
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json)
Hash identifier: cGKrHoCnxxrU2s9GOO9SO5lCzSfx0E5IFVQMyR4t7uI=
Subject key identifier: 00:B7:9B:2B:BE:18:F0:AB:62:A7:93:38:BD:09:45:8D:24:35:7F:F3
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial: 07C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
Manifest number: 07B1
Signing time: Sat 04 Apr 2026 21:15:33 +0000
Manifest this update: Sat 04 Apr 2026 21:15:33 +0000
Manifest next update: Sat 11 Apr 2026 21:15:33 +0000
Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: RRxYwhHXo1w4zP4bE5j8HN9crlfDLUzd+oRE5kWYYYw=)
2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: rRI5YNBN8BFJj5LVMQ9i0QefTh7uLQfpdIvxJ+hQ5Wc=)
3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: PSZyKZNLeC+ynTVNPefbaajpAUQPkgVzephvNIxcZqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Validity
Not Before: Apr 4 21:15:33 2026 GMT
Not After : Apr 11 21:15:33 2026 GMT
Subject: CN=69d17f75-93d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:6b:0f:b7:8f:19:d1:f4:41:6d:02:33:e2:
bd:82:19:e6:49:fa:4b:2e:f6:79:b4:83:b9:08:c1:
1e:a3:99:2a:74:45:f6:ec:65:5e:12:09:65:02:fe:
cb:c0:fb:60:b3:d2:1e:99:9d:e8:21:7c:5d:1e:41:
3c:13:36:90:03:d7:51:59:e0:23:9d:de:9a:ef:0f:
8e:bd:17:ff:c3:35:82:7f:87:e1:5e:db:f4:83:c4:
51:41:f8:4a:66:fd:38:86:e3:1a:fb:93:dc:50:55:
47:38:3d:62:cc:0d:e1:0e:69:80:f2:b6:94:67:b9:
6c:4d:82:aa:96:09:2e:80:d5:e2:ea:5b:bf:cc:4a:
e1:1e:d4:0f:4a:cb:e6:8e:8c:c0:19:7d:8d:9e:83:
d5:75:ec:dc:62:7b:98:bf:8c:87:16:48:1f:fd:40:
fc:67:13:c7:7d:df:7c:37:c0:5d:8c:2f:ff:e6:de:
69:e8:40:43:fa:ea:8e:17:23:6c:a8:b5:be:c9:c2:
42:8d:53:ae:46:74:84:8f:17:9f:24:01:ab:12:98:
9c:04:66:8d:74:1e:ba:46:e2:e9:b1:7f:ce:9f:ec:
92:56:b8:fc:e7:1f:00:94:59:40:f9:23:f4:b6:3a:
07:11:e5:2a:02:82:0d:31:63:01:61:aa:5d:94:8b:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:9B:2B:BE:18:F0:AB:62:A7:93:38:BD:09:45:8D:24:35:7F:F3
X509v3 Authority Key Identifier:
keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:06:84:bf:e1:13:4a:0e:8b:83:24:c6:d2:5a:bf:94:b7:46:
f0:4d:bc:3a:8b:fc:06:af:36:66:f9:40:e1:3a:8b:73:b7:31:
4a:eb:62:ab:5e:ed:1d:d5:3e:9d:15:67:8d:e4:1d:6b:27:f6:
ac:c4:57:0e:5d:d8:0e:a1:5b:92:0a:98:0b:8f:6c:a5:b6:b2:
56:ef:03:6a:2b:b7:78:f0:c0:64:92:06:68:e4:5e:91:c4:53:
6f:25:fd:92:9e:f8:d9:07:a1:95:be:33:be:6f:fe:1d:16:ce:
c6:73:2d:23:51:12:2c:d2:34:12:fb:48:15:2f:53:4c:ab:27:
8b:09:a3:95:59:f3:19:df:8e:af:3d:2e:dd:57:2e:bd:9a:8f:
00:4f:1c:92:1d:92:d8:f2:fa:8c:99:8d:e8:f4:63:b7:5c:60:
46:f3:ac:0d:a8:f7:42:50:e5:37:40:e6:85:4d:b9:a9:8a:f6:
5b:09:d0:65:0e:e3:18:46:e4:9f:04:10:6a:39:ec:d5:d1:56:
d3:1f:ee:b9:86:18:dc:61:45:c9:18:ae:de:5b:64:6c:cf:d8:
b1:ed:83:8d:88:20:ab:02:44:7b:8b:57:94:40:c4:90:e3:6d:
f7:8f:a9:7d:f3:85:fb:c5:64:cc:1e:7c:13:a8:05:13:cb:f6:
30:f7:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:24 2026 by rpki-client