
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: OwZ7p/D2u4hhK+JwZYUHhp3Qu8AODckF4donTisWSaE=
Subject key identifier: 68:A4:D6:70:C5:43:7B:A9:95:47:AF:7C:34:62:F0:86:E4:B2:F7:57
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 0714
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 070E
Signing time: Tue 24 Mar 2026 21:37:35 +0000
Manifest this update: Tue 24 Mar 2026 21:37:35 +0000
Manifest next update: Tue 31 Mar 2026 21:37:35 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: vf5ys4xWYwnh6Ao4wBENZU188W1Th5zYRuBlhE7N+Kw=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: aSLv1C+EyXbwK3DnNjnFTX370d6LHK+MnR49e8euTIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1812 (0x714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Mar 24 21:37:35 2026 GMT
Not After : Mar 31 21:37:35 2026 GMT
Subject: CN=69c3041f-e633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:49:3e:bd:31:9b:c9:1b:be:02:09:26:37:
69:74:d3:50:9b:45:ea:32:b2:29:af:34:e4:bc:36:
d8:80:08:b2:3b:43:61:70:91:46:2a:4d:46:75:d6:
07:0f:ec:13:ea:14:7c:0e:22:ee:18:68:da:ca:55:
0c:5b:f9:82:51:b6:36:95:3f:5b:20:5d:fd:f7:e4:
08:72:67:d1:8b:0a:6b:33:98:f8:3b:12:97:c2:32:
bb:22:54:64:89:c5:68:76:be:50:63:78:ab:75:84:
49:e2:bd:03:33:93:1c:38:8f:3c:32:b2:ad:e2:6f:
32:0c:2d:00:f6:0e:41:4b:74:b9:7c:90:6c:50:a3:
4c:52:20:03:bb:7f:b6:ef:d7:b6:1d:d2:2e:c4:ec:
cc:cd:74:54:cc:ea:26:c9:c5:ec:35:ab:04:e7:d4:
e2:8b:87:2b:0c:5f:38:2c:82:ed:25:f0:ef:3c:74:
25:54:ce:6b:f3:6a:f2:6c:a0:43:02:18:63:25:c8:
8f:23:66:87:cc:3e:82:37:0d:a1:5d:5a:c1:e8:f5:
ab:54:03:b3:48:a6:c1:01:82:c0:9e:02:fa:bc:e2:
46:35:2e:cc:36:36:71:b8:42:6f:ad:a0:ae:c7:e2:
1d:eb:da:19:f2:9d:c7:2c:34:3f:bb:9c:2d:a9:ab:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:D6:70:C5:43:7B:A9:95:47:AF:7C:34:62:F0:86:E4:B2:F7:57
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:3c:31:b9:ab:c7:92:76:0a:ce:ee:bc:b6:cc:58:2c:95:f9:
84:de:c0:e9:c8:55:44:90:ce:14:6b:bd:03:2d:c2:01:a6:09:
f0:73:36:7a:00:fb:b5:3c:33:2f:91:cf:1e:cd:00:1f:99:5a:
60:0d:ab:95:15:45:64:cb:81:fd:cd:f3:40:b6:41:f5:e7:f7:
60:cb:27:f4:ac:22:05:be:d5:32:56:7a:a8:e5:e5:93:ee:f2:
a5:1a:02:c4:fa:aa:be:c0:bc:56:2c:4e:a6:ff:03:54:68:6c:
0d:77:31:ce:17:51:9a:5c:ff:62:07:e4:d8:8d:b4:83:8e:91:
ac:e1:9f:6e:9e:c0:96:46:2d:3f:e2:11:5e:b1:c5:a5:86:a1:
90:50:cf:7a:f4:a7:e3:f3:07:47:cd:2f:90:10:fd:82:a1:cc:
73:08:1e:76:cc:b2:16:2d:c4:ea:5a:fa:2b:34:82:21:bd:8b:
de:ea:97:ba:1e:ec:ef:c4:e1:6d:9e:23:0a:e0:70:45:5b:02:
e5:db:f5:59:e2:06:b3:77:ac:9f:13:10:11:c5:34:56:26:92:
a9:a9:82:d2:8f:b1:23:7d:27:ed:6a:69:bb:73:21:19:c0:00:
fd:0d:a9:05:aa:7f:b9:43:6a:9e:62:cb:77:d3:82:01:ac:81:
d6:76:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:14 2026 by rpki-client