
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier: yeawlutzXuTHiHI5ZZgB98ClxWCv9rgBkO2w67n+0E0=
Subject key identifier: 70:F8:96:5C:E9:5F:ED:46:74:8B:82:DD:68:6A:2C:C1:26:43:2C:61
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0F3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number: 0F18
Signing time: Thu 20 Aug 2026 17:35:16 +0000
Manifest this update: Thu 20 Aug 2026 17:35:16 +0000
Manifest next update: Thu 27 Aug 2026 17:35:16 +0000
Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: Aqz5/F6Yr+Qgjo0plSBhCIe3wsP3ifegbWqCOACALD0=)
2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
3: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
4: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3903 (0xf3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: Aug 20 17:35:16 2026 GMT
Not After : Aug 27 17:35:16 2026 GMT
Subject: CN=6a873ad4-034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:65:d4:0f:1d:3a:67:ea:80:c6:6b:34:3d:
44:2f:6d:10:6a:a4:5a:9b:66:28:10:28:8e:eb:9b:
00:ea:3d:ba:6f:62:52:8a:03:55:62:3b:7c:92:2d:
bb:87:36:37:4f:c1:fe:d2:d6:75:07:26:54:bd:ce:
2f:5d:30:1c:cd:54:c8:bd:c5:50:04:4e:61:ef:c1:
b9:3a:24:0b:3c:d2:68:53:af:36:cf:85:f7:e0:a0:
3a:93:73:9f:17:e8:b2:f2:f5:7e:51:20:b3:7e:8d:
b9:8f:2c:28:ad:af:e9:2a:7f:00:07:a7:2b:c1:8a:
03:ed:79:e0:c0:67:37:dd:f0:a8:0d:bc:88:32:a0:
0d:03:37:08:b0:4b:75:7d:2b:aa:17:2d:cd:88:06:
bb:03:0e:eb:fe:2c:a2:3b:73:9d:6e:56:f6:46:c3:
d2:8e:74:bc:ea:64:4e:f4:bf:a1:61:3c:36:a3:99:
a0:a7:13:d9:70:93:00:b1:02:71:a0:03:ca:ac:07:
2e:b4:54:42:09:e6:5b:dc:88:6c:a2:66:63:3f:68:
a3:69:0d:ab:fa:a8:3b:cb:c0:3a:ba:e8:df:62:76:
bd:e0:44:5c:2f:ea:4f:59:66:c8:1d:84:ef:23:bf:
19:a9:8c:7e:5b:32:39:22:4e:65:5b:71:0b:14:28:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:96:5C:E9:5F:ED:46:74:8B:82:DD:68:6A:2C:C1:26:43:2C:61
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b8:f3:12:78:a5:37:bc:63:1a:0e:b9:27:75:f6:b4:94:f2:
3e:c0:51:c6:b8:5e:34:23:9d:63:94:37:b3:13:ee:0b:84:1a:
94:5e:9c:26:d9:5d:07:d7:c0:75:e6:ba:50:d2:f5:da:37:21:
91:3c:f8:f4:b7:be:0e:eb:be:b8:1f:ea:5f:6c:cc:e5:23:d1:
02:5e:a8:1c:59:f1:9d:cb:af:ad:ac:78:9b:6e:3c:0a:09:30:
9f:79:07:7c:98:58:cd:fa:8e:dd:cf:9a:c2:7d:8c:7c:90:e1:
fe:47:1f:2c:b2:42:33:29:9c:da:dd:42:7d:5e:ba:a3:39:f5:
24:54:15:df:cc:4a:17:35:c7:31:f8:9f:12:72:d7:33:24:bb:
24:05:56:c2:3b:39:f3:a7:48:bb:2a:b2:3b:89:c9:50:03:ad:
c6:af:05:a7:b0:45:20:4a:f1:b2:54:74:38:84:80:07:bf:7e:
60:f1:7c:6e:e6:1b:7d:83:da:79:ce:41:3d:af:3e:67:5e:89:
bb:e9:b8:15:bc:0d:f3:a7:73:d9:14:35:27:4e:c1:69:81:34:
56:db:43:ff:2a:ee:6c:0e:f0:f7:6c:ea:00:1e:a0:90:2f:48:
8c:a7:0f:cb:c3:64:23:eb:2d:66:a8:8b:c6:12:69:64:3c:4c:
48:18:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 14:30:30 2026 by rpki-client