
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json)
Hash identifier: geCPf7kesOoTqLbs4DLxgG8F1URZYPFd+L4/U6NE15w=
Subject key identifier: 3A:39:33:60:5C:34:EE:8D:63:8F:3A:D8:ED:3C:A0:33:79:63:05:27
Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
Manifest number: 07C0
Signing time: Tue 24 Mar 2026 21:10:51 +0000
Manifest this update: Tue 24 Mar 2026 21:10:51 +0000
Manifest next update: Tue 31 Mar 2026 21:10:51 +0000
Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: Q85uJO8dbgRsfuCKopmEzus2Z/jd7wvjzcBCwSV39a8=)
2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: cbziy5kL+sj+D8P7UhXxl7JFukexlK2Ww4yA68qkd2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Validity
Not Before: Mar 24 21:10:51 2026 GMT
Not After : Mar 31 21:10:51 2026 GMT
Subject: CN=69c2fddb-7f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:72:16:0d:b7:a1:1e:72:1f:ca:e2:0b:92:
48:54:2f:d9:f4:3e:6d:89:e1:5d:22:de:98:6f:ea:
da:14:60:9f:e2:60:66:16:86:23:28:01:2a:92:71:
e1:bf:63:2b:65:c8:ab:a2:82:9b:da:43:a2:64:30:
bd:c6:c9:a4:9a:d4:6f:d0:1e:1a:cc:10:8f:e3:bb:
67:d0:23:e2:f3:2c:56:18:f5:d1:9f:48:fd:f3:a8:
17:ae:66:db:f9:66:73:f1:45:6f:cb:69:34:b0:86:
17:2b:32:8c:04:6d:b7:9c:1c:8f:be:2f:4c:a4:ff:
2e:13:7e:ff:d3:62:19:6d:df:ea:3d:39:f4:ee:5e:
ac:d6:e3:63:84:94:0c:99:0d:27:65:b4:d3:0e:af:
83:45:27:72:e3:d6:cf:09:58:73:d3:fa:f4:df:78:
28:b2:15:36:c3:bb:4a:49:f2:d0:06:82:e4:78:c6:
d9:5d:c3:b8:3b:52:5e:2e:ed:01:c8:4d:b9:a9:e2:
bd:94:a9:ff:bd:e4:4b:46:05:c6:06:d3:77:5d:72:
5b:bd:6f:c2:a2:fd:68:ce:e0:eb:ac:4e:fc:8a:01:
8f:ac:00:87:51:04:bf:db:3f:6c:df:d6:ad:63:3b:
6b:0a:88:6f:9f:da:60:59:7e:6f:58:52:97:72:e5:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:33:60:5C:34:EE:8D:63:8F:3A:D8:ED:3C:A0:33:79:63:05:27
X509v3 Authority Key Identifier:
keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:4f:26:57:ac:21:d3:9e:b6:7a:81:a6:45:50:ab:e9:e3:75:
a2:86:c7:c1:f7:cb:ec:dc:71:06:85:fe:61:35:fa:0b:3c:3b:
2c:1b:ae:51:74:51:ba:cf:7b:08:17:79:3b:5b:7d:b1:9a:f9:
1c:55:8e:85:d7:91:48:81:5b:86:ac:a9:9d:88:45:f0:cd:41:
ef:9d:f5:18:b7:59:6b:a6:52:47:58:83:34:9e:bb:8a:8d:f1:
38:e4:b2:3e:49:4e:d4:c5:e0:26:66:a7:5b:8f:75:d3:7d:d3:
63:39:29:c3:9e:b9:94:af:0f:41:e9:85:a7:af:dc:07:c6:08:
b5:01:1e:65:62:52:88:2e:fc:95:af:da:fd:11:39:34:40:a0:
a7:4e:44:f0:89:64:d1:da:d3:5e:8f:c1:d6:d2:fe:58:2c:d2:
ba:8e:19:bb:90:bb:71:5e:3c:71:95:e6:a7:2f:b6:19:b4:45:
89:84:02:8f:ce:ef:ac:cf:9c:95:fa:62:0c:ec:45:1d:91:0e:
34:b1:4c:cf:95:e1:b0:7c:93:c3:ed:e1:e0:0d:f4:b3:6a:42:
16:1e:ec:53:7a:40:da:9f:d7:d8:25:9f:f2:ab:13:ad:02:ed:
37:d0:e8:3f:03:91:24:6d:65:6a:6b:1c:c0:82:3c:91:88:02:
3b:bd:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:58 2026 by rpki-client