
$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier: 0IUp2jXnH5ahCpdQXAEsNHw1yAvTFzRZVs1EgdrvqRI=
Subject key identifier: FF:F7:CA:AC:59:48:C0:75:76:11:C1:6E:59:B4:5A:84:99:9B:A9:13
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number: 0134
Signing time: Sat 21 Mar 2026 04:29:55 +0000
Manifest this update: Sat 21 Mar 2026 04:29:55 +0000
Manifest next update: Sat 28 Mar 2026 04:29:55 +0000
Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: K4d0cKQvqAqvEyxSxH2+whH71Ssij1fFjiFQMbCppa8=)
2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: pnNvJ0QcGVavN6ejXIRyXtFdc94Af5xYSFGkl4Uy/KA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Validity
Not Before: Mar 21 04:29:55 2026 GMT
Not After : Mar 28 04:29:55 2026 GMT
Subject: CN=69be1ec3-d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:01:8c:9c:af:11:c2:98:f8:85:c3:7c:bd:
7d:be:3a:c9:8f:b0:76:26:03:37:6e:c1:f7:2c:d6:
68:cc:b1:7d:a0:c1:cc:6b:7c:85:26:3e:67:ef:4f:
a0:c0:fb:15:59:59:db:4f:8b:fc:c3:4e:aa:ab:74:
59:ed:a4:97:14:e5:d8:b5:ed:05:55:c9:98:ff:0b:
b6:6c:0a:c1:82:22:cd:d0:6a:d3:ce:90:ec:c9:6f:
16:89:a6:9b:2c:97:c3:07:97:2c:88:a9:03:b1:e0:
52:c2:26:8c:18:a1:a3:64:7b:a9:69:c4:44:53:19:
5a:0f:a5:50:ef:4e:71:8b:9a:6d:73:55:87:1d:21:
e3:53:15:53:09:29:bd:c8:e9:fb:3a:3a:23:40:ea:
28:6d:0b:05:38:e4:94:48:51:59:af:c0:4f:b0:49:
00:c2:f2:08:c3:4c:c2:e6:3a:ef:01:66:9a:1e:d8:
1c:6d:6d:91:f6:68:55:5c:43:72:35:e6:f4:a0:de:
2e:cb:15:52:1e:c7:83:c2:13:2a:23:84:84:f2:9a:
b0:b7:92:0a:0b:6e:9b:0c:ab:52:ed:03:1a:94:bb:
c1:7f:62:46:0c:4e:7b:9b:c6:51:d5:c9:82:fa:55:
c1:d0:12:ad:66:9a:ba:4b:85:e0:42:36:9f:a7:f0:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:CA:AC:59:48:C0:75:76:11:C1:6E:59:B4:5A:84:99:9B:A9:13
X509v3 Authority Key Identifier:
keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:de:17:c4:a5:03:90:b6:4b:81:05:fb:81:62:8d:a6:0f:e5:
63:02:dd:a2:e0:57:6b:e7:99:cf:7f:97:88:78:f0:fb:e0:7f:
da:d3:16:8a:7f:60:77:30:24:c4:85:46:46:c8:a1:90:7a:d3:
fb:3e:0f:cd:6e:07:a0:8e:aa:bb:13:b6:5f:24:0c:76:04:0f:
46:46:66:e3:f1:37:57:b0:9f:7b:9f:6f:ef:27:de:54:e5:19:
d0:b2:14:62:8d:9f:cb:2e:91:a0:50:15:c6:73:c3:98:e5:12:
7e:3b:24:07:81:1a:47:6b:2c:99:d9:d3:6c:d1:41:e9:d9:7e:
23:57:61:a6:1d:cc:4f:3c:0d:ee:d2:ed:64:cf:a6:14:56:e8:
81:4a:a0:2f:95:d7:e7:93:76:29:88:dc:82:91:e3:fe:f4:7a:
73:48:d4:00:fe:a8:a8:71:65:18:b2:6f:14:1e:15:55:47:26:
58:ef:ac:e9:03:d3:4c:4c:88:7c:5d:ce:3b:8a:23:21:0e:13:
95:0f:34:e3:d7:5b:49:69:e9:5a:c1:d1:92:7b:c0:ca:b4:56:
74:4d:75:80:97:1b:f6:42:3b:f4:66:ec:2b:76:2d:77:89:1e:
22:a3:2f:f3:41:66:2f:ac:83:9f:ad:9e:44:50:79:0e:d5:4d:
a6:72:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:48:11 2026 by rpki-client