
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File: xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier: jp4zJTnA6jZHecMcesJmv+vL5omB5uloF19fJbsQ8go=
Subject key identifier: 1A:B8:70:14:7B:ED:47:8B:BD:AA:77:28:7E:FF:70:C5:DB:3E:17:96
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer: /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number: 3E
Signing time: Wed 25 Mar 2026 07:40:58 +0000
Manifest this update: Wed 25 Mar 2026 07:40:58 +0000
Manifest next update: Wed 01 Apr 2026 07:40:58 +0000
Files and hashes: 1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: zGRunztM2YVmZPfSrVdwJnG51rOKLdlbTzvghDuaNyk=)
2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Validity
Not Before: Mar 25 07:40:58 2026 GMT
Not After : Apr 1 07:40:58 2026 GMT
Subject: CN=69c3918a-b072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:57:68:fc:7b:f2:e0:37:6f:f0:d1:68:e0:
18:d4:1c:eb:4e:bd:84:2e:09:d6:2c:39:eb:29:31:
ce:4c:ca:39:47:59:a9:53:e0:da:fc:8f:96:ae:29:
09:2c:e7:6c:f0:6c:a0:09:10:47:94:86:21:f4:83:
e8:db:dd:fd:bd:87:3f:35:92:73:55:a6:df:dc:be:
38:15:2a:f5:f7:40:8b:e8:e8:79:4e:f6:2b:d7:19:
08:b5:a5:84:a3:e5:66:43:e4:f7:4e:d7:0d:4f:57:
bc:42:ec:38:01:bc:31:93:57:4c:b8:19:5a:7b:4f:
a5:f0:f7:3a:ed:38:e1:3d:31:98:96:53:66:c7:5b:
b5:c1:dc:93:2e:cc:6e:62:14:f7:e4:75:bc:66:27:
b3:18:60:04:e6:a9:b1:9a:d4:2d:9b:68:0d:f4:19:
46:89:a3:fd:d7:70:81:da:21:01:c0:73:26:f1:5e:
1f:9a:38:99:fa:95:0d:0c:18:00:5c:9c:e8:52:6a:
f0:1f:b3:ea:5d:1e:ce:40:fe:e2:ba:df:e0:1d:13:
1d:8e:30:e0:8b:f3:e1:b1:50:45:58:27:38:9f:69:
2e:fc:1c:31:6d:b5:e6:c0:5b:a9:0e:56:42:aa:01:
67:7c:bc:be:4c:46:5a:63:4f:2b:52:54:70:11:de:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:70:14:7B:ED:47:8B:BD:AA:77:28:7E:FF:70:C5:DB:3E:17:96
X509v3 Authority Key Identifier:
keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:42:35:02:40:cf:d0:51:11:49:42:0b:2d:aa:63:ea:62:6c:
f3:43:1c:89:ff:88:21:50:06:b6:b2:57:7b:6c:b6:a8:b1:7a:
12:b4:a8:53:ba:22:2b:0c:4b:2e:97:89:39:ab:f3:09:f1:65:
50:98:54:86:f5:2d:89:17:d9:90:f2:2f:d7:84:39:70:c7:27:
1c:80:2b:69:13:cc:98:2b:11:fa:9e:8b:77:d0:64:4a:b6:fe:
8e:05:92:6a:29:44:5e:bd:6e:12:50:bc:68:32:65:66:8b:b8:
08:db:14:04:bf:5f:17:18:95:6c:fa:c6:eb:dc:83:52:fd:42:
d5:f4:a5:a5:b6:37:91:be:b1:eb:a7:c0:17:c3:6a:60:e2:3e:
25:44:13:26:c8:e6:53:de:71:0b:73:c8:37:7a:5c:ca:b6:e9:
e0:98:d4:f5:e4:f0:ab:ca:c3:41:58:73:05:c9:67:d1:17:42:
c5:a1:c5:ec:f6:94:75:43:3c:c5:2e:77:3f:2f:94:62:19:fd:
3e:7d:3d:c9:5b:61:dd:10:21:b5:f7:ef:66:07:69:f8:b5:1d:
c2:d5:e8:07:d1:95:23:d9:15:0d:84:15:aa:24:b6:95:4f:ba:
79:5e:63:c5:a1:ad:0b:e0:3a:f4:19:28:46:bb:9d:82:45:fc:
e9:e3:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:29:32 2026 by rpki-client