
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier: GhWt3v4a6AiP3KNG7o1E3DX0Duoaj8XDHTjXHDNGy8A=
Subject key identifier: 67:9F:87:6F:4F:9F:09:30:A8:FB:23:33:1A:A6:A0:4E:FB:49:6E:0F
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number: 0264
Signing time: Mon 02 Mar 2026 02:16:23 +0000
Manifest this update: Mon 02 Mar 2026 02:16:21 +0000
Manifest next update: Mon 09 Mar 2026 02:16:21 +0000
Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: tZwbuokj23n+DF1qg+2Je3mYEGae8QnoMr1qPRTzEbo=)
2: 69349714157D11F0876A4D62C4F9AE02.roa (hash: oYbFnj0zT39rqmZi1wLTMzBUy8GKiMXQ3BORFFXqKM8=)
3: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: QKMAj5oVDcVogqlTrx41/NbrU6v80sS6Oreeo4WKGNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Validity
Not Before: Mar 2 02:16:21 2026 GMT
Not After : Mar 9 02:16:21 2026 GMT
Subject: CN=69a4f2f7-6280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:ca:0b:bf:c2:a2:ec:94:f5:ef:27:1b:c9:
d3:dd:cb:ca:7b:df:30:98:13:0b:e9:e2:f3:57:df:
15:83:ae:4b:69:33:2e:a2:ac:9a:08:90:15:ec:f1:
db:ad:f8:56:6e:f2:5e:aa:4b:6b:ce:43:81:b4:76:
83:d8:c3:05:a8:24:4f:a6:64:a5:ff:5e:66:6b:a1:
5e:ce:cc:ac:9b:a1:07:46:b7:15:d5:68:50:98:9d:
c7:e7:37:c7:0a:c8:08:ef:2f:03:cb:3e:cd:b3:42:
95:e3:ee:bd:25:8b:e1:29:22:43:d6:e4:95:e6:67:
04:27:be:27:7f:a1:5b:c2:ee:9b:12:9d:9a:70:40:
cd:21:b4:a5:52:ff:3f:22:7e:30:5a:f1:5d:19:f3:
4d:a5:86:02:a4:2e:53:37:fe:b2:44:ce:07:92:bb:
ad:6f:bd:d0:b9:a2:e9:75:b0:e4:19:ad:31:43:89:
a9:e2:82:50:da:cd:c9:7d:5a:52:0c:92:01:82:9c:
08:6b:d9:29:02:61:f1:ba:8e:6b:7e:8f:35:84:27:
9f:69:b3:71:c1:ae:f1:dd:1c:48:08:66:1a:b9:81:
61:e0:e9:8d:c1:11:fb:0d:89:d1:46:06:49:05:27:
7b:05:fd:f7:0a:45:83:27:69:2f:e8:bd:cc:ed:23:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:87:6F:4F:9F:09:30:A8:FB:23:33:1A:A6:A0:4E:FB:49:6E:0F
X509v3 Authority Key Identifier:
keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:2d:b9:11:1f:c7:24:bd:ba:bd:54:21:c8:7a:03:82:5a:
8b:00:af:8e:15:ce:4b:b7:d6:e8:3a:f6:c2:fc:b7:5a:b2:f8:
ef:53:a6:ad:26:ce:92:c5:ba:0e:da:25:a9:58:97:de:ca:f7:
02:ac:fa:04:05:87:8f:ab:e9:42:8f:36:0d:99:cf:0e:79:3c:
7f:4d:1f:a7:d1:a6:73:ca:69:b1:ed:fe:fa:fd:08:87:f8:0d:
52:2c:4d:ba:6d:20:0a:9b:b8:5a:e3:9f:4c:99:40:34:46:bd:
cc:78:83:8c:b3:fa:71:77:69:be:d2:f4:3c:fa:4b:92:e0:a6:
bd:7b:bf:90:bd:2e:61:9a:03:8a:d4:8f:73:fe:6f:f1:f8:af:
f6:45:1a:ed:f7:37:93:7b:0e:c5:fa:a4:79:5e:ac:88:cd:37:
34:ed:2a:24:80:fd:ba:9e:28:0b:62:0f:b8:4b:7e:93:cb:67:
bf:e6:86:c4:71:2f:89:fc:b2:6b:08:80:c0:f9:e1:03:33:d3:
cb:6f:d6:17:b5:b9:28:da:69:f5:d7:b3:d1:0c:aa:7a:01:de:
02:7e:3d:7e:bd:d9:36:09:1f:60:3f:1f:e0:ef:24:43:77:a6:
a1:40:1a:e5:a9:b5:68:51:27:0f:d3:82:3a:16:84:eb:60:9f:
ab:c2:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:50 2026 by rpki-client