:26:ab:7a:5a:32:61:33:ae:b3:35:69:
bf:c0:48:41:f9:f3:8e:2f:70:ae:f3:07:28:d1:50:
0e:05:1c:29:bb:25:ec:ba:d2:83:28:97:84:29:57:
9f:cb:79:eb:3a:68:f3:ad:0f:40:49:35:e6:e3:60:
e3:4b:8d:f8:2f:9d:e1:8e:4d:bd:33:84:f3:16:a5:
20:d9:04:a7:4a:f9:53:2a:b8:9a:f0:b1:92:6e:31:
99:43:1d:f4:4e:4f:ae:4e:1e:27:45:bf:11:63:98:
0a:07:5c:3f:87:95:64:bc:c8:9f:36:36:16:3f:c0:
8e:d7:55:51:dd:6e:ca:1c:d9:63:37:4d:95:9a:7b:
ac:ee:3c:d4:b9:d6:3d:fd:41:59:d3:dc:0d:81:ad:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:7F:77:DD:98:EB:03:A8:5A:4E:60:5B:04:D7:8A:DA:BA:68:1A
X509v3 Authority Key Identifier:
keyid:C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:f5:3d:fc:9e:e0:1b:40:25:5a:4e:c8:04:81:33:8f:16:
7d:f2:3c:ef:ae:ed:9d:26:7d:0b:34:3d:1d:b0:00:2d:99:66:
1d:14:bd:08:31:8a:cd:f4:77:ef:87:46:8d:67:d2:07:3c:64:
df:a3:fb:19:2b:75:22:75:ec:de:04:0d:e5:e5:3c:c7:85:f1:
25:9f:9f:07:ec:8e:55:28:5e:c7:f0:84:f9:a4:0b:2b:78:96:
ef:ec:f4:f2:3b:5f:60:66:0b:df:77:78:a7:66:06:1d:5a:6c:
92:98:7e:f0:f5:5e:50:b3:9e:59:41:55:a5:ac:ea:f0:4c:43:
13:23:dd:f0:8c:f6:7d:81:7a:21:3f:c8:10:33:f9:5e:9b:9b:
e7:a6:94:4b:9d:41:fe:79:85:40:7c:99:50:f4:3e:69:5b:79:
f0:f4:27:bf:70:ae:b1:36:32:6b:5c:6a:25:9b:4b:88:04:98:
04:83:cc:72:01:14:0a:b3:ed:83:dc:17:c7:35:1d:9c:7d:2f:
09:47:8e:e0:e3:e7:93:36:96:00:65:3e:6f:e5:c0:63:fd:59:
e8:1d:e4:e0:67:50:76:b8:84:ea:c3:57:c1:fb:59:1c:1f:f4:
be:45:56:78:9d:3b:98:9f:84:13:6b:f4:c5:e2:77:66:4f:ed:
0f:b9:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:53 2026 by rpki-client