
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier: zCnIi0SU9YFmxEVwn7LOu6T1ant5l7vx+89a8YWkXLU=
Subject key identifier: 84:AE:36:3C:19:5A:93:D9:F3:20:8C:7F:B4:01:5F:92:ED:4F:BA:99
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number: 0278
Signing time: Sun 05 Apr 2026 01:37:28 +0000
Manifest this update: Sun 05 Apr 2026 01:37:28 +0000
Manifest next update: Sun 12 Apr 2026 01:37:28 +0000
Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: 6hei1PUJEG3y5HMbVx+ZG3wUzubmJybhX7XwdFuLP+4=)
2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Validity
Not Before: Apr 5 01:37:28 2026 GMT
Not After : Apr 12 01:37:28 2026 GMT
Subject: CN=69d1bcd8-5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:40:7d:19:f3:0f:2f:e0:61:95:1f:d7:45:
bd:b1:51:06:a8:15:d1:e0:88:6a:d2:52:74:b7:63:
4d:6b:7d:b3:a5:0a:e3:d9:1c:22:7c:2f:9b:9d:85:
5e:83:be:51:9a:1c:03:5c:de:df:9b:84:62:7d:47:
a6:2c:d3:d0:df:87:dd:72:33:ea:37:26:ca:08:f8:
bb:c0:21:7f:b6:c7:b1:47:0a:dc:32:68:a2:ae:14:
3f:01:92:b9:3f:0c:a1:7b:b4:e8:78:52:1f:eb:8e:
ba:d3:36:17:1d:92:19:b9:2d:8d:11:3a:6f:da:64:
05:de:3d:f9:9d:86:09:8f:61:05:58:de:47:33:08:
ba:8c:66:ca:53:6b:b0:23:2f:01:61:ec:d9:69:af:
68:fa:3c:b8:40:5e:0e:d9:e1:4e:d2:7e:02:d6:ae:
1f:c8:b5:10:de:09:f0:ae:d2:62:de:83:81:84:7c:
72:ce:ce:35:e8:26:54:b8:09:a9:dc:43:72:7d:a1:
05:a0:cb:ce:61:a8:09:2b:7e:08:ec:9a:e5:ba:46:
9d:03:ea:2c:4c:e5:e3:7f:8a:3f:75:3f:c3:07:cd:
83:e4:fc:58:f7:76:bf:eb:34:ba:d1:bd:ca:7e:00:
6a:4b:23:15:ea:33:e8:93:94:49:1e:12:bb:47:e3:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:36:3C:19:5A:93:D9:F3:20:8C:7F:B4:01:5F:92:ED:4F:BA:99
X509v3 Authority Key Identifier:
keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:b3:aa:37:cd:2e:39:7f:28:30:71:a4:1a:c8:82:a5:14:
d6:2a:0e:5c:67:4a:fa:cd:48:80:a8:6a:43:96:f8:08:c9:c8:
9a:e4:65:b0:11:5d:69:24:57:67:94:55:02:54:f4:16:4f:de:
a4:e4:55:8c:e1:51:30:2b:5a:86:c2:aa:8b:41:51:6c:46:a0:
e6:da:37:11:21:99:b2:fb:7f:0c:34:0d:a3:16:f6:4c:d0:40:
19:55:28:82:73:9f:22:01:df:cf:68:9f:cf:4b:d5:94:b6:fe:
f4:69:ec:57:1a:47:04:55:87:0c:0d:1b:52:4a:c7:b3:5d:ed:
e7:ba:a2:50:16:e5:b2:e0:4a:97:fb:40:6d:62:d5:f3:8f:7d:
ec:6e:22:c5:61:46:ee:ec:f7:c6:f9:c3:f2:93:49:14:7d:d2:
b6:a8:32:76:d9:92:5f:1a:46:c3:85:78:bf:8d:bd:27:66:75:
4d:cc:a6:aa:36:c0:20:4e:01:31:e1:d3:49:f6:32:11:96:01:
64:9f:9d:ed:d6:4e:51:53:56:80:60:f7:54:9d:7e:5d:15:89:
d3:50:f0:8a:a3:47:fb:ea:8a:a8:be:5c:c5:07:9c:70:41:97:
43:87:75:0f:37:6c:cf:72:ec:c5:d6:7f:73:df:9b:ed:0b:2d:
af:e7:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:04:01 2026 by rpki-client