
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json)
Hash identifier: G7+PI/y7i/3X9ptnuOZcyOlOYhOFWxo63J346Dydim8=
Subject key identifier: 6D:55:D6:25:7A:DA:03:C4:CF:86:8C:D7:82:7C:B5:F0:33:5D:BD:D2
Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
Manifest number: 09AF
Signing time: Fri 02 Oct 2026 20:41:43 +0000
Manifest this update: Fri 02 Oct 2026 20:41:43 +0000
Manifest next update: Fri 09 Oct 2026 20:41:43 +0000
Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: q7AE+kRPq25Vdnwssm+EVGUsa6y0UGPfu7wJh6Jckws=)
2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: jIvecyaNUKHM1Z6so6WtYRHY+CV5901LNEJc6GLn6Zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Validity
Not Before: Oct 2 20:41:43 2026 GMT
Not After : Oct 9 20:41:43 2026 GMT
Subject: CN=6ac01707-12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ad:37:ae:52:3b:ee:f9:79:a6:5e:f8:60:4e:
9f:40:d5:28:a0:de:b9:56:75:d7:e4:6d:df:b3:00:
40:7d:40:a6:da:34:83:6a:9f:96:9b:d8:35:99:f9:
33:72:07:56:c4:77:b2:1b:ce:73:2c:8e:52:0b:23:
8c:35:ca:93:36:8d:16:8a:a1:fd:be:ce:cf:3a:cf:
34:41:61:65:46:d0:e7:68:1b:9c:8f:10:ea:5e:88:
79:e1:da:67:a6:82:69:fb:42:ed:25:a3:b4:90:4f:
29:96:de:e3:a6:a1:7b:82:9a:07:7b:fa:a8:87:80:
ae:5b:f6:0e:c8:74:ff:36:28:26:52:15:97:f1:7d:
d7:40:f9:a6:a9:14:6d:f7:3c:34:c8:30:2a:3a:57:
02:4f:68:0a:af:00:50:1d:67:28:1a:44:e4:d3:1a:
1a:ed:6f:8b:65:e0:25:94:02:8c:33:60:1a:c8:84:
71:14:f3:05:65:2f:24:e1:23:79:dd:4c:f4:8a:c1:
fb:bf:06:c6:9d:7b:6d:7c:f2:20:50:09:af:01:14:
56:6f:d0:af:45:be:c4:23:ad:63:93:8c:4b:b6:9c:
91:bb:7e:5d:04:3e:68:16:0f:c4:70:c9:e9:97:89:
81:e3:af:11:2b:71:58:8f:96:18:31:a6:9a:c9:63:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:D6:25:7A:DA:03:C4:CF:86:8C:D7:82:7C:B5:F0:33:5D:BD:D2
X509v3 Authority Key Identifier:
keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:41:d0:20:d4:57:3c:46:98:74:b6:52:6f:8c:f9:23:30:f1:
da:6e:49:3d:03:f0:0e:c0:a1:01:76:90:38:e4:b9:88:ee:1c:
b6:75:2f:4c:a1:cb:09:d4:f6:a1:ca:e5:0c:d1:2f:21:1d:fd:
6b:2e:0b:25:f7:e5:50:ec:00:09:9a:80:6d:0c:5d:22:96:f7:
ca:ef:62:82:86:21:63:98:00:b1:19:9f:55:be:a3:6c:82:f2:
32:58:0b:79:d7:2c:73:47:b7:84:ac:67:d1:03:4c:ca:81:d7:
00:98:a9:b5:c0:9e:ab:a9:ad:c5:87:8f:48:de:33:1d:99:af:
5a:1c:3a:57:78:60:86:e0:2d:34:bc:8a:f4:c7:83:a1:72:5e:
a0:38:90:7e:bf:37:24:18:a7:e5:00:f3:1a:9f:54:a1:4f:13:
fd:2f:05:6c:10:f5:a8:ed:5c:5a:97:a7:98:1a:a7:ba:d7:df:
56:82:bc:13:3c:a9:6b:b8:62:d5:41:ac:01:6a:01:a0:9a:11:
54:66:d4:c8:b1:3c:ec:fd:0d:77:bb:80:f4:23:f6:a7:f4:e1:
a6:46:20:87:17:c7:a1:48:16:91:0c:8d:d9:0d:71:a9:d9:cc:
d3:a2:25:00:46:31:ad:f7:56:6b:9e:a8:82:8c:56:4c:af:be:
72:e1:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:50 2026 by rpki-client