
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
File: rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json)
Hash identifier: y/wF0TSpBZM/V3SFOeKNbUlaCpSUjerOqrKdYRbW34I=
Subject key identifier: 1B:4F:C0:6C:3A:5F:B7:1B:E1:E7:E6:C9:9A:FD:DA:3D:2D:80:FF:D7
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Certificate issuer: /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
Manifest number: 0D
Signing time: Tue 03 Mar 2026 08:47:45 +0000
Manifest this update: Tue 03 Mar 2026 08:47:45 +0000
Manifest next update: Tue 10 Mar 2026 08:47:45 +0000
Files and hashes: 1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: kjE2loExPvkTOKAu8d87orbRIytOUJlL2EGz/dHFeUE=)
2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Validity
Not Before: Mar 3 08:47:45 2026 GMT
Not After : Mar 10 08:47:45 2026 GMT
Subject: CN=69a6a031-1001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:10:78:bf:46:7c:20:8c:ca:ee:02:36:ee:
ca:98:53:18:89:1b:95:cc:89:74:ef:23:be:62:08:
d2:9c:ea:c5:8b:2c:80:27:b2:2a:c8:1b:03:de:07:
8e:c9:87:7a:b3:41:6f:ce:69:72:31:03:ee:32:6e:
d0:c0:38:d7:60:c0:40:14:c7:16:3b:25:f3:a7:92:
d4:88:e9:45:0f:49:14:25:b4:bc:b9:c1:a2:5d:3e:
3f:80:b9:24:86:85:73:62:ee:fb:07:ae:f3:e7:c7:
06:71:ae:bb:e2:76:70:a5:e2:71:fb:4a:1a:91:43:
f6:3a:34:08:02:a9:ab:e1:1d:5a:49:90:4d:31:42:
a9:26:47:87:98:99:2d:fd:77:b7:9b:fd:ae:68:19:
a7:5f:64:28:53:0c:74:d4:c6:51:45:b4:b9:b7:27:
82:c2:00:ab:3f:54:4a:22:6a:ee:db:60:24:13:a6:
f5:a1:38:47:d4:00:7f:f7:51:6e:a2:77:5d:34:81:
e3:19:27:34:1c:79:1f:c6:6c:ba:0a:11:ee:24:0a:
39:a1:11:5f:bb:fa:16:0c:c6:29:c6:c9:a3:5d:19:
58:cf:88:c2:1c:1e:8e:4b:3c:62:b8:ab:e5:b1:c1:
a9:b2:69:03:dd:52:82:9b:8f:e4:91:66:9a:1d:85:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:C0:6C:3A:5F:B7:1B:E1:E7:E6:C9:9A:FD:DA:3D:2D:80:FF:D7
X509v3 Authority Key Identifier:
keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:1c:8b:23:5a:8b:19:ed:ba:ea:a4:17:e3:cf:9c:42:e0:
18:b3:a5:04:81:79:f2:20:9a:ac:54:e7:70:ab:85:af:6c:fc:
53:4c:f3:53:7f:94:f7:06:d9:a0:3f:a2:16:20:39:99:29:3b:
f0:0c:60:9c:d3:9b:69:77:46:d5:44:de:2a:30:80:f3:10:3a:
03:2d:a8:96:3e:eb:54:41:e3:00:53:f5:dc:9d:a1:2e:b8:0b:
41:57:fc:2d:5d:b4:52:94:a8:b2:f3:aa:41:da:ee:46:7f:d9:
64:a2:7d:5b:5f:c8:08:39:df:65:62:8e:f0:17:a0:8e:06:f6:
9a:12:e0:cb:60:3c:c0:a7:c2:78:4e:a2:71:30:e5:f7:2b:c3:
41:af:23:d2:f8:95:23:67:37:65:30:f3:58:df:b8:04:2e:35:
b2:69:64:17:58:ab:51:1f:ad:52:76:a0:28:38:8e:93:dc:d0:
20:64:d3:dd:ba:14:a3:6c:5c:73:b8:73:7f:fa:56:f5:f0:3c:
19:8d:f0:45:f4:57:11:b5:3d:f4:af:76:ee:4b:76:ed:5b:04:
18:dd:2a:da:96:18:37:76:d5:01:6b:56:96:1e:c1:05:d0:ed:
43:07:7f:79:af:56:af:ed:74:7d:8c:8c:19:c7:57:a1:83:75:
01:1b:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:16:35 2026 by rpki-client