
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json)
Hash identifier: wU/R9YI1+UNlPc6Sxcwi+9F9uCfXvORejJYwDz7dn5s=
Subject key identifier: 24:C2:FE:0B:26:F7:AC:B7:2B:69:F3:3A:13:16:88:A6:49:66:8D:7C
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
Manifest number: 0318
Signing time: Wed 25 Mar 2026 00:47:32 +0000
Manifest this update: Wed 25 Mar 2026 00:47:31 +0000
Manifest next update: Wed 01 Apr 2026 00:47:31 +0000
Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: 03LCVhqXjPZD3Hp9wnC/ndVc568KKJ0DA9rocvC7o6w=)
2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: J2PApqr+PhuIOFT4jmSyae2c/UdsfNvMzE8JRIfQl+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178ACB, serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Validity
Not Before: Mar 25 00:47:31 2026 GMT
Not After : Apr 1 00:47:31 2026 GMT
Subject: CN=69c330a3-e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:cf:b1:b6:95:0c:ac:b5:f7:3c:1c:b8:f3:
a0:9b:53:78:aa:6f:8e:17:1a:1a:a2:51:1a:64:6c:
c0:16:70:28:f1:e5:66:55:ec:b4:59:ee:f8:e0:2a:
a3:65:28:01:d2:e9:c4:01:5e:bb:d0:aa:66:c6:7f:
5c:d4:bd:1c:48:e4:7f:1e:c0:b7:5d:bf:b0:3d:49:
ce:90:d6:a6:49:07:80:18:e6:b6:73:54:1e:c6:fa:
1a:72:5d:24:f5:b1:c0:70:0a:86:27:ed:1c:6a:da:
0a:56:93:39:fa:b3:41:be:a9:04:13:79:ba:1f:9c:
69:25:aa:f5:cb:dc:a0:e5:c8:40:56:fd:6b:f8:da:
82:0d:7d:aa:4b:1a:0b:47:ad:60:11:9f:f6:77:54:
ed:f3:ef:cf:84:52:9d:24:a4:a1:17:f3:8a:85:64:
36:b1:c0:0e:55:e4:bb:b4:5b:1c:4d:c6:cb:fb:31:
3e:8e:87:e7:2f:e7:20:3f:cb:99:9c:90:43:a0:39:
8a:64:13:d8:ca:87:ea:08:ab:41:15:c5:90:fc:b7:
57:af:2b:fa:07:5d:1e:2e:d8:29:f6:f0:15:31:6d:
5c:f2:1c:01:38:58:80:c9:dc:23:69:d3:59:cf:fa:
55:97:2c:b1:75:5c:2f:29:74:a8:21:32:eb:25:ff:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:FE:0B:26:F7:AC:B7:2B:69:F3:3A:13:16:88:A6:49:66:8D:7C
X509v3 Authority Key Identifier:
keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:97:65:0e:09:b4:87:5c:85:76:31:b6:0c:a0:b0:33:79:
e6:25:fa:86:9f:a0:90:ac:84:30:b6:0f:04:28:b4:62:31:1f:
22:08:d7:94:a7:95:4d:7f:b8:33:a7:6c:18:32:29:ec:a8:47:
fe:ae:3d:22:13:a9:ff:e7:67:d5:d5:7f:83:17:73:de:64:be:
aa:82:17:34:9f:8d:4d:7d:ff:3a:0b:ff:75:b0:08:f4:0b:52:
21:22:e9:0a:a3:8e:4b:cb:a5:63:7f:d1:33:ed:49:57:db:78:
7b:3c:0f:75:d9:b1:0f:13:06:9c:78:23:8d:0f:12:cd:ac:3c:
65:69:56:a1:33:d8:ce:b7:79:3f:52:4d:f1:f4:67:1f:11:71:
1a:78:a7:df:57:ff:44:2f:3f:fe:02:9e:9f:ea:68:c1:bf:e4:
b9:53:6b:3a:7f:8e:1a:2d:b2:4e:17:19:95:a9:f0:99:b3:4d:
c5:dd:83:46:57:f6:fc:89:db:8b:9c:e6:e4:a9:1c:b4:f6:88:
ab:fc:b9:e4:d5:60:05:c7:3c:e2:62:c6:ef:4c:a7:b8:8d:3b:
93:55:bc:46:c0:67:46:8e:68:47:1b:b0:19:d4:84:b9:94:ac:
0a:51:99:44:3f:b8:8a:44:fd:a4:d1:50:6e:b4:1c:28:6c:82:
80:17:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:55 2026 by rpki-client