
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json)
Hash identifier: UIa3txMF5c/vJg37Q5ca0qm6D+6gacM0Z1/B75yj6bM=
Subject key identifier: 89:C5:AB:0B:A5:3E:E3:54:3D:41:BB:73:A5:E8:90:96:0B:94:BC:B8
Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Certificate serial: 3529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
Manifest number: 3529
Signing time: Sat 04 Apr 2026 14:37:06 +0000
Manifest this update: Sat 04 Apr 2026 14:37:05 +0000
Manifest next update: Sat 11 Apr 2026 14:37:05 +0000
Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: Ma/77o8ptSI3PkM0eSN2LQxJrzR2HlDVz6CRft2j0LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13609 (0x3529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5
Validity
Not Before: Apr 4 14:37:05 2026 GMT
Not After : Apr 11 14:37:05 2026 GMT
Subject: CN=69d12211-320c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:5c:02:b1:27:32:d3:c6:e0:d6:cc:b5:e5:
6a:68:42:2d:8e:7e:a3:f5:29:c5:db:b7:3b:f5:d7:
0b:81:a1:e4:02:cd:da:9f:da:c1:b1:3b:f7:72:00:
27:b7:d0:8c:84:68:56:16:ba:30:a8:b0:a5:95:6e:
26:78:6c:d2:60:18:e8:b3:63:4b:30:29:e5:90:1b:
46:00:22:d1:d0:e0:41:9e:ed:bd:42:71:a5:f6:db:
2e:71:b0:9f:0f:37:a6:81:b6:19:e0:c6:4d:b8:ca:
49:46:41:3a:42:a6:bd:f2:26:cd:96:d9:3e:7f:f1:
f7:c9:ec:a5:e2:79:d0:64:02:14:48:f0:19:a5:a4:
17:8c:6d:f8:08:58:4f:9c:18:dc:2f:ff:33:13:c7:
bb:83:e8:db:8d:71:fd:7d:7b:f7:49:3e:08:b0:e1:
13:1e:42:27:9a:5a:34:45:fc:2e:02:fb:27:57:e4:
43:72:ad:0b:ab:75:01:52:c7:39:6d:e0:6c:ad:f5:
1d:89:02:b5:90:14:fe:7b:0e:c3:27:42:e8:97:c3:
4e:d7:82:37:03:21:f2:f7:1e:1c:50:61:36:0e:9c:
13:41:13:7c:58:9e:cd:07:d2:d2:7f:06:c9:30:b4:
90:9c:de:8c:5a:13:f7:bf:a2:00:53:ff:c7:ab:c7:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:AB:0B:A5:3E:E3:54:3D:41:BB:73:A5:E8:90:96:0B:94:BC:B8
X509v3 Authority Key Identifier:
keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a4:b8:d5:de:cd:d1:15:6c:ae:cf:48:ee:b0:ea:63:f7:54:
dd:12:93:7f:56:1d:3d:a9:bb:85:98:0c:b4:06:95:8a:23:7b:
6f:c5:c2:d5:49:b4:ab:45:bf:b9:bf:54:50:43:08:43:ef:2b:
6c:00:5d:b0:5b:07:2e:a0:f9:17:b7:2d:ec:de:a6:96:92:a8:
92:10:6e:5e:d7:ff:55:eb:b2:09:33:5b:c6:77:d5:b5:25:2b:
4d:11:ee:fb:d4:9f:b8:2b:3a:80:44:ce:83:c7:2c:76:17:2c:
53:cc:1b:38:62:69:81:c0:b3:d4:74:aa:dc:aa:d0:f0:63:82:
2d:0c:50:7a:38:9a:9a:d7:bd:56:d5:ec:c3:42:fc:26:3a:e3:
62:7f:b6:d8:21:f7:dc:93:f1:92:5d:b6:f1:17:5a:c8:39:1f:
18:0d:a5:c5:74:9e:53:fc:6f:9e:53:1f:3b:9e:23:e6:82:2c:
bf:e4:34:3c:1b:18:77:16:4e:23:2b:30:61:be:62:4b:bf:0b:
03:87:60:28:39:5a:af:b8:56:f1:98:2d:00:0b:2d:82:76:9d:
9f:85:64:77:cc:0c:45:88:73:ae:50:34:db:fe:cb:8b:84:4d:
85:9a:5a:81:33:50:4e:f9:9d:76:ae:cd:c3:04:cc:1a:bf:b9:
f4:94:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:29 2026 by rpki-client