
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File: xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier: c/Xd2guolrlhbzOoAGBGhAQkwqP9/wVyazoNvYDS57E=
Subject key identifier: FA:8F:67:A6:19:01:51:C9:4E:DB:F3:6E:54:48:F9:A0:BF:80:E0:83
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer: /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number: 44
Signing time: Sun 05 Apr 2026 07:45:27 +0000
Manifest this update: Sun 05 Apr 2026 07:45:27 +0000
Manifest next update: Sun 12 Apr 2026 07:45:27 +0000
Files and hashes: 1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: OXRXs+E/Ip8+ewp4Q2k7Eylo1+1R6DRuEhjURxDi4Lg=)
2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Validity
Not Before: Apr 5 07:45:27 2026 GMT
Not After : Apr 12 07:45:27 2026 GMT
Subject: CN=69d21317-62ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:c5:05:8b:07:6e:0c:ac:33:a1:ea:21:88:
e7:74:ec:17:51:02:96:1d:2e:e0:f5:fe:54:f8:89:
8d:fc:6b:fc:5e:1a:39:f4:9c:aa:4d:fd:d5:37:8f:
c4:69:33:59:fb:11:e5:da:06:e6:52:03:cf:d6:6d:
ac:7e:be:ac:d8:08:b6:46:1e:a0:89:47:d3:46:6f:
80:76:0c:7f:56:fb:ee:0d:57:a7:d2:7b:ea:e6:49:
01:50:fa:2f:37:8c:17:e7:66:d8:8f:99:5a:df:1f:
35:dc:d7:f6:7a:7a:dd:bb:0b:bb:cc:5b:a2:32:e3:
de:43:b9:e6:01:71:62:f6:c5:67:dd:7a:43:44:a0:
7a:92:2e:48:a4:4d:b3:9f:9c:4b:eb:41:ea:51:51:
cc:6c:01:b4:85:3a:80:6d:29:b8:0d:51:a8:ae:64:
8a:af:8f:23:e5:68:d4:e0:4d:12:cf:8d:b5:cd:c7:
67:f1:b0:fc:03:7c:b2:d8:78:ab:c0:96:89:5c:7a:
db:34:9c:c7:78:f0:ab:b6:0e:c2:fe:ff:67:eb:f9:
f0:18:29:68:1a:db:8c:3e:22:cc:d3:c6:99:63:fe:
a0:db:8e:55:86:76:a9:09:c3:4d:a5:7f:f1:b9:c3:
48:32:ee:c5:5a:df:cc:cd:28:16:39:66:60:b4:7b:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:67:A6:19:01:51:C9:4E:DB:F3:6E:54:48:F9:A0:BF:80:E0:83
X509v3 Authority Key Identifier:
keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:77:4c:f8:1b:80:26:cc:af:a3:ba:98:ee:ff:4d:51:4c:83:
df:b0:69:19:b2:c8:e4:ce:66:aa:b6:1c:65:3e:ae:d8:32:c0:
99:1a:70:d7:54:12:9f:da:ad:98:e5:55:30:99:89:a2:a3:da:
41:4e:45:91:65:9e:7d:b9:1e:c4:88:c0:44:d9:8e:1e:34:70:
ab:4a:ab:f8:ff:a7:d2:da:6e:52:ac:06:3f:2b:5c:89:5e:3f:
a9:f1:bc:68:9b:49:7d:ce:bb:28:4e:59:20:3e:1a:17:48:58:
9d:fd:82:75:02:68:61:30:1a:19:25:67:11:40:b7:81:09:d5:
97:c9:f3:34:8a:05:27:28:d1:15:ba:c7:26:7a:13:23:62:fd:
48:dc:00:e4:68:5c:e5:79:02:20:27:57:dc:ac:52:09:ad:b4:
25:6b:04:b8:ef:8d:e0:13:b0:b4:24:a5:25:5e:68:09:8c:88:
d8:a4:4b:08:66:92:c9:cf:09:74:5b:a8:2d:ed:fe:38:83:f4:
b1:6e:ec:e0:d4:a0:f5:15:1f:3d:ca:db:31:fe:0f:2a:2f:e5:
4b:83:95:4a:ed:7b:de:2f:c2:e2:b7:79:70:8d:b6:5d:62:6b:
bb:ae:fd:bb:83:7e:73:07:49:87:95:f0:8c:77:28:7e:c5:05:
db:a8:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:02 2026 by rpki-client