
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: j8ynBrAxCZMNXjaDPQrRXwP8e5blTIqsg+r9XOyc1sg=
Subject key identifier: F2:8C:27:7B:5F:D5:E4:1E:41:76:A6:73:18:62:2E:A9:11:D4:7E:61
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: 01E7
Signing time: Wed 22 Jul 2026 23:38:12 +0000
Manifest this update: Wed 22 Jul 2026 23:38:12 +0000
Manifest next update: Wed 29 Jul 2026 23:38:12 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: fv8DpxBt92ORkHg10sHy+iXTMtDExjgFrlWW+SPSbB4=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Validity
Not Before: Jul 22 23:38:12 2026 GMT
Not After : Jul 29 23:38:12 2026 GMT
Subject: CN=6a615464-fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:b4:b3:6b:dc:34:f2:53:6a:ab:17:37:94:
ab:af:e1:ef:52:ec:c1:66:56:04:d2:ba:b2:85:24:
fb:02:a4:d1:97:17:64:8d:04:78:9c:8e:27:9e:01:
90:e5:84:cd:ca:52:2d:8f:09:20:2d:36:10:78:14:
e2:57:ee:ef:4c:db:8a:88:f6:ea:70:9e:7f:78:4e:
d6:e6:01:b7:09:72:2b:6f:7e:7e:f7:9d:eb:9b:a2:
0e:7e:97:6e:58:cf:fc:d5:af:58:46:59:9a:79:f3:
8a:28:0e:63:b4:c8:e2:6c:0a:24:34:9f:2a:a1:5e:
88:d1:95:18:41:1b:c6:b0:5b:b0:d2:c4:9d:04:bd:
24:0f:44:85:7a:20:12:e6:82:31:e9:6d:c5:a1:09:
5a:0b:6b:8b:93:fa:df:e8:17:5a:ca:fa:ca:73:1d:
c8:8b:0f:84:6b:72:b1:ba:10:a5:5f:ea:91:5b:dd:
e5:b0:11:81:9a:25:04:8a:f3:f2:b8:d6:5d:be:94:
9c:82:68:c0:e8:0a:99:47:66:f9:56:96:5b:ca:82:
42:2b:a5:a3:e5:e2:de:16:42:63:bf:47:29:2b:84:
18:22:70:a1:69:cb:cb:86:0e:42:4e:5b:63:89:db:
d2:21:fd:46:21:5d:b5:b9:db:67:41:f0:21:de:55:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:27:7B:5F:D5:E4:1E:41:76:A6:73:18:62:2E:A9:11:D4:7E:61
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:4e:4c:bf:a7:ee:24:de:f7:f9:3b:96:1b:7e:ea:65:64:87:
cd:03:14:fa:3e:97:cf:08:a3:c4:4a:15:12:a3:15:59:ed:c8:
1c:7f:51:10:8c:1b:c6:26:d6:98:ac:21:3b:7c:06:14:fd:05:
b6:ab:bb:0a:ce:e1:a9:e7:b2:e4:62:35:d5:db:05:ad:95:92:
89:7b:ee:73:52:c8:e0:c1:57:1f:82:4a:7d:17:98:86:0e:5e:
83:c3:13:7d:4b:d9:0e:79:00:a3:09:c6:2b:a2:71:12:46:77:
ba:28:52:bb:81:b3:f7:79:54:29:1e:03:15:94:e7:d1:fe:02:
e8:af:c4:04:65:9f:3b:30:2a:90:b4:20:90:21:82:01:7b:57:
45:13:38:99:34:c8:6d:b4:cb:88:d9:b2:25:2d:58:4c:04:72:
62:9d:46:4b:43:90:42:5f:b1:e3:0b:66:76:08:f0:48:88:a2:
56:64:7a:15:fa:c4:c7:2d:c7:db:dc:43:c4:8a:50:5d:05:19:
92:53:0d:2e:d6:87:f8:b4:18:29:14:4b:09:4a:44:d1:e1:fc:
f3:3e:59:b7:05:1c:7d:c5:75:42:e6:f2:e0:ae:19:b9:4d:2f:
70:fd:44:cc:7e:e6:db:05:e5:22:fc:a9:18:ad:ad:1b:b0:87:
b0:31:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:21 2026 by rpki-client