
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json)
Hash identifier: NgZHwiIj7x/uY1cZ3koGAjDHKZgkB/wPNBZbT/69kY0=
Subject key identifier: 2B:90:13:25:36:FE:6E:46:22:DE:8B:A3:EF:92:44:99:83:9C:AE:80
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 0281
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
Manifest number: 024B
Signing time: Sun 05 Apr 2026 02:17:47 +0000
Manifest this update: Sun 05 Apr 2026 02:17:47 +0000
Manifest next update: Sun 12 Apr 2026 02:17:47 +0000
Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: WxjOhp+cgaE9ltNUMgfmnrZF6CPFYoLkIwHKh2N6EPE=)
2: 1DAE236CC9D411F0A61E0021C4F9AE02.roa (hash: aeLivNMz0xWyDdtjiSwZqRIjf3+VnEuKQfS5iUJ05YU=)
3: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: f761NBuqVy8QZS/G2DKJyXg8yHr9izjybb2tsi+q8yM=)
4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: XziEOmHehC91jypB6vBKLGxNX2adJM+CaWsnH6wjX0o=)
5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: pKL0c7mZdKHmscnwGC4t5Dk2GwqWQMIqG+psZAa8dkw=)
6: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: 4a4u/xLVk8tTHuUdy65eUm/BUELFx7fyNoPG/ykC6/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 5 02:17:47 2026 GMT
Not After : Apr 12 02:17:47 2026 GMT
Subject: CN=69d1c64b-9048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:0e:ad:6b:7d:aa:13:c9:0f:27:5b:f9:b9:
bd:72:c9:ed:71:d7:b5:49:19:2d:9e:b8:a6:a5:89:
c0:14:e5:f7:88:a7:ba:ba:7a:53:89:6c:c4:ec:df:
27:36:7c:70:63:e3:09:d6:76:7d:1c:9f:e1:f3:b2:
be:5c:13:e9:a6:a9:1f:40:60:cd:05:9a:5d:84:ad:
5c:82:b3:e9:a4:ec:89:86:74:e0:90:ad:30:ce:97:
38:dd:4b:12:41:e4:e7:f1:e7:c1:af:59:38:e0:5f:
3a:ab:62:10:31:79:f7:7d:93:23:32:a5:84:e1:55:
ed:a5:b9:f0:8b:80:32:fc:0c:3e:09:97:59:a9:3a:
67:63:f2:43:5d:7d:6a:e9:d8:4a:c6:bc:6a:94:18:
4f:1c:5f:d9:af:67:db:ec:12:e2:18:89:54:c5:c7:
a0:a0:d7:80:e6:52:43:d7:79:43:c4:aa:89:5f:c6:
b8:43:d4:9f:73:c8:ee:1f:31:67:a1:fc:e9:92:d7:
7f:ba:15:54:1d:b2:83:eb:5c:9f:85:25:8d:af:46:
e7:04:d1:5f:fb:60:4a:97:68:6b:4d:dc:ec:3b:5a:
0d:03:94:db:ec:0e:98:8e:a9:e4:a9:22:a4:35:b3:
85:21:b3:7f:f4:09:a2:42:c1:2d:fe:4c:bf:25:6b:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:13:25:36:FE:6E:46:22:DE:8B:A3:EF:92:44:99:83:9C:AE:80
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:05:bf:3f:28:f7:65:04:73:7a:09:9f:65:53:08:7b:7c:b8:
89:7c:74:c4:68:c3:92:6c:5c:76:ac:7e:0a:a0:d5:49:ee:7e:
a6:72:68:62:3f:03:ca:c6:7d:29:1a:8c:ac:33:6d:ce:18:02:
f2:57:02:8d:8d:e9:d7:58:b2:69:10:6e:cd:5c:28:aa:49:48:
14:f0:b2:c9:64:5d:9e:79:b2:c1:93:82:6f:0c:8c:3f:1f:55:
9a:f3:bb:eb:f2:5f:73:e4:90:d6:c1:e2:92:d6:cb:12:a9:a6:
23:7d:91:5b:51:bf:35:00:08:41:19:44:a0:1a:73:f4:66:e5:
77:ba:cb:68:f8:9c:13:e8:7a:97:2c:f6:a6:14:5a:26:dd:fa:
44:2e:7a:d7:1d:65:71:6e:42:d8:2d:62:a7:24:a7:6e:80:1f:
09:dd:eb:24:4e:93:ae:0a:e8:36:a2:d6:a7:62:8b:86:b1:b2:
23:0a:4d:e8:5c:e2:57:77:a8:55:51:99:f3:10:b3:4e:3a:43:
91:9d:99:96:cf:7c:c5:c2:d9:2f:e1:bd:15:d8:63:74:d9:d6:
79:40:e1:a6:9d:73:2e:8a:ac:79:cf:62:bd:24:39:84:8c:20:
db:49:23:ce:c6:d6:c5:9c:bc:61:01:65:30:fc:25:78:67:d3:
c4:2c:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:23:38 2026 by rpki-client