
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier: 7OY+K2BN7HRWfUBA2n2IGVlWTDnuq4jcG0ZvO4iszXs=
Subject key identifier: 5D:2B:85:F5:CF:7C:3F:66:63:E3:D0:72:96:74:B2:29:43:76:29:52
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number: 0272
Signing time: Wed 25 Mar 2026 01:31:51 +0000
Manifest this update: Wed 25 Mar 2026 01:31:51 +0000
Manifest next update: Wed 01 Apr 2026 01:31:51 +0000
Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: 7PA9rW1KFXgTkPpMS9dQ0Oe6zGUHOg+6mwOVuPNjbf4=)
2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Validity
Not Before: Mar 25 01:31:51 2026 GMT
Not After : Apr 1 01:31:51 2026 GMT
Subject: CN=69c33b07-1b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:6b:f0:f4:4e:d8:95:dd:b9:2f:e0:d7:18:
cc:9a:81:e6:7e:1a:cd:d5:6a:a2:c8:c6:6d:51:99:
01:fb:07:1d:a1:77:d1:55:5a:74:18:21:b1:f2:30:
64:41:9b:0e:b0:08:7a:95:77:26:c2:08:7c:4e:e6:
9f:7c:bf:a0:2b:10:33:c9:0f:7e:6f:34:97:68:79:
55:9c:d5:81:34:a7:1d:d3:72:a0:0c:eb:5c:6a:39:
93:a8:4c:98:e6:5a:11:41:4d:27:c8:2b:c8:c2:67:
b2:6e:76:26:5f:b0:7b:35:f4:50:ba:4f:81:32:db:
15:9b:bf:7e:5e:de:c1:09:75:d0:81:e4:22:27:fc:
fd:3c:f3:63:f9:69:bb:43:ff:5f:02:8d:fb:1a:9d:
10:09:9a:0f:86:ae:2f:9c:a5:53:e9:05:68:b2:c2:
90:b6:54:24:20:29:b0:b7:35:89:fc:33:fa:6c:93:
89:6b:c1:26:7e:1f:4e:ef:8a:2b:14:49:e9:42:6a:
7a:11:af:59:54:cd:ff:0d:82:9d:f3:59:ac:a2:c4:
8d:2d:ff:c3:a7:33:1b:91:f0:6f:b9:b5:77:6b:a6:
1c:08:3d:0d:e8:1b:c8:87:9e:aa:ef:f6:0c:d0:56:
4d:57:90:32:7f:2b:7d:c9:a2:cd:a9:6a:3a:bc:e1:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:85:F5:CF:7C:3F:66:63:E3:D0:72:96:74:B2:29:43:76:29:52
X509v3 Authority Key Identifier:
keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:03:56:8c:47:9d:ad:d2:4e:37:57:30:6c:b6:2d:a6:90:83:
0a:23:95:19:65:19:0c:c9:60:6c:2f:d2:cf:b8:1e:fd:27:a9:
1d:fe:be:c6:0e:9c:10:93:a9:79:aa:9c:ee:e1:1e:4a:79:c9:
de:4e:af:29:50:9f:87:4f:c9:f6:af:70:0f:ac:d3:e8:64:05:
03:a0:8a:84:1c:98:34:45:a8:92:7c:59:60:2b:fc:3a:34:7f:
47:ac:cb:83:aa:fa:d2:7d:df:0d:43:83:b8:d2:27:77:48:2b:
2c:ce:c2:83:8a:dd:95:57:9b:9d:da:2f:07:99:94:8e:57:cc:
da:c8:33:55:24:a5:c4:c8:f3:e0:23:6a:46:c7:be:ca:ef:89:
c0:a6:ca:b9:0d:ec:45:71:ce:1f:9b:75:f7:51:36:98:36:a6:
5c:60:26:67:96:20:d7:ce:50:73:88:d4:92:86:ab:ed:0e:24:
a6:ad:97:6e:74:f2:c1:22:1c:0f:86:7f:82:0f:b6:ae:56:4a:
e9:27:93:9a:55:1f:ce:53:c2:c4:97:10:bd:fc:93:02:95:c6:
84:91:77:df:e7:b3:25:92:47:e2:07:c2:bd:30:1d:1f:91:af:
53:91:d5:07:ad:01:36:1a:fb:ae:da:39:7a:9a:eb:ee:24:eb:
c5:33:21:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0
N0E1Qzc0NzEwHhcNMjYwMzI1MDEzMTUxWhcNMjYwNDAxMDEzMTUxWjAYMRYwFAYD
VQQDEw02OWMzM2IwNy0xYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt39r8PRO2JXduS/g1xjMmoHmfhrN1WqiyMZtUZkB+wcdoXfRVVp0GCGx8jBk
QZsOsAh6lXcmwgh8TuaffL+gKxAzyQ9+bzSXaHlVnNWBNKcd03KgDOtcajmTqEyY
5loRQU0nyCvIwmeybnYmX7B7NfRQuk+BMtsVm79+Xt7BCXXQgeQiJ/z9PPNj+Wm7
Q/9fAo37Gp0QCZoPhq4vnKVT6QVossKQtlQkICmwtzWJ/DP6bJOJa8Emfh9O74or
FEnpQmp6Ea9ZVM3/DYKd81msosSNLf/DpzMbkfBvubV3a6YcCD0N6BvIh56q7/YM
0FZNV5Ayfyt9yaLNqWo6vOHT9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0rhfXP
fD9mY+PQcpZ0silDdilSMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG
M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS
aWNlZURuU294N2hIcGNkSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkANWjEedrdJON1cwbLYtppCDCiOVGWUZDMlgbC/Sz7ge/SepHf6+xg6cEJOp
eaqc7uEeSnnJ3k6vKVCfh0/J9q9wD6zT6GQFA6CKhByYNEWoknxZYCv8OjR/R6zL
g6r60n3fDUODuNInd0grLM7Cg4rdlVebndovB5mUjlfM2sgzVSSlxMjz4CNqRse+
yu+JwKbKuQ3sRXHOH5t191E2mDamXGAmZ5Yg185Qc4jUkoar7Q4kpq2XbnTywSIc
D4Z/gg+2rlZK6SeTmlUfzlPCxJcQvfyTApXGhJF33+ezJZJH4gfCvTAdH5GvU5HV
B60BNhr7rto5eprr7iTrxTMhmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:19 2026 by rpki-client