
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier: xZj6Ym8zVwfM1SgNvg377gJsmjlVRtLAUXXFRdwLE2M=
Subject key identifier: B3:56:A7:56:B9:DE:00:F7:C4:5A:33:8F:C4:EC:4B:19:00:73:3E:5E
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number: 0103
Signing time: Fri 13 Mar 2026 03:04:48 +0000
Manifest this update: Fri 13 Mar 2026 03:04:47 +0000
Manifest next update: Fri 20 Mar 2026 03:04:47 +0000
Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: Vlmh5OzuPE2/I3xofWuGLf3y4JZtdYzGOv9o6LvSjGo=)
2: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
3: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Validity
Not Before: Mar 13 03:04:47 2026 GMT
Not After : Mar 20 03:04:47 2026 GMT
Subject: CN=69b37ecf-0253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:3a:10:1a:4d:bc:31:57:d2:d6:2f:e8:cb:
1e:05:0f:80:3a:de:c7:17:8a:74:9e:85:c0:92:e2:
c0:1f:fc:0a:0e:89:46:63:00:25:f9:36:23:ff:0d:
f6:83:00:25:b8:9b:ed:bc:86:0e:b6:87:d3:c5:2d:
16:ba:da:07:54:31:39:55:5e:a5:e3:81:f9:03:20:
ff:55:9a:9f:7f:8f:e3:8f:6e:24:29:9e:f9:c1:56:
44:00:81:26:56:94:3e:e6:96:58:46:df:01:fa:aa:
a0:30:1d:e6:8c:65:43:d7:3a:07:02:79:be:60:98:
7f:48:eb:e2:c3:a4:01:e8:f1:a7:79:fb:fb:56:9f:
a9:ce:d9:29:08:5e:fe:1e:dc:df:13:b4:cd:fc:5e:
ea:6b:08:49:39:8f:e1:59:d2:a8:ac:e7:54:a1:70:
0e:c9:4c:a2:df:ad:a8:0b:00:7a:6b:fd:e5:fd:da:
ab:e4:77:64:bc:63:1b:bd:62:9c:13:5b:50:f4:c8:
30:d4:8a:31:4c:c9:66:e5:a8:ff:bc:d0:99:4b:8d:
28:c7:57:cd:18:2a:35:3d:a8:72:30:10:f0:9a:4a:
d7:82:69:43:a4:be:39:03:0f:4f:47:31:ab:07:37:
c4:60:85:da:6d:2a:c3:7d:4e:60:de:09:ab:20:64:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:A7:56:B9:DE:00:F7:C4:5A:33:8F:C4:EC:4B:19:00:73:3E:5E
X509v3 Authority Key Identifier:
keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:bf:9c:a8:11:df:36:bd:99:88:d4:b7:ef:75:bf:ed:b3:74:
c2:0b:9a:9a:fe:ca:91:48:09:0a:b3:c6:c8:25:e2:c0:f4:b2:
b9:e0:62:f8:4d:9e:29:84:97:50:cd:08:0e:1f:f8:e7:30:8b:
d5:fb:51:82:78:97:41:9f:14:be:f1:a2:5b:63:49:2e:b0:1a:
d7:c9:31:f7:74:97:bf:bf:f5:73:84:7d:61:f4:0a:90:b5:ec:
7d:d2:0f:5f:8e:ae:3f:bf:52:ae:01:02:89:9c:ce:da:3f:1e:
f1:dc:f9:c5:cf:70:c3:62:5d:1e:17:88:05:a9:13:7e:41:47:
55:15:d6:05:6d:80:05:e1:d7:34:8c:8b:c8:fd:c3:e5:ef:d1:
94:08:a6:11:1a:c9:e2:ad:f4:47:5b:70:0e:f9:80:f2:70:5b:
5f:e8:04:3a:cb:98:0d:8a:74:95:88:c2:e2:a1:40:e7:5b:fa:
d2:c0:34:8b:7f:23:98:64:51:a0:cc:71:1c:40:23:b4:5f:fe:
98:4c:bb:04:38:59:17:d6:63:74:c2:5e:5c:17:0f:d7:de:29:
a5:b9:2c:33:c0:3d:e8:e2:c2:13:08:fb:69:2d:9f:ab:5a:ae:
e1:2e:6b:e4:b0:78:e8:5e:2a:23:3b:07:4c:8b:02:a3:0b:b0:
41:66:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:05:35 2026 by rpki-client