
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json)
Hash identifier: TSGgDKONTHbB/dbQ7gsHBztrmeKEO4HgY8BJFTIr9ow=
Subject key identifier: 69:A1:BC:8C:A9:32:D7:13:5A:50:DE:96:95:B5:EE:6E:BD:E2:FE:6D
Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Certificate serial: 05A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
Manifest number: 059A
Signing time: Tue 24 Mar 2026 22:54:17 +0000
Manifest this update: Tue 24 Mar 2026 22:54:16 +0000
Manifest next update: Tue 31 Mar 2026 22:54:16 +0000
Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: Pk5h1vCFfka63FWNMcVke81SiacSHvUlQ3I67mHS4BY=)
2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: HtxUJkp5zxYNL1dtrouSx7jF/xggDcaVXerQ7Nvy5gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441 (0x5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Validity
Not Before: Mar 24 22:54:16 2026 GMT
Not After : Mar 31 22:54:16 2026 GMT
Subject: CN=69c31618-cf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:30:28:68:bb:47:29:4d:b5:15:da:6b:c0:
9c:6b:40:16:a5:30:29:90:b9:fd:e8:fa:30:23:0e:
18:cf:f1:96:f8:2b:9a:08:40:3b:c8:ae:99:51:0f:
98:f5:3f:3c:16:cf:d7:f3:fd:37:28:9f:c3:50:38:
73:c0:b9:de:f4:09:ee:16:00:bc:59:c1:02:71:46:
e9:2d:71:5c:aa:4b:22:f5:ff:c4:0b:75:28:9b:45:
62:13:c4:e6:f9:1d:7b:b8:96:9b:1a:7e:7d:a1:74:
a6:5c:cc:8e:c0:54:23:18:46:ba:40:a3:4b:6b:46:
42:9a:8a:68:d5:74:1d:4e:4c:16:d0:d0:76:75:9a:
3f:07:b9:62:93:da:49:12:e3:eb:6f:59:df:59:ce:
2b:8b:5e:62:23:85:28:ee:68:84:38:65:df:6d:af:
6d:77:4e:f0:64:81:ca:4c:12:71:92:20:53:61:bf:
19:cb:10:31:27:67:f8:e4:28:43:42:7b:65:c5:e1:
a2:4b:77:32:f4:d0:b2:d5:3f:68:a7:76:b7:fb:de:
1c:cd:e9:c7:a7:37:f7:6f:72:12:16:fd:fa:f7:cf:
99:9e:48:76:b1:ea:d4:97:b5:4b:cc:1f:e3:8c:c5:
20:6c:9e:5b:a5:21:a3:da:8c:ba:66:37:41:5e:e4:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:BC:8C:A9:32:D7:13:5A:50:DE:96:95:B5:EE:6E:BD:E2:FE:6D
X509v3 Authority Key Identifier:
keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:91:fb:94:41:65:36:d3:58:b0:d7:5e:45:54:89:e0:4b:
9d:b0:b0:4a:f2:7c:fb:14:44:1c:53:c1:06:bd:c0:9d:2c:4e:
fd:f4:1c:d3:50:c1:2d:6a:42:0e:78:c9:72:d4:6c:5b:e4:d9:
80:2c:46:93:ea:0f:b7:ec:b9:b1:d9:2a:16:93:4c:8b:d7:7c:
7f:85:83:ad:75:40:a4:f6:cd:f7:5c:3f:0d:5b:78:94:99:9c:
1d:2c:ba:c3:18:3a:4b:6c:dd:e6:e5:5b:92:58:34:3e:81:9d:
d4:36:c3:5c:6a:15:8d:df:d5:80:1d:57:28:79:f0:d2:3e:8e:
f7:a5:0d:48:77:ba:a7:26:61:89:ce:fe:c0:22:c5:4a:3d:b4:
a1:41:1c:d5:8d:8f:e2:91:3e:e7:2c:2b:6d:44:c1:7a:e0:01:
6f:44:bd:cf:e6:5c:bb:82:55:a8:f8:9d:f4:26:11:91:ee:26:
0e:34:5b:a7:a7:33:c2:10:1a:ec:34:13:f9:d3:a2:8b:56:80:
5f:e5:d4:be:3c:96:a2:c4:d8:cd:9d:1b:52:cf:03:9e:74:18:
2d:8f:ff:a5:8e:4b:5c:7c:48:71:19:f4:d3:4c:8a:71:43:be:
06:6a:09:ee:d1:6e:48:2f:e7:47:34:38:60:b8:43:5e:92:6a:
5d:11:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:10 2026 by rpki-client