
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier: 6rf6upzW/N+hVSgZjsoGnTNzkDE1OUix1ZHLZNYWN5M=
Subject key identifier: E8:72:0B:18:F5:08:93:8C:BA:D0:7F:7B:1C:AB:46:45:09:61:00:7E
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial: 3560
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number: 3545
Signing time: Sat 04 Apr 2026 14:19:38 +0000
Manifest this update: Sat 04 Apr 2026 14:19:37 +0000
Manifest next update: Sat 11 Apr 2026 14:19:37 +0000
Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: nz12UVy4YGe+r1jRnzL53Wo9LupFblZpHfRPc2tUskM=)
2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Validity
Not Before: Apr 4 14:19:37 2026 GMT
Not After : Apr 11 14:19:37 2026 GMT
Subject: CN=69d11dfa-e4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:8e:ca:a2:c0:cb:29:8a:89:a9:4f:13:28:
c8:8b:8a:f3:02:07:ef:f2:f7:0d:66:58:26:37:87:
fc:55:e7:16:a2:8a:01:44:e1:85:a8:05:35:1d:a3:
f4:eb:3c:95:3f:28:88:98:3d:24:ed:88:76:9c:57:
e2:d7:cb:d0:39:05:06:dd:be:52:60:b3:27:73:0f:
96:97:d7:c0:6c:55:c1:2f:d3:5f:5a:03:d5:ab:8f:
95:e5:c2:81:86:f7:66:67:5e:36:fb:d9:9f:f5:21:
ac:ab:17:92:b7:90:4b:f9:d2:a2:0a:c4:26:1a:53:
2e:2d:fe:61:fe:f1:b5:0c:76:86:ce:c5:17:13:91:
7e:7d:1e:b0:45:c9:55:8a:b6:4e:3b:3a:1c:64:e3:
24:9c:b9:d7:a0:f4:b5:2f:8a:d6:a3:22:2a:81:55:
7c:24:13:80:e9:bb:8c:da:fe:4f:b1:24:2c:9e:c6:
f1:d1:46:fe:8d:47:5f:a7:76:53:b9:22:59:bf:34:
aa:4d:04:60:06:2b:28:d8:77:77:d9:15:4f:27:1a:
09:58:4c:2c:0c:7d:66:50:fb:20:68:b4:c1:d7:f5:
4b:cb:b7:1f:dc:ad:49:08:a6:48:7a:c7:0f:8c:90:
e4:69:6d:7d:ce:3a:9d:1a:d2:13:3d:37:e7:21:ed:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:72:0B:18:F5:08:93:8C:BA:D0:7F:7B:1C:AB:46:45:09:61:00:7E
X509v3 Authority Key Identifier:
keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:13:70:83:41:ef:e7:78:8d:59:71:64:79:c9:82:42:9e:44:
3b:dd:15:47:2d:81:8c:6a:e5:09:a6:f4:a5:5d:9c:71:10:6f:
37:82:7e:73:da:ae:96:50:43:19:4a:93:bb:37:be:b0:9a:18:
b1:15:44:48:80:e2:1c:58:a5:cd:82:c2:67:4b:d1:49:4e:9a:
a1:4b:4f:db:4f:d1:27:d2:07:e3:f3:ad:6c:d6:c0:1f:dc:03:
6b:13:39:92:23:44:91:9e:ee:30:a6:8a:dc:2a:94:16:a9:60:
db:77:57:44:55:86:02:b6:7e:c1:40:50:ca:dd:62:39:9d:bf:
5a:2f:12:24:e5:3a:a7:96:e1:38:55:d5:f4:00:c1:ab:7f:86:
4f:ac:d9:6c:76:07:6f:23:8c:92:8b:d4:cf:a0:89:53:1b:14:
fe:3c:63:ae:62:32:d7:9a:58:93:af:55:cc:61:33:48:6a:19:
85:05:f1:44:92:2b:2a:3e:b3:fe:5f:4a:57:e2:0c:6d:9e:fd:
09:1c:e2:3b:c3:2b:9f:27:46:da:af:a8:e8:e5:49:0e:04:5d:
be:b8:50:36:a9:f4:33:41:8e:ef:30:46:17:98:71:a2:b2:2e:
3e:c0:ff:ee:09:8f:d9:0b:b6:84:91:31:de:c3:cd:b1:2b:d0:
34:75:49:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3
N0RGQjIxQTMwHhcNMjYwNDA0MTQxOTM3WhcNMjYwNDExMTQxOTM3WjAYMRYwFAYD
VQQDEw02OWQxMWRmYS1lNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+aOyqLAyymKialPEyjIi4rzAgfv8vcNZlgmN4f8VecWoooBROGFqAU1HaP0
6zyVPyiImD0k7Yh2nFfi18vQOQUG3b5SYLMncw+Wl9fAbFXBL9NfWgPVq4+V5cKB
hvdmZ142+9mf9SGsqxeSt5BL+dKiCsQmGlMuLf5h/vG1DHaGzsUXE5F+fR6wRclV
irZOOzocZOMknLnXoPS1L4rWoyIqgVV8JBOA6buM2v5PsSQsnsbx0Ub+jUdfp3ZT
uSJZvzSqTQRgBiso2Hd32RVPJxoJWEwsDH1mUPsgaLTB1/VLy7cf3K1JCKZIescP
jJDkaW19zjqdGtITPTfnIe0ixwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhyCxj1
CJOMutB/exyrRkUJYQB+MB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE
NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx
U0cybVFfajVOaHQzMzdJYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnBNwg0Hv53iNWXFkecmCQp5EO90VRy2BjGrlCab0pV2ccRBvN4J+c9qullBD
GUqTuze+sJoYsRVESIDiHFilzYLCZ0vRSU6aoUtP20/RJ9IH4/OtbNbAH9wDaxM5
kiNEkZ7uMKaK3CqUFqlg23dXRFWGArZ+wUBQyt1iOZ2/Wi8SJOU6p5bhOFXV9ADB
q3+GT6zZbHYHbyOMkovUz6CJUxsU/jxjrmIy15pYk69VzGEzSGoZhQXxRJIrKj6z
/l9KV+IMbZ79CRziO8MrnydG2q+o6OVJDgRdvrhQNqn0M0GO7zBGF5hxorIuPsD/
7gmP2Qu2hJEx3sPNsSvQNHVJjw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:03 2026 by rpki-client