
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json)
Hash identifier: 2OF38Ra3R59EdcA8/7NxiVcckY3SfBoZZzbOf6r4GKU=
Subject key identifier: 90:74:81:0A:A8:37:65:A0:6D:F1:80:9A:B4:F3:96:41:52:99:36:01
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
Manifest number: 23
Signing time: Wed 25 Mar 2026 08:03:32 +0000
Manifest this update: Wed 25 Mar 2026 08:03:32 +0000
Manifest next update: Wed 01 Apr 2026 08:03:32 +0000
Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: hI39bsGYDlyn7NjThXMdp1PMSGs0zrzhLhalICdMrEI=)
2: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=)
3: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Validity
Not Before: Mar 25 08:03:32 2026 GMT
Not After : Apr 1 08:03:32 2026 GMT
Subject: CN=69c396d4-5293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e5:70:40:f8:14:e9:af:e2:84:dd:cd:13:10:
85:5c:d1:69:83:1a:96:da:74:21:0d:28:5e:1b:2b:
8a:ca:32:2d:3f:f3:3e:be:37:fb:81:73:20:c8:cb:
1e:aa:5b:95:26:ef:80:44:aa:4c:ee:1f:9e:12:58:
8f:b4:4a:71:85:5f:36:5d:6c:fb:a1:86:cb:21:01:
cb:2f:a5:66:72:94:77:c6:0f:e7:f2:34:b9:e9:f3:
00:f0:ac:ba:62:e9:bf:a8:bf:06:54:47:25:23:4b:
fa:1a:08:b0:7e:46:53:41:2d:65:9e:0e:c8:fa:dc:
37:15:f2:ee:0c:2f:b4:e7:fa:cf:e9:8d:4c:39:48:
c4:d8:7d:a4:de:43:6c:68:cd:2c:7f:69:6f:c3:37:
f1:4e:cd:fe:31:bb:5d:05:da:34:11:99:0e:68:29:
87:d7:5f:d8:1c:4b:07:7c:cc:85:89:66:c6:e4:26:
26:f3:b2:96:c1:47:fa:87:c4:e0:22:b7:14:df:9c:
db:a7:32:52:5e:9b:ee:80:8c:de:5e:c3:c2:10:44:
e9:89:1b:72:a0:e4:3d:52:32:d0:de:e7:62:ab:0c:
0d:1f:79:e1:9f:a6:84:a3:23:eb:68:ca:17:f4:94:
5a:23:e1:01:a9:bf:68:42:47:0b:02:d7:f3:92:3f:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:81:0A:A8:37:65:A0:6D:F1:80:9A:B4:F3:96:41:52:99:36:01
X509v3 Authority Key Identifier:
keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6e:29:be:54:d7:eb:b2:c3:de:a0:a7:5f:57:52:15:00:50:
d0:df:b5:b6:03:4c:16:8e:43:d1:84:92:c6:6b:bd:1b:ad:b7:
e0:80:0b:96:8c:90:37:f7:54:9e:e7:5d:c7:9b:3d:0e:de:8e:
4f:2b:70:c8:13:b9:71:ff:05:b8:12:ef:d7:a0:8d:b4:9e:3c:
7d:8a:d9:a3:21:47:21:20:d9:b5:a3:ad:26:6a:09:32:3c:68:
bc:2a:fa:34:af:87:bc:e1:0a:db:ef:a9:1a:c4:1c:08:a7:1e:
be:8a:14:ae:72:40:46:86:32:f1:74:70:31:b7:95:f9:cb:c8:
cd:67:1a:9d:f8:2d:bb:57:f2:d7:78:19:43:2f:1b:3f:c4:0b:
f2:cc:f7:24:ac:a8:40:84:67:bc:2c:71:6d:29:eb:fa:ce:29:
c2:09:67:d1:2e:47:0d:ea:ea:e6:82:82:7c:68:59:3e:ef:97:
34:ad:37:bd:7f:a1:13:c6:f2:6b:c5:40:2e:73:2a:f9:9f:b0:
fa:8f:61:01:cc:38:5c:c6:5c:52:11:7e:c5:ac:13:93:fb:e8:
f8:c8:3e:d8:25:bf:06:d6:fa:7c:d1:ea:71:4d:30:ba:99:a3:
32:36:99:95:f7:fb:26:32:b7:8b:64:32:95:a7:41:20:a4:1c:
77:37:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:46:42 2026 by rpki-client