
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
File: b0XbXSi7uaZT-C0c94J6WYN2RfM.mft (raw, json)
Hash identifier: 4VagIdMhkGaQdeeu2wZe8wx4bxPVfOjEV98hUt9y6Tk=
Subject key identifier: 38:45:D9:AB:92:F2:93:D2:54:EE:C4:4F:F5:CB:90:13:8C:47:2A:2D
Authority key identifier: 6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
Certificate issuer: /CN=A9159309/serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Certificate serial: CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
Manifest number: CE
Signing time: Wed 19 Aug 2026 07:27:18 +0000
Manifest this update: Wed 19 Aug 2026 07:27:18 +0000
Manifest next update: Wed 26 Aug 2026 07:27:18 +0000
Files and hashes: 1: b0XbXSi7uaZT-C0c94J6WYN2RfM.crl (hash: oxdGICbG08JZYnInuZyOp9eHIk6JNo3Tzo6yUp74d+c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159309, serialNumber=6F45DB5D28BBB9A653F82D1CF7827A59837645F3
Validity
Not Before: Aug 19 07:27:18 2026 GMT
Not After : Aug 26 07:27:18 2026 GMT
Subject: CN=6a855ad6-faa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:82:1c:03:f4:cc:d7:4b:cf:6d:fe:5e:99:
a4:85:1c:94:b5:dc:bd:82:83:0b:b2:39:03:eb:83:
93:97:b9:8b:67:91:7b:50:26:d1:6f:28:e3:0f:56:
11:d7:84:4f:5b:a4:63:c1:14:60:ab:fe:39:e9:06:
d2:0b:dc:56:65:82:91:6b:a9:af:52:fe:c0:6c:44:
45:0a:8e:8a:88:31:6c:a4:ef:26:63:cb:07:5f:62:
14:f3:7d:cc:5d:2f:36:71:99:ad:c6:b8:49:a2:c9:
6b:e8:64:68:58:7f:14:5a:b8:d3:eb:72:e3:6d:e9:
a1:c4:f2:7a:cc:e0:6b:9d:9c:a8:e8:39:79:6a:64:
42:13:51:23:8b:e7:d1:89:7f:ea:8f:f9:02:9e:f8:
35:dd:fb:b1:5a:5f:c9:cf:5c:1c:3b:95:5c:a5:57:
a2:25:6a:85:c9:8b:62:7b:68:8e:8e:d3:b1:83:ab:
ce:3b:e7:2c:46:2e:1a:be:0b:cd:47:4a:73:1e:5b:
60:95:f2:cc:3b:90:29:24:1f:50:dd:fe:6e:cc:ab:
6a:f2:3d:42:1d:94:fc:d2:8b:a6:28:b2:84:ec:72:
85:8e:ac:5f:69:01:63:82:c3:8a:9f:2f:04:cc:2e:
96:28:b9:88:d0:4f:d4:e8:c7:98:d8:03:dd:d3:13:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:D9:AB:92:F2:93:D2:54:EE:C4:4F:F5:CB:90:13:8C:47:2A:2D
X509v3 Authority Key Identifier:
keyid:6F:45:DB:5D:28:BB:B9:A6:53:F8:2D:1C:F7:82:7A:59:83:76:45:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b0XbXSi7uaZT-C0c94J6WYN2RfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/A27B8BFC613D11F0B036B836C4F9AE02/b0XbXSi7uaZT-C0c94J6WYN2RfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2f:6c:40:d6:2c:a3:8d:61:9f:d7:a9:61:23:ee:eb:3e:eb:
4c:6a:9b:05:35:07:90:22:c8:af:ff:ac:53:5e:4f:9f:fd:93:
c4:9f:6f:ff:a8:59:54:0e:a5:20:2b:35:b9:75:89:d5:50:be:
e2:61:cc:05:f6:a5:43:fd:31:a9:2b:0f:3a:8b:54:e8:4c:a7:
5b:c1:c4:0a:7e:dd:b7:b3:fc:10:2d:33:0c:12:1b:00:fd:34:
10:98:c3:be:92:2f:fa:22:20:71:0e:ca:a3:db:99:b7:ab:28:
13:10:3d:3b:c1:fe:68:e0:9f:8f:92:39:78:1e:1e:34:9a:04:
eb:a3:e5:3a:2c:81:b1:a7:4e:9c:28:98:7f:1d:49:dc:1b:0f:
bd:7c:d0:b6:75:02:5d:af:63:78:9a:96:5a:bf:73:8c:7f:c7:
97:45:ec:ef:bf:04:f4:62:3b:fa:53:35:48:9a:6e:7a:90:7d:
f1:2a:30:a3:0f:2c:f8:2c:24:12:6c:b3:61:f9:96:21:0c:60:
9b:c1:df:81:db:b4:f8:9a:2d:f2:d6:3b:7a:4d:15:71:6c:0f:
7a:26:f0:46:ba:a6:ca:d6:6f:21:4f:f1:42:37:c0:37:ad:ff:
27:97:e2:3a:e7:34:5c:29:6c:02:26:d9:57:49:cc:d5:cb:16:
36:62:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:19 2026 by rpki-client