
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: 9DzvPvNiJCXAopsgOaM2o6cC07GLZt8+87lPy8g9fVo=
Subject key identifier: 9A:44:4D:D1:6B:97:49:17:9D:3E:42:DC:F8:10:8D:4C:9A:28:18:40
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 355B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 3540
Signing time: Thu 26 Mar 2026 14:19:19 +0000
Manifest this update: Thu 26 Mar 2026 14:19:19 +0000
Manifest next update: Thu 02 Apr 2026 14:19:19 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: o3lChRMNkbpEG+FFGgjLPwaFazx0w0K/8UqK/CDnkpM=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13659 (0x355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Validity
Not Before: Mar 26 14:19:19 2026 GMT
Not After : Apr 2 14:19:19 2026 GMT
Subject: CN=69c54067-a9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:d8:b5:5c:a1:c9:51:01:1a:b4:9e:ca:f8:
5e:e6:d6:29:64:21:ba:e6:5c:8f:78:bc:4f:5f:8b:
28:7f:6f:74:0b:d2:be:f1:c2:87:25:a1:3b:7a:60:
99:f2:9a:36:75:e9:62:35:4b:2a:a7:76:d1:fe:a0:
81:82:89:ab:95:ec:7a:bb:ff:e7:e3:8b:6b:f0:b5:
f6:38:3a:66:5b:06:2d:9c:03:df:db:21:63:32:d5:
6e:91:b1:4f:7a:77:09:b2:7a:72:7b:65:e5:39:18:
91:db:17:ed:75:a7:30:ba:15:e0:00:9e:de:56:dd:
15:33:a1:df:cd:c5:3f:d4:3e:73:8c:cd:50:76:39:
45:0e:21:7c:de:38:81:b3:36:e5:1f:a4:30:c5:87:
80:b1:c7:9f:45:ab:00:1f:60:32:6a:2c:6a:53:9e:
9e:37:81:14:65:ad:bb:9d:c0:16:fd:e1:8e:a9:c7:
39:b0:e7:df:d4:a9:6e:60:7b:41:05:d1:c8:fa:b0:
69:35:dc:51:cb:01:50:a1:f9:62:d3:70:2d:3d:64:
da:1f:0c:b7:0a:cf:46:d3:10:80:6c:b8:f9:df:ab:
ef:5b:13:08:ff:4c:25:7d:b6:06:46:2c:42:ea:29:
4f:07:56:b7:13:14:58:19:3b:e1:1a:9f:af:fd:70:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:4D:D1:6B:97:49:17:9D:3E:42:DC:F8:10:8D:4C:9A:28:18:40
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6c:2e:53:0c:4b:7c:25:6f:0e:5b:8a:f8:38:d0:df:3d:13:
58:6d:da:58:5f:9b:5e:0f:11:3b:c2:9c:2e:d9:62:d4:7b:60:
9a:0b:e4:5c:60:be:85:17:ce:fd:df:c3:d5:73:4a:ff:6d:ff:
25:b1:8b:87:ce:a6:4d:ac:d7:6b:e7:5a:7f:87:3e:27:e5:dc:
dc:0a:b1:dd:90:b1:2f:90:bb:5c:0f:3b:44:9e:9c:99:6f:f1:
dc:61:2b:36:74:f2:63:9e:3d:21:df:11:46:10:bd:81:47:d3:
ff:0a:6d:28:a5:46:80:4d:b8:c9:3d:57:b6:95:ba:3e:1d:cc:
e1:4f:50:4d:19:17:68:bd:9f:8d:18:d5:47:fc:bc:f4:54:25:
d3:a1:41:15:1e:aa:d5:3f:5b:8a:f7:0a:04:7f:5f:a2:c4:43:
b4:a9:d8:81:02:f3:eb:9a:8d:ea:4e:5e:2b:be:0b:70:07:29:
24:07:16:57:f9:1e:73:fd:e1:a5:56:52:f6:37:af:0a:27:8d:
59:35:d7:a9:4c:5c:3b:cf:e6:58:43:41:c4:39:c1:c6:e3:aa:
dd:1e:6b:ff:6c:2f:bd:7b:98:02:f9:d1:bd:94:a0:c4:5e:fa:
97:bf:9b:cd:4f:e5:99:10:4c:e3:7f:49:cc:23:5c:ca:47:b0:
d7:22:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:20 2026 by rpki-client