
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json)
Hash identifier: x9I+Mbc9+RNK40EGJRuZuONLR+RYhphSRPDUlTciYds=
Subject key identifier: 0F:2A:4F:38:F3:92:D9:61:F7:99:55:FB:C2:7C:A2:34:80:D2:20:CC
Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
Manifest number: 89
Signing time: Sun 05 Apr 2026 06:57:23 +0000
Manifest this update: Sun 05 Apr 2026 06:57:23 +0000
Manifest next update: Sun 12 Apr 2026 06:57:23 +0000
Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: RYTymJBsEV6KaNOOfTfjBbLfyX0iTiYtB53Gbp17xbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Validity
Not Before: Apr 5 06:57:23 2026 GMT
Not After : Apr 12 06:57:23 2026 GMT
Subject: CN=69d207d3-f96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:7e:68:37:22:81:15:4b:30:01:0b:db:87:
40:a9:f9:b8:eb:95:f9:ca:8e:b3:a2:86:4e:c4:ab:
26:01:52:c1:e4:7a:42:e4:44:9f:9a:d2:1c:98:b4:
0a:a7:f8:c8:45:cb:14:af:2b:14:a3:8f:f1:f6:a8:
05:e0:2d:6c:15:c6:26:76:f3:16:bd:a9:93:58:7f:
fb:b1:76:3e:cb:24:15:90:7d:95:15:38:e2:5d:a5:
d4:b3:7d:f2:4d:d3:37:60:6a:84:39:bf:6d:2d:f1:
4c:42:c5:5c:75:8a:d0:fa:19:2b:10:22:4d:72:1f:
d3:93:41:95:f9:73:5f:12:11:ea:76:83:32:81:e9:
80:ee:87:f2:3a:72:cd:e3:0a:99:5f:36:96:a4:af:
74:1b:5e:78:f3:c2:41:5c:5e:6c:96:9e:e1:bc:97:
5d:e5:af:77:5e:a8:b5:b3:5f:67:21:b5:c8:83:0b:
a3:1d:4d:0d:9f:46:5b:06:c6:ee:f0:91:43:4c:0b:
84:3d:0a:fb:0c:9e:b5:07:fc:bc:91:4a:a0:35:bf:
63:b0:42:fb:95:4d:da:36:cc:e8:cd:b8:c0:0d:a4:
f9:27:1f:91:ed:e5:b6:47:e6:d6:bd:82:16:52:5d:
5f:03:2d:3c:3b:6b:26:c6:83:dc:bf:3e:96:c9:01:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:4F:38:F3:92:D9:61:F7:99:55:FB:C2:7C:A2:34:80:D2:20:CC
X509v3 Authority Key Identifier:
keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:c7:fd:9a:15:0b:dd:5f:db:3a:8a:d4:5f:aa:72:78:bb:
ac:7e:01:50:e3:20:8f:9c:56:a8:7e:78:5f:6b:d7:c0:39:ff:
6a:04:4c:8a:5b:23:a9:b4:14:b5:98:f2:48:07:14:e5:c2:f9:
40:7d:4e:ee:7b:9e:66:bf:18:93:e9:7b:c2:31:84:73:ae:2d:
d9:23:2a:4e:ae:be:6d:32:40:f0:fb:05:ef:83:3f:3c:37:0b:
e2:8f:09:e1:f4:30:0a:be:c2:df:33:f1:6a:41:0b:6d:3c:6b:
59:2c:c2:06:fb:ae:6f:47:67:99:66:30:3b:bd:16:2b:6b:bd:
d7:25:be:ae:4f:32:5b:e1:2e:b0:61:51:e3:dd:d7:63:b1:5b:
21:eb:af:cb:75:aa:59:e2:8e:17:80:37:bc:35:60:9c:ca:26:
dd:6b:fd:bb:94:3e:0e:a5:44:15:f4:14:9a:6b:7a:93:6f:8b:
27:52:61:65:cc:88:43:ac:22:c9:d8:f9:cf:d9:d5:99:a2:ed:
a4:c7:34:44:dd:e3:bb:67:47:29:9f:20:2f:dc:b8:83:cb:15:
e3:0d:a8:6c:ca:30:d4:9e:78:b0:df:3d:22:2b:06:6a:60:2f:
2b:02:1c:98:18:c7:91:b4:c8:e5:27:b6:aa:18:23:d0:d8:43:
53:fe:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:04 2026 by rpki-client