
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier: YMj0qtaM312zEbc0ndxWk1x6eLlc5AkRzw5g5l1CCf4=
Subject key identifier: 87:8A:5E:1D:1A:36:6D:09:48:54:6B:ED:8F:FD:2F:93:81:36:0D:B3
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number: E3
Signing time: Wed 25 Mar 2026 05:47:44 +0000
Manifest this update: Wed 25 Mar 2026 05:47:43 +0000
Manifest next update: Wed 01 Apr 2026 05:47:43 +0000
Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: 76jlHl+3TtzyopewOEcvGYE1isDgmLv0PmNhpBh73bI=)
2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Validity
Not Before: Mar 25 05:47:43 2026 GMT
Not After : Apr 1 05:47:43 2026 GMT
Subject: CN=69c37700-ae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:cd:e4:f9:03:be:61:e3:8c:ca:98:4c:04:
cf:e2:16:fe:85:a2:44:db:7f:63:1c:ce:b8:20:89:
08:b7:7c:71:42:73:71:0d:6e:30:0a:78:44:f6:cc:
f6:19:51:16:e3:8c:3d:3e:5e:2d:35:0d:fe:10:a2:
41:5a:e4:7d:73:f2:a1:dc:f8:69:f2:4d:c1:3d:ad:
95:e6:96:c6:bc:4e:a7:36:3f:54:1f:4d:39:5e:60:
58:80:af:78:a0:a5:8c:90:9a:49:ff:6f:17:d5:ca:
69:a4:58:2a:9b:af:d3:3b:a5:ca:6a:84:00:26:af:
27:51:d5:09:87:82:59:ee:a9:ed:d6:96:a5:20:a1:
fb:dc:0e:e4:a9:17:96:35:83:46:80:9a:85:4b:94:
b7:85:6a:e8:6a:b1:b0:6c:56:29:1f:f4:f2:ed:22:
27:ad:d8:d7:a9:9e:ca:f9:16:e1:f4:b1:46:a5:a7:
f7:56:37:5a:f2:f4:8e:99:e8:4c:1f:77:c3:85:5f:
55:41:45:74:43:ce:13:b1:df:a8:25:b3:26:e7:89:
86:f8:46:9a:5e:29:4a:57:51:89:ed:61:de:92:5d:
88:df:10:8a:33:31:aa:56:ac:42:af:2a:a8:23:c8:
d9:12:f5:8a:ab:a0:c0:ce:d2:78:2c:83:2f:da:00:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:5E:1D:1A:36:6D:09:48:54:6B:ED:8F:FD:2F:93:81:36:0D:B3
X509v3 Authority Key Identifier:
keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b5:4e:72:2d:ba:0b:a1:c3:7b:6a:49:d0:ad:32:89:0b:a1:
7e:0d:73:e8:35:72:ab:15:23:c9:5b:02:86:b3:88:01:b4:ba:
12:47:25:bc:2b:77:30:63:b7:b9:c2:86:73:4e:3c:a5:e6:17:
9a:9f:cd:be:2d:f2:eb:cb:b3:cd:c1:f8:03:ad:db:39:8e:36:
0f:df:55:eb:2e:68:03:e0:c8:4a:10:b9:fc:c6:45:8c:76:1c:
b6:64:31:d5:8b:1d:a4:fc:ed:04:41:80:2e:42:c5:24:30:3e:
65:1d:ca:7c:78:9b:7b:55:3e:0a:e2:10:4b:8f:92:1c:ea:7c:
02:72:9e:b0:1a:5e:dc:31:ca:52:11:b7:77:ab:f4:f0:e9:ab:
53:d4:e3:db:c5:86:10:93:1d:1f:c8:5a:56:27:41:8a:c2:06:
99:f6:67:d3:bd:4f:a0:69:58:32:cd:ec:d4:b8:4d:29:e8:dd:
cc:e0:09:f5:28:92:4c:63:22:fe:f7:ba:7c:fc:d8:a2:e4:04:
d5:0b:b7:80:db:37:4b:5a:1f:98:6d:07:85:e2:e9:1e:31:16:
b3:7e:71:18:10:e6:bc:72:8f:0e:ba:9a:2d:72:df:a6:0d:99:
4c:64:bf:ae:da:57:e1:92:40:36:d7:70:1f:f9:29:18:a9:04:
4a:74:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:24 2026 by rpki-client