
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
File: xL9bEU_BXXDIgNvBbowaMCo6LyE.mft (raw, json)
Hash identifier: 4vhaGR61tiDU0T1dIFXJkyRkVBgct33cq95NZ9ehb3A=
Subject key identifier: CC:0B:18:18:8A:BC:F8:E0:31:09:61:58:DD:8A:B1:77:5D:59:A9:A2
Authority key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
Certificate issuer: /CN=A9192920/serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
Manifest number: 082C
Signing time: Sat 04 Apr 2026 21:02:15 +0000
Manifest this update: Sat 04 Apr 2026 21:02:15 +0000
Manifest next update: Sat 11 Apr 2026 21:02:15 +0000
Files and hashes: 1: xL9bEU_BXXDIgNvBbowaMCo6LyE.crl (hash: 85iLk4n2twczPoC3i7vuivdqSbmrK3XNnFoVHwgeZrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Validity
Not Before: Apr 4 21:02:15 2026 GMT
Not After : Apr 11 21:02:15 2026 GMT
Subject: CN=69d17c57-ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:b9:d4:02:74:d5:74:4f:c1:2e:1d:4c:d7:
73:fa:6e:a6:cf:0e:99:19:f0:0f:00:a3:a3:60:7a:
dc:21:9e:49:9d:a1:57:79:fd:89:5e:fb:03:b2:2e:
3c:de:01:82:6f:6f:e1:3f:52:2d:6f:72:d9:25:28:
c1:ab:86:fb:8b:c7:50:2f:cc:b1:af:6b:c1:d4:f9:
4c:6d:16:33:88:41:e3:37:ab:69:ab:2c:2e:5b:47:
50:af:e5:13:c6:1d:08:bc:27:62:64:9d:17:08:27:
d3:23:f1:f7:2b:8b:9f:08:40:a0:e9:b7:95:74:59:
bd:9d:fd:bb:bc:6f:ec:5c:07:67:df:c7:33:0d:27:
d3:0e:6f:8e:6d:e6:a4:c6:40:0e:8c:aa:51:af:2e:
b7:89:91:82:ee:bd:23:20:1c:01:c1:19:58:d0:b1:
f6:99:f5:ea:a5:9f:0b:6f:6e:c4:af:44:79:fb:64:
8c:21:78:81:91:f7:33:42:68:f2:4d:99:bf:51:42:
e6:04:9a:8e:e9:45:48:15:c6:f4:16:59:ab:1b:5d:
5e:db:38:6b:d3:6f:1c:73:77:a6:21:17:4c:56:b2:
09:c4:3f:97:73:5c:14:3e:c3:3b:6e:fe:76:8c:3a:
08:51:09:70:5e:37:1f:b4:67:c4:ab:3c:b2:b9:ec:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:18:18:8A:BC:F8:E0:31:09:61:58:DD:8A:B1:77:5D:59:A9:A2
X509v3 Authority Key Identifier:
keyid:C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8d:20:f2:a5:88:97:56:93:bc:6b:f8:43:5b:91:05:31:9f:
e7:83:20:ef:bd:38:d9:86:ca:11:8a:ac:8d:41:ff:8d:50:3f:
74:29:fa:56:c3:1c:66:c7:8b:fe:42:b6:fe:7f:4f:8f:10:4e:
8a:7c:fa:2b:9d:3f:a3:17:93:ea:dd:db:2f:1e:ba:b2:6c:3b:
85:0b:25:53:e7:54:96:c6:ab:5e:94:a7:67:22:a1:17:7d:11:
f6:f5:72:d1:05:15:8c:fd:f6:57:2c:26:6b:a2:67:e4:c2:e1:
7c:fc:dc:0f:f0:a9:7d:9c:4a:72:39:8b:fd:e2:b7:26:f7:81:
b5:c6:e2:46:16:c7:93:26:26:ff:ec:f3:48:cb:c1:c8:23:45:
44:71:b2:77:18:85:26:c6:5c:93:01:bc:19:dd:09:e8:bf:bf:
6f:b8:bd:c2:26:80:ea:dc:be:9c:87:15:a4:9a:7c:37:e7:db:
bc:8c:d3:41:d6:bb:b7:16:5c:7f:8a:0e:cc:3a:d1:94:0b:cb:
70:16:06:f7:9b:40:61:89:d6:2a:2a:f7:60:bb:16:6d:65:51:
ba:00:86:3d:ae:31:b0:f9:47:44:38:85:51:5f:f1:e3:76:b1:
b3:7f:09:3c:82:df:dc:b0:d4:aa:be:94:f6:2c:72:1d:c6:e5:
86:6d:c3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:14 2026 by rpki-client