
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: +R4tzmSO9IwWcj+/5psNwKM01Ldp9iEh/z12o+jfKfs=
Subject key identifier: 75:AE:7D:B5:F9:2E:42:88:78:8F:71:D8:53:5E:CC:69:4C:0F:90:27
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: 017C
Signing time: Wed 25 Mar 2026 03:56:07 +0000
Manifest this update: Wed 25 Mar 2026 03:56:07 +0000
Manifest next update: Wed 01 Apr 2026 03:56:07 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: yTA9dkiBi2tQzDSUEwn1lGhCrbnKKIYVbK+QcDxHGbs=)
2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: 6NTho7fCZ0RCJplWa2uFjJlS3TpkgTf4y4zdBtALNSM=)
3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: VeqArLpmDZZ//i0Flmu4xn4xSflQptlUOOEitb5IssE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Mar 25 03:56:07 2026 GMT
Not After : Apr 1 03:56:07 2026 GMT
Subject: CN=69c35cd7-3c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:8d:ef:b8:b1:ff:66:66:be:94:95:dd:6f:
aa:60:5d:b8:b7:85:96:65:18:38:dd:52:81:37:6b:
69:86:82:28:1b:c2:fc:76:c4:c9:54:67:c6:30:cb:
fa:51:1a:5c:5f:cf:1d:17:da:39:3f:88:86:3d:93:
4a:7d:65:b1:a8:97:ac:e4:d7:7d:95:71:5a:58:19:
ad:0a:88:03:c4:db:fd:69:11:0d:be:89:e5:30:46:
14:23:92:e2:6e:8b:bc:00:08:7f:5f:6e:aa:8c:55:
2c:99:f4:37:d2:c8:89:ad:50:7f:9d:2b:70:48:40:
ab:dd:f0:04:b0:74:d4:d1:ee:f4:b5:32:41:92:06:
7e:65:4e:a0:ed:60:18:9c:6f:6c:59:1c:fc:e1:b8:
88:26:0b:ee:be:78:e0:d6:1c:10:13:64:f7:ce:2e:
85:f1:c2:6f:0e:ab:61:a6:f6:bb:78:f7:5b:d4:66:
87:bb:cf:51:14:0e:2a:d8:17:c2:18:0e:fd:e7:df:
11:a5:43:c0:b1:b7:00:25:bd:ca:93:c9:6f:98:74:
a9:a4:fc:0d:c5:e1:58:87:74:d7:8f:e8:0d:a4:cd:
16:ac:e6:77:00:8a:e9:d1:ed:11:5c:15:97:b6:5a:
17:97:b1:77:1a:d0:98:d4:ae:f5:ba:3f:ce:4e:a0:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:7D:B5:F9:2E:42:88:78:8F:71:D8:53:5E:CC:69:4C:0F:90:27
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:48:97:a3:c1:56:df:4e:40:3f:5a:8c:59:7e:df:97:01:
eb:4f:41:d1:94:02:13:08:b6:ff:3c:4b:b1:2c:aa:42:93:8b:
9f:da:13:b2:b5:e9:15:3b:e9:52:72:32:ee:85:20:5e:e9:78:
16:ad:d1:f3:f9:90:c4:b3:cd:6e:fc:d0:9e:2d:81:e9:26:af:
ea:72:3b:b0:f9:30:6a:cf:05:c4:a6:54:d9:1e:f6:96:e5:4a:
cc:28:c1:38:c0:1d:5e:0e:4d:4a:43:41:53:2d:cb:03:ae:a4:
78:4a:2f:71:54:75:8a:4e:28:0b:8c:23:ba:d3:a4:75:c2:b5:
c0:3e:98:dd:3c:d4:37:9d:1f:66:3e:d8:0d:95:89:10:1f:28:
8f:bc:28:05:a6:53:e6:e5:d0:3e:ea:4c:e8:97:b6:f2:5c:49:
cf:4b:14:1c:c2:d2:92:ba:c6:33:f7:04:c6:33:06:ba:91:ae:
98:81:5e:63:37:82:c7:5a:13:fb:46:4e:a2:ec:52:46:ce:b6:
7f:fc:4a:71:0b:fa:6c:c1:07:6c:ae:66:9f:88:e5:79:f0:49:
21:67:ad:02:33:d3:84:f6:ee:7e:2b:8b:2b:a9:c8:84:c3:2b:
88:c0:7d:3c:2d:64:35:e7:b3:fb:5d:75:19:75:b8:82:59:1b:
32:3b:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:09 2026 by rpki-client