
$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: DbrBt6iqQZXc5O1iFrONrBUzWqfayasq8jz8gmDz3p8=
Subject key identifier: E2:18:08:F6:BB:CD:F5:75:4B:D5:67:E2:F1:F3:8C:93:6A:BC:1E:02
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 028D
Signing time: Sun 05 Apr 2026 01:28:18 +0000
Manifest this update: Sun 05 Apr 2026 01:28:18 +0000
Manifest next update: Sun 12 Apr 2026 01:28:18 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: NPFkHr8Sv2XsuEa7O+NAreBmA/zOUegUAGKgaOzDmPk=)
2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: 9NOA2GTvOZu45DJO8iVx216gsk/ZwT1Y1rufuhTNiUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Apr 5 01:28:18 2026 GMT
Not After : Apr 12 01:28:18 2026 GMT
Subject: CN=69d1bab2-b6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:ab:4d:56:8f:05:81:0e:b3:cf:df:a0:9b:
7f:24:2b:7e:d5:86:30:a3:80:39:38:7e:b2:55:47:
fd:45:4d:84:8e:ba:f8:04:81:0e:93:d5:56:5c:79:
a6:a7:29:99:f0:7b:05:47:12:99:20:54:82:a1:49:
5e:8e:47:0e:7c:ce:e7:5e:6b:1c:0c:8f:25:be:7e:
f1:dc:d1:02:bb:97:ac:ea:ff:1f:48:02:79:7e:a0:
dd:b0:ac:d0:6e:22:23:41:92:d9:db:b0:81:94:b9:
d7:6b:58:f6:45:74:17:04:10:1f:81:2a:ab:1e:59:
3b:eb:44:c4:05:8a:e7:f4:ba:54:7a:9f:61:f5:a5:
56:bd:ff:00:29:23:1b:7c:ab:be:8d:4b:45:de:4a:
16:7b:f1:ad:54:41:9a:d5:f9:eb:e1:51:1f:0a:12:
dd:14:8f:09:04:fa:63:f5:85:47:1c:ba:04:1d:e9:
20:e2:bf:ab:5e:fd:27:4b:3f:20:f3:ec:ff:42:fb:
9f:c1:7e:c2:b7:f9:f8:bc:59:f7:78:93:10:d7:06:
5a:17:8c:44:01:7e:30:77:e7:e6:0d:dd:89:d2:cc:
39:8f:88:5f:ea:55:54:da:c1:16:08:0a:15:6f:93:
34:a0:6a:b7:3d:f5:ee:a0:cd:07:af:62:f3:09:12:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:08:F6:BB:CD:F5:75:4B:D5:67:E2:F1:F3:8C:93:6A:BC:1E:02
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e3:99:02:ea:f4:e0:60:2d:50:a2:f6:d3:5a:1c:0c:ea:88:
d4:18:97:06:3e:d8:03:31:e4:72:10:54:92:a5:49:b6:e1:5a:
4c:f5:86:62:03:b2:a1:d3:bf:8b:18:38:a2:dc:b7:b6:96:cc:
eb:d4:e4:06:3d:6b:15:c6:77:7e:0f:25:fe:70:44:f5:e1:d6:
96:77:3d:cb:9e:54:05:db:2b:46:36:dc:f6:53:94:29:91:f7:
5a:88:e5:98:40:21:b9:30:0b:f7:a5:f7:f6:d5:57:0f:30:78:
ca:26:55:39:2f:b4:cd:f2:18:af:c3:7d:c9:a6:cb:1c:8e:9f:
36:2b:41:ff:ab:5d:25:9a:04:70:a4:ae:cc:28:d8:96:1e:15:
cf:7c:dc:29:7c:69:0e:ee:55:b0:f2:d2:cd:84:71:88:b9:e2:
98:91:1d:f7:6f:aa:6c:8f:58:06:2e:1f:c2:59:b9:6e:b1:c1:
7f:eb:cd:fd:f4:7b:93:9d:5b:88:cc:b9:3f:37:d8:aa:0e:81:
ad:90:c0:03:b1:53:ea:da:18:98:60:53:43:d6:78:f8:25:ac:
f3:b2:f5:48:92:a2:e5:d6:79:96:32:1e:2f:6e:31:45:5a:e0:
74:2b:e7:b2:49:43:c3:45:1f:39:2d:52:f4:0a:e4:a4:7e:f7:
04:65:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:26 2026 by rpki-client