
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
File: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft (raw, json)
Hash identifier: I0j4+RhVa29JFrRFYWPjCZkXhAcZPCp4xQEmbztpqbg=
Subject key identifier: 87:04:6F:62:F1:61:F8:26:ED:D5:56:C2:B2:22:9B:EB:78:9D:02:8E
Authority key identifier: 0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
Certificate issuer: /CN=A91201F1/serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
Manifest number: 1D
Signing time: Wed 25 Mar 2026 08:06:53 +0000
Manifest this update: Wed 25 Mar 2026 08:06:53 +0000
Manifest next update: Wed 01 Apr 2026 08:06:53 +0000
Files and hashes: 1: CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl (hash: qEJ4AY10o+cl+a1s+jWBAmOKMJstMLx/3NG+lSNBdt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl
rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201F1, serialNumber=0B1412EF126BFD8F08FD84A2F6024C806ADB1791
Validity
Not Before: Mar 25 08:06:53 2026 GMT
Not After : Apr 1 08:06:53 2026 GMT
Subject: CN=69c3979d-5861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:f4:ab:be:cb:7d:a3:84:a0:71:83:4f:38:
96:69:63:10:34:70:42:82:41:f3:31:3b:49:b5:ed:
57:96:c8:5a:af:13:94:f8:5f:93:f1:b1:a7:89:87:
ab:3f:f0:84:8a:9d:50:3e:55:ab:3f:0e:78:a4:33:
ba:5d:26:d2:0b:96:60:21:69:bf:fb:3c:e3:85:3e:
34:b8:33:50:d5:52:8c:90:85:3b:ca:82:fb:22:e6:
33:36:55:15:7c:29:d9:3b:25:3a:3a:f4:0f:17:5a:
7a:78:0a:40:98:94:f8:3b:8b:08:f3:af:83:11:09:
02:90:90:70:e5:0b:d9:98:54:6d:47:e8:79:19:f2:
1d:7d:80:40:82:ad:ba:8f:9a:46:dc:45:d9:38:ed:
0a:03:f4:7a:7e:49:57:1d:d0:19:3f:ed:af:ad:ca:
4a:7a:ac:e3:13:b6:61:af:2b:89:f9:e4:40:36:86:
ef:33:03:fb:00:04:82:bf:4c:31:36:f3:ae:3c:c5:
d1:67:26:1c:3c:47:b7:d0:38:d6:14:32:37:80:2a:
09:2c:ca:99:4c:98:a0:4a:f2:11:41:25:b6:9d:26:
63:e4:ad:b0:b1:9a:df:9a:dd:bc:c3:5a:3e:e1:aa:
9c:bc:04:6e:82:a8:f3:8d:7c:dc:f5:05:f3:27:c2:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:6F:62:F1:61:F8:26:ED:D5:56:C2:B2:22:9B:EB:78:9D:02:8E
X509v3 Authority Key Identifier:
keyid:0B:14:12:EF:12:6B:FD:8F:08:FD:84:A2:F6:02:4C:80:6A:DB:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/582AD98000DA11F1BE3B4206756F56BC/CxQS7xJr_Y8I_YSi9gJMgGrbF5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d5:d9:eb:c9:6d:4d:1a:b7:94:0e:a1:fe:57:b2:ce:a2:34:
57:7f:72:c0:49:0b:1e:ef:e8:be:0e:6e:e0:4c:6c:0c:d0:b6:
fd:cc:cf:f3:18:08:4b:da:c3:bd:54:16:ed:74:ba:b2:e4:8c:
24:94:67:ef:33:ce:b4:ef:d5:c9:c6:92:b3:d3:d6:ea:7f:ad:
dd:0c:70:07:43:00:f5:aa:42:79:42:4b:91:81:b5:da:b5:71:
72:b9:61:18:78:de:b3:9f:00:c8:be:29:de:f2:bf:44:9f:e3:
0f:90:e5:35:51:cc:79:0c:40:0a:c6:49:5d:d1:79:ca:d9:fa:
7e:59:0b:f9:54:df:08:7b:a6:aa:c8:05:42:f3:a7:d1:37:f8:
d4:46:df:22:22:5e:2f:24:08:45:19:e6:00:18:4d:c6:4f:bf:
36:dd:43:7c:12:29:37:51:93:8f:7c:d3:09:47:89:76:47:70:
42:d2:ac:df:fd:44:46:e3:15:f3:e2:53:c7:0b:00:f7:e6:d3:
42:fb:b9:b7:5f:20:01:31:b8:5b:c8:e0:86:3e:23:88:13:96:
f1:1f:bc:e1:2d:90:af:06:9d:5b:23:a2:90:69:0c:26:fe:39:
88:5c:21:ec:5d:5a:59:7d:51:8c:79:0c:66:3b:e7:d2:61:85:
20:c7:59:8d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDFGMTExMC8GA1UEBRMoMEIxNDEyRUYxMjZCRkQ4RjA4RkQ4NEEyRjYwMjRDODA2
QURCMTc5MTAeFw0yNjAzMjUwODA2NTNaFw0yNjA0MDEwODA2NTNaMBgxFjAUBgNV
BAMTDTY5YzM5NzlkLTU4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8tfSrvst9o4SgcYNPOJZpYxA0cEKCQfMxO0m17VeWyFqvE5T4X5PxsaeJh6s/
8ISKnVA+Vas/DnikM7pdJtILlmAhab/7POOFPjS4M1DVUoyQhTvKgvsi5jM2VRV8
Kdk7JTo69A8XWnp4CkCYlPg7iwjzr4MRCQKQkHDlC9mYVG1H6HkZ8h19gECCrbqP
mkbcRdk47QoD9Hp+SVcd0Bk/7a+tykp6rOMTtmGvK4n55EA2hu8zA/sABIK/TDE2
8648xdFnJhw8R7fQONYUMjeAKgksyplMmKBK8hFBJbadJmPkrbCxmt+a3bzDWj7h
qpy8BG6CqPONfNz1BfMnwvwHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhwRvYvFh
+Cbt1VbCsiKb63idAo4wHwYDVR0jBBgwFoAUCxQS7xJr/Y8I/YSi9gJMgGrbF5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUYxLzU4MkFEOTgwMDBE
QTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4SV9ZU2k5Z0pNZ0dyYkY1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ3hRUzd4SnJfWThJX1lTaTlnSk1nR3JiRjVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
MUYxLzU4MkFEOTgwMDBEQTExRjFCRTNCNDIwNjc1NkY1NkJDL0N4UVM3eEpyX1k4
SV9ZU2k5Z0pNZ0dyYkY1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCL1dnryW1NGreUDqH+V7LOojRXf3LASQse7+i+Dm7gTGwM0Lb9zM/zGAhL2sO9
VBbtdLqy5IwklGfvM86079XJxpKz09bqf63dDHAHQwD1qkJ5QkuRgbXatXFyuWEY
eN6znwDIvine8r9En+MPkOU1Ucx5DEAKxkld0XnK2fp+WQv5VN8Ie6aqyAVC86fR
N/jURt8iIl4vJAhFGeYAGE3GT7823UN8Eik3UZOPfNMJR4l2R3BC0qzf/URG4xXz
4lPHCwD35tNC+7m3XyABMbhbyOCGPiOIE5bxH7zhLZCvBp1bI6KQaQwm/jmIXCHs
XVpZfVGMeQxmO+fSYYUgx1mN
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:51 2026 by rpki-client