
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json)
Hash identifier: xx//BX9LS3I1jDoL0t3TrVeANCA8x0xOIU6OYa0OfkA=
Subject key identifier: 50:C6:17:26:E2:0C:11:86:97:1F:33:EA:D6:55:67:DF:48:09:11:F2
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
Manifest number: 0265
Signing time: Sun 05 Apr 2026 01:48:24 +0000
Manifest this update: Sun 05 Apr 2026 01:48:23 +0000
Manifest next update: Sun 12 Apr 2026 01:48:23 +0000
Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: 7EA/812hWslng3TRlZpAlBMGLoz6OxAUmXal4vO2NSs=)
2: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: Mgaf9CSqoVizRMwA95HzOIftcIqXK+Ix2kwlxzxOnak=)
3: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Validity
Not Before: Apr 5 01:48:23 2026 GMT
Not After : Apr 12 01:48:23 2026 GMT
Subject: CN=69d1bf68-f023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:2b:c1:b4:89:38:09:fa:a1:b4:da:2f:42:
ca:83:3b:d2:a3:cb:fe:da:ea:4b:c9:21:e2:62:0f:
c7:9f:26:59:de:f5:b8:35:82:98:8c:24:a0:c1:02:
71:f3:81:28:e8:bb:db:7a:e6:c1:dc:a7:ab:21:e3:
73:83:6c:07:71:64:40:09:b3:d7:e1:20:69:f6:a1:
7e:49:a1:f7:d4:3b:e4:c9:da:ef:c0:ce:b4:72:a7:
43:02:5e:8e:20:c6:af:8a:6a:79:00:22:96:2c:4e:
1a:0e:0c:de:38:28:22:d4:1c:40:27:8c:1d:cc:76:
a0:ff:95:75:86:d6:a3:6a:18:89:b8:4a:de:be:ff:
12:c4:39:28:54:80:02:41:ac:39:cb:26:83:50:29:
57:f2:3b:9a:da:bd:9a:bb:79:1d:6a:53:42:92:9f:
ac:e5:f0:06:bc:67:13:2e:a0:03:dc:68:91:37:b7:
31:b8:51:7a:ef:8d:3c:bd:a5:04:45:25:5c:fc:26:
bb:d3:da:9d:58:62:57:0d:37:c2:0f:48:b8:61:0c:
1b:d1:bc:59:1d:09:31:95:33:49:02:ec:0f:28:b2:
ad:8f:5c:ca:8e:54:d3:7e:2e:d0:04:4d:64:f1:c5:
11:f5:06:97:ae:5d:3e:22:49:b7:40:42:1c:e1:a0:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C6:17:26:E2:0C:11:86:97:1F:33:EA:D6:55:67:DF:48:09:11:F2
X509v3 Authority Key Identifier:
keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:6b:d6:3e:12:65:f7:5f:3d:4c:11:d2:50:d5:7f:78:16:09:
54:d6:94:e3:99:fe:86:49:3d:4d:1d:57:42:d5:75:d0:44:c1:
7f:1a:cc:32:c0:fe:5e:64:31:40:00:54:52:83:f4:53:dc:eb:
18:3c:64:15:fb:64:77:96:60:36:ac:94:1e:44:68:c2:ed:7d:
45:38:a8:f9:ed:63:3f:17:06:01:d0:5e:ae:5b:30:69:4e:0f:
de:3c:67:59:e9:83:74:34:4f:ed:40:31:96:3f:94:4f:bf:54:
b0:c7:19:1c:5e:84:2c:ec:d5:11:40:10:75:88:6f:de:31:77:
d2:3d:42:5a:20:d5:29:79:54:21:42:86:5c:2a:9b:3f:21:4d:
cb:6c:c9:73:5f:2c:06:82:9b:9a:ac:96:ae:4d:e3:5e:f1:a0:
c1:9c:40:9c:0a:e9:bf:b2:d8:82:06:79:cd:7a:2f:fe:ea:8e:
eb:aa:5e:c1:a8:26:25:4b:e9:e0:cb:bd:e1:bc:63:a9:7a:1d:
82:3b:25:af:59:f3:fd:50:48:b0:0c:40:93:73:0e:b0:b7:99:
55:70:8c:b4:96:38:49:b0:91:69:de:df:62:af:d6:9a:02:50:
49:60:2f:87:44:ae:bd:17:53:70:0e:37:c0:d1:25:5d:6a:fe:
ee:9b:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client