
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
File: xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft (raw, json)
Hash identifier: Mkwr8uMqvc8PsisPonkDJlMJaNjAFVKSM+19Z088498=
Subject key identifier: AC:48:8E:FF:F0:5F:16:A0:1F:3B:06:0F:61:D2:CF:8A:BB:27:E2:55
Authority key identifier: C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
Certificate issuer: /CN=A913C68B/serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
Manifest number: 01E6
Signing time: Wed 25 Mar 2026 02:56:58 +0000
Manifest this update: Wed 25 Mar 2026 02:56:57 +0000
Manifest next update: Wed 01 Apr 2026 02:56:57 +0000
Files and hashes: 1: xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl (hash: cAd50eMnKHJegXCKDFi5rps+Llj/0Ja/J+lTLOJxLBw=)
2: BDE8001C1DDC11F19EDFCAE80F3D8C67.roa (hash: 8F8BmpcqqNwCt1bx4x79r5JtxIiJgA0CKQxMbNzF+xQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C68B, serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Validity
Not Before: Mar 25 02:56:57 2026 GMT
Not After : Apr 1 02:56:57 2026 GMT
Subject: CN=69c34efa-5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:1d:59:a6:2d:e0:f7:c9:7e:7c:4a:57:ae:
5d:ee:06:8b:6e:45:8b:c9:5e:d6:24:ec:ef:fa:f7:
90:f5:35:9c:5e:c2:bd:f5:e1:e8:12:fa:c5:86:d7:
49:38:28:18:ba:61:f1:d7:f9:a1:7d:16:54:53:ad:
53:cb:13:20:03:f9:18:d0:24:1b:f8:d4:b6:88:ff:
da:ca:9c:62:ed:de:75:fe:90:dd:49:12:ad:4c:2a:
02:03:0a:84:40:32:3b:68:47:57:b8:5b:78:72:bf:
63:0c:73:2d:b5:a4:59:f4:c0:dd:ee:d6:c6:47:0a:
2d:1c:a1:8b:69:8c:75:3c:c3:77:48:5e:4c:25:e2:
d8:bb:3f:85:6a:fa:fb:9e:4a:f4:b9:fb:c3:d4:20:
30:b5:de:d5:00:d9:f4:58:be:df:88:b8:83:9d:7d:
e0:d9:85:ae:f2:17:19:9b:f5:c0:d7:ad:5a:b0:e4:
1f:63:d8:ef:4c:0a:87:f2:97:25:26:46:c2:0a:3d:
64:d5:14:40:8c:17:ec:13:fd:6e:d7:08:26:fd:a3:
7d:73:c5:15:0d:8c:da:fb:91:55:54:7e:03:e7:76:
b7:24:c9:f3:79:c6:a3:8d:57:b1:9f:25:b8:f1:2d:
12:30:c7:8e:54:f5:eb:b1:a4:ea:48:0a:7e:51:7f:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:8E:FF:F0:5F:16:A0:1F:3B:06:0F:61:D2:CF:8A:BB:27:E2:55
X509v3 Authority Key Identifier:
keyid:C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fc:1f:93:7c:61:b5:49:e7:35:3e:79:86:14:d4:7a:e4:92:
27:f9:d5:eb:10:d4:88:e2:4c:37:8d:0a:30:74:74:ed:a0:9f:
4c:8a:85:50:94:74:68:3c:6f:68:28:76:b1:30:ff:17:28:a4:
88:28:ad:c3:a3:8f:a1:68:01:1b:6d:78:62:96:1f:b6:0d:1d:
ea:73:66:48:fc:71:41:ac:fd:68:2e:17:f8:85:72:4c:16:01:
ad:aa:d0:24:e3:1d:57:67:67:ff:b3:8b:8c:d8:0c:99:52:1d:
17:b2:50:75:25:12:ae:66:c8:c3:84:29:cc:f1:8c:85:e6:56:
5a:82:6a:c9:13:93:fe:61:76:f3:47:4b:d7:d9:26:b7:39:3e:
68:cb:0b:4f:d1:ea:44:36:18:f4:fb:f2:7d:b2:3a:38:59:3c:
55:d3:d7:9f:a5:00:e2:49:8b:c8:0c:d8:c3:b4:ee:1c:6a:86:
40:3a:4b:35:8e:c2:d8:61:dd:83:ae:a6:f7:e1:94:ae:19:99:
2a:b5:e8:46:6f:49:9e:19:b1:51:31:42:ae:34:40:fa:8f:66:
a8:1a:36:fe:bb:a1:77:17:68:64:96:9d:e2:2b:b9:67:21:b8:
d4:4e:f7:e9:ae:e1:27:a0:a0:d8:1a:9d:08:40:af:27:48:8f:
b7:2c:70:c5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QzY4QjExMC8GA1UEBRMoQzREOEJEQTdCOEJFNDMxMDY2NkYzNkY0Q0MyQUY0NDRG
NjBGQTMyMzAeFw0yNjAzMjUwMjU2NTdaFw0yNjA0MDEwMjU2NTdaMBgxFjAUBgNV
BAMTDTY5YzM0ZWZhLTU0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXlh1Zpi3g98l+fEpXrl3uBotuRYvJXtYk7O/695D1NZxewr314egS+sWG10k4
KBi6YfHX+aF9FlRTrVPLEyAD+RjQJBv41LaI/9rKnGLt3nX+kN1JEq1MKgIDCoRA
MjtoR1e4W3hyv2MMcy21pFn0wN3u1sZHCi0coYtpjHU8w3dIXkwl4ti7P4Vq+vue
SvS5+8PUIDC13tUA2fRYvt+IuIOdfeDZha7yFxmb9cDXrVqw5B9j2O9MCofylyUm
RsIKPWTVFECMF+wT/W7XCCb9o31zxRUNjNr7kVVUfgPndrckyfN5xqONV7GfJbjx
LRIwx45U9euxpOpICn5Rf7X7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrEiO//Bf
FqAfOwYPYdLPirsn4lUwHwYDVR0jBBgwFoAUxNi9p7i+QxBmbzb0zCr0RPYPoyMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNjhCLzRFOUMxRjkwNjJE
MTExRUVBQTFDODY0REM0RjlBRTAyL3hOaTlwN2ktUXhCbWJ6YjB6Q3IwUlBZUG95
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveE5pOXA3aS1ReEJtYnpiMHpDcjBSUFlQb3lNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
NjhCLzRFOUMxRjkwNjJEMTExRUVBQTFDODY0REM0RjlBRTAyL3hOaTlwN2ktUXhC
bWJ6YjB6Q3IwUlBZUG95TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBc/B+TfGG1Sec1PnmGFNR65JIn+dXrENSI4kw3jQowdHTtoJ9MioVQlHRoPG9o
KHaxMP8XKKSIKK3Do4+haAEbbXhilh+2DR3qc2ZI/HFBrP1oLhf4hXJMFgGtqtAk
4x1XZ2f/s4uM2AyZUh0XslB1JRKuZsjDhCnM8YyF5lZagmrJE5P+YXbzR0vX2Sa3
OT5oywtP0epENhj0+/J9sjo4WTxV09efpQDiSYvIDNjDtO4caoZAOks1jsLYYd2D
rqb34ZSuGZkqtehGb0meGbFRMUKuNED6j2aoGjb+u6F3F2hklp3iK7lnIbjUTvfp
ruEnoKDYGp0IQK8nSI+3LHDF
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:48:39 2026 by rpki-client