
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: GONt6qGygQKmUDTkkWx2p2mv1bXy80BziGZKUjKPkjw=
Subject key identifier: 45:85:DA:0B:B1:DF:62:54:25:40:64:96:D0:F0:D2:27:46:9E:1C:BF
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 01CC
Signing time: Wed 25 Mar 2026 03:02:23 +0000
Manifest this update: Wed 25 Mar 2026 03:02:23 +0000
Manifest next update: Wed 01 Apr 2026 03:02:23 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: 0kMuBxgyKmVqQLzbh2GpNs4ziVlavSykFpcVbKZy7/E=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Mar 25 03:02:23 2026 GMT
Not After : Apr 1 03:02:23 2026 GMT
Subject: CN=69c3503f-bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:1b:01:d3:25:8a:b1:14:d3:c3:d3:6f:c8:
3f:83:3a:cc:37:63:8e:76:01:16:ba:a1:17:6b:b6:
57:9a:d6:32:2b:e4:b6:8e:e5:a8:b1:50:5c:7e:0a:
4b:99:a6:7a:4c:dc:be:90:2e:39:23:5e:77:91:e6:
23:6a:de:8d:8e:60:e5:5e:81:5c:67:67:01:fd:ca:
c1:bb:c5:d8:25:b5:d6:2a:f8:cb:8f:80:92:a2:50:
ea:02:b7:f1:00:94:5d:2c:58:22:96:77:43:fc:d6:
4b:91:f3:8c:65:00:0c:6d:9e:62:27:11:16:1e:d3:
ee:39:23:7e:db:c2:d2:64:75:1f:80:b1:98:7c:8a:
9a:c7:aa:2c:c0:35:aa:2d:a2:f6:81:02:d6:d8:5c:
5e:8b:5d:1c:a1:57:7c:ec:0e:fe:24:2e:24:96:a3:
4d:62:1e:92:18:fe:65:f1:d3:e2:2d:17:c7:55:28:
8d:71:e2:69:14:99:4d:d5:c6:98:b2:d0:ad:5a:3b:
0f:2f:89:bc:ae:b4:3f:43:08:b2:aa:23:f6:80:6e:
21:83:8e:e3:eb:6c:bf:cf:a8:17:40:43:6d:60:76:
27:88:3c:bf:eb:37:ce:da:65:a4:0a:09:65:91:51:
2b:76:50:7a:93:cc:ee:16:0e:f4:2e:8c:f6:7d:cf:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:DA:0B:B1:DF:62:54:25:40:64:96:D0:F0:D2:27:46:9E:1C:BF
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:e5:1e:3a:0d:d1:1e:31:2a:05:a6:15:e7:ac:8c:e7:10:
cd:d0:15:0d:4a:91:a9:55:44:dc:0d:9d:55:84:84:08:58:aa:
b5:ed:cd:d9:65:1a:03:a7:ab:fc:6e:09:d0:1f:1b:d0:b5:ed:
21:31:44:9b:a2:45:ae:48:05:52:ac:a1:a8:3c:ff:da:87:d8:
3d:db:41:05:43:71:96:44:ba:c4:8c:0a:82:82:55:78:b5:a2:
9f:3b:ca:11:b3:43:8c:c0:76:f2:19:76:33:88:45:6d:20:a5:
0b:b2:93:59:1c:c7:40:29:33:0e:f2:97:b1:33:aa:6c:9d:11:
50:6d:ef:74:19:8f:c5:80:3d:cf:45:af:a2:4b:f6:d0:13:54:
7f:60:30:8b:8b:0a:e7:00:3c:b0:ab:4e:22:40:24:dd:40:a8:
0d:95:1e:c4:e7:f2:02:96:16:d7:90:a1:45:de:46:a7:14:fc:
9f:98:49:a1:40:f3:46:32:3a:d5:7d:6f:99:45:9c:5f:c2:d5:
b4:df:05:f7:30:01:01:b8:e2:87:20:09:8f:bc:36:88:57:75:
53:e9:90:62:25:79:75:e1:0e:b2:7c:98:93:1d:4d:52:f9:a4:
a4:b3:64:a3:e6:99:cf:73:4a:14:b2:09:c3:d9:90:8e:83:4a:
f7:97:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:59 2026 by rpki-client