
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json)
Hash identifier: 2+L7sNdI8OevA6koEolO3sitZjm95jBUw9df19nIFQQ=
Subject key identifier: F9:1E:3E:E2:57:2F:FD:1D:8E:EB:33:F7:36:60:8D:60:F7:47:D9:3F
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
Manifest number: 0700
Signing time: Tue 24 Mar 2026 21:42:15 +0000
Manifest this update: Tue 24 Mar 2026 21:42:15 +0000
Manifest next update: Tue 31 Mar 2026 21:42:15 +0000
Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: v1tt3mBVJyrGE47xH2wiaYPic3J6d+nvELVqduzefYI=)
2: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: ncye4h2LfxWSXSb9ZLnxK814KkA6AAsodwr7PvucjXw=)
3: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: fYVYUbEM+yc9DQvEbI/FIL6icssMjAZeyST5SieaviE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Validity
Not Before: Mar 24 21:42:15 2026 GMT
Not After : Mar 31 21:42:15 2026 GMT
Subject: CN=69c30537-2951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:7a:35:10:0b:94:51:4a:0f:a9:32:c2:39:
2d:60:56:93:60:da:d6:d1:60:63:25:1f:e7:9b:97:
89:b1:be:8b:01:1b:b3:9b:80:f7:37:5e:1a:f5:d4:
59:d3:40:6d:c5:d0:18:80:9e:0b:a9:da:1b:48:2c:
98:f7:48:75:ca:ae:60:c9:58:85:bc:03:03:ee:d2:
5c:36:ab:08:41:ac:25:c7:15:0c:3c:fa:9b:18:72:
54:49:68:86:e1:be:f6:2b:86:02:f3:81:07:f1:b4:
df:87:cb:70:a6:81:94:96:d7:18:18:a6:93:12:65:
38:5b:77:6c:d7:56:3b:cc:14:2c:7b:5f:ac:db:61:
73:70:4f:97:69:51:77:1c:26:a9:68:20:17:51:3c:
2b:3e:ff:85:be:37:38:cb:58:e4:d6:16:fc:30:e1:
fb:89:97:e1:40:43:60:71:e6:25:30:24:15:9f:0b:
f2:df:01:ce:5f:7f:a8:49:e3:b0:1f:83:19:94:77:
90:1a:93:9b:5e:7b:a9:80:ee:e9:e3:c3:1b:96:8d:
65:c2:97:20:05:2d:06:44:5a:a4:a4:b9:44:75:7c:
2d:82:b9:ee:b8:b8:bf:d9:1e:ef:b3:04:73:03:33:
6c:9e:4a:05:1d:84:8f:f5:97:dc:70:e2:12:38:99:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:3E:E2:57:2F:FD:1D:8E:EB:33:F7:36:60:8D:60:F7:47:D9:3F
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:88:1a:56:50:8d:17:6e:f0:b1:56:97:af:4a:23:e1:0f:
84:5b:3e:b3:ba:84:bb:72:4f:f3:04:79:70:a6:b6:b7:b7:c2:
d5:d5:24:cf:d2:e7:82:90:7f:0e:8f:ea:c1:74:ed:3e:36:80:
0d:3c:16:bf:e3:25:01:43:68:9c:bc:5b:d2:43:20:35:9f:22:
24:df:92:30:29:97:a1:e5:37:e8:36:58:7f:32:30:dd:9d:39:
59:b3:83:9c:11:b7:1d:b2:ec:36:7c:49:1c:31:23:e3:6d:a2:
97:a6:4c:ec:44:3d:7f:3b:c8:ab:82:3b:2c:45:ee:e7:31:2b:
bb:ca:7b:0d:8c:3c:89:46:1f:cb:37:20:e6:e5:6f:e2:73:21:
58:14:dd:f5:e4:45:33:bc:6c:91:2b:a3:92:a0:22:91:0e:1f:
5d:19:17:b5:3e:69:96:1f:b3:f9:d0:63:67:01:46:f2:31:65:
87:93:19:23:12:1e:04:34:c7:21:ee:ff:f1:7e:c7:30:49:90:
b4:eb:25:b6:2e:12:05:05:36:cd:2c:ad:4f:d3:68:51:26:ed:
81:62:72:2b:3d:ae:6f:fb:82:b7:fe:50:3c:a8:cc:48:18:74:
d1:ee:35:51:e4:1d:b0:a7:a0:d2:2b:a0:77:39:5d:32:41:79:
b7:97:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:32 2026 by rpki-client