
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json)
Hash identifier: PuBTkMVHsp7KxBJHNL2NIjoMBBNpzeFzIcJ/IndOYJg=
Subject key identifier: 76:75:58:80:A7:F5:4A:51:EF:C4:0F:65:61:C3:89:8E:E2:61:DC:3C
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial: 0655
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
Manifest number: 064E
Signing time: Tue 24 Mar 2026 22:23:01 +0000
Manifest this update: Tue 24 Mar 2026 22:23:00 +0000
Manifest next update: Tue 31 Mar 2026 22:23:00 +0000
Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: aayR4sqc3I5lE094RJ9SpAMucNCcKJ2L+Dzpwoe9pww=)
2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: tx+Y/n+r9hRdlH/NzXABSvt/2qdhadoLP0Jf7gqVFNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Validity
Not Before: Mar 24 22:23:00 2026 GMT
Not After : Mar 31 22:23:00 2026 GMT
Subject: CN=69c30ec4-2b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:6a:02:7d:ff:b5:e2:6c:d2:f5:be:b2:88:
f8:44:84:fb:50:3a:22:d1:78:eb:06:ac:91:24:b2:
37:b0:32:12:0f:10:7b:e3:aa:0b:1a:68:b1:ae:0b:
aa:4d:0c:93:0d:b2:b1:5c:10:09:05:51:b2:1e:84:
5d:f3:6e:85:01:3f:c0:5b:39:1b:f3:45:e4:5c:94:
f1:80:bb:2d:8c:eb:af:e0:61:59:4e:07:02:30:5f:
a9:ba:f8:09:99:3c:32:dd:3e:40:d4:ae:bd:54:e0:
41:1a:0e:af:b2:98:54:8e:fe:a9:19:a1:a2:09:e4:
c9:07:f0:3b:c5:66:4d:30:d4:10:81:de:2d:cd:fa:
a4:15:fe:c1:86:11:29:7b:d4:7c:1e:2c:8f:e5:61:
6d:47:fb:6c:f3:53:23:75:86:96:29:7f:a9:f7:68:
05:b4:11:fe:22:d4:20:eb:24:bd:38:d5:77:c1:80:
14:12:36:9b:73:94:4a:af:9d:f6:91:20:be:15:32:
8c:b3:29:99:9c:87:2a:08:96:33:73:bc:a7:ad:c4:
b8:2f:dc:73:8e:ec:ab:c0:70:1c:63:5d:cf:ae:dd:
3a:fc:cd:32:a9:d1:d1:b3:09:89:7f:51:45:c2:f7:
16:78:10:54:70:97:d2:e4:0b:dc:7c:dd:d3:b3:d9:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:58:80:A7:F5:4A:51:EF:C4:0F:65:61:C3:89:8E:E2:61:DC:3C
X509v3 Authority Key Identifier:
keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b6:b1:a1:c6:f4:03:67:43:5f:6c:3e:17:ed:d0:1c:ad:73:
7f:ae:66:f5:78:00:fd:85:18:4d:3c:4a:fc:0f:28:a2:f8:c2:
0b:37:5c:b9:66:fa:78:5d:2c:34:ec:48:a2:77:4d:c4:5a:be:
9a:0c:ec:ce:11:95:dd:3a:11:36:02:b1:ad:ee:fe:4f:8d:88:
16:0e:e1:a7:60:fc:a7:ae:9d:1b:fe:c0:58:85:60:49:82:4b:
d7:d4:5e:e0:c0:6a:ed:d9:63:79:6b:69:82:12:f1:02:69:6d:
90:bb:99:f7:54:0f:c0:23:31:8c:5f:5a:9e:fa:6f:74:3b:82:
56:61:0f:26:d9:c4:ae:4f:2c:d6:6d:b0:e4:05:f9:d6:7a:ca:
62:c6:4f:25:ae:9d:ef:26:0f:a8:94:eb:d0:b9:5c:fd:8a:72:
4b:30:3f:9d:61:5e:4c:bc:65:91:13:e2:2b:aa:6b:98:c2:7b:
47:ea:83:27:e8:16:5f:01:83:5a:2a:52:4a:81:a9:7f:67:d3:
c7:e3:f8:14:c9:c1:fa:c3:74:73:16:25:16:11:f6:7d:5d:f1:
b5:3c:df:af:24:9f:03:56:b9:38:31:bc:10:54:ff:b8:8b:cc:
5d:6f:a2:2b:f9:97:69:10:d5:46:ae:04:ba:6c:09:f2:42:b1:
14:a7:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:21 2026 by rpki-client