
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json)
Hash identifier: 3xHUtOnFiR7B8hhyo6JlpoSQubDqfbLHKtTo45GtsGA=
Subject key identifier: AB:67:6C:28:09:2F:15:C5:A1:3D:F7:B7:DA:8C:77:C9:43:AA:D3:BB
Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Certificate serial: 355C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
Manifest number: 355C
Signing time: Wed 22 Jul 2026 15:11:11 +0000
Manifest this update: Wed 22 Jul 2026 15:11:10 +0000
Manifest next update: Wed 29 Jul 2026 15:11:10 +0000
Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: 9gtkL7zvAnivIwzQ1DUsYkxKW/7Tjt1mBuw/J6kcnDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13660 (0x355c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Validity
Not Before: Jul 22 15:11:10 2026 GMT
Not After : Jul 29 15:11:10 2026 GMT
Subject: CN=6a60dd8e-d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:27:1b:1a:c7:15:69:d9:82:95:63:a0:47:
09:58:02:3a:af:19:9c:1b:d9:00:74:fd:5c:3d:d1:
0d:ef:c9:64:98:4e:34:c9:00:57:c5:6a:d1:28:f0:
6e:73:fc:20:6d:10:8a:2a:59:be:f5:b3:b9:50:b6:
aa:33:e3:83:8c:91:af:a7:b2:2f:58:a2:28:be:23:
a7:bb:a9:86:3b:1c:0b:af:9a:5b:e4:95:66:9c:a6:
0e:53:50:16:e4:15:44:f6:ec:08:72:d2:4d:62:33:
11:cb:cc:76:a7:e4:8e:27:f7:2b:46:49:d6:3f:2e:
c6:0c:87:38:43:ca:d8:dd:f3:ac:0b:3f:96:e1:ea:
e9:95:39:ff:60:39:7d:de:8b:0a:f8:84:a5:62:60:
1b:5e:36:34:7f:f0:d3:6f:8d:88:19:0c:3a:ed:b9:
d9:5c:cb:4e:96:ea:5b:36:91:e9:3e:9f:fc:3f:a4:
ed:c2:8d:08:df:55:6d:b7:2f:88:1c:6d:3b:fd:86:
cf:f4:db:d9:3c:d5:8a:58:1a:98:18:b2:2b:a8:3c:
ea:ac:6f:51:88:ef:d6:97:f0:77:e9:d2:6e:2d:3c:
b6:e9:09:06:7b:7b:8f:a0:e1:c8:4d:01:b9:a2:34:
af:78:cc:db:c2:0c:9d:0b:0f:75:63:8a:29:aa:88:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:67:6C:28:09:2F:15:C5:A1:3D:F7:B7:DA:8C:77:C9:43:AA:D3:BB
X509v3 Authority Key Identifier:
keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:a4:4d:b7:00:00:bc:bb:1a:34:2d:79:98:22:41:9c:89:2c:
32:c1:43:1c:39:9b:ee:ef:93:0d:05:43:60:b0:6b:eb:c2:64:
27:0b:1f:e7:ad:d0:db:79:75:06:56:97:61:6e:78:6e:df:3c:
bc:e4:c2:42:f4:ab:8a:d9:71:77:a0:f8:86:9c:9c:d7:74:e4:
cb:c9:73:d1:bf:44:a1:ce:e1:ba:1e:ae:92:c0:64:df:c8:d5:
26:5f:5f:5b:16:21:8c:e9:c4:1b:2a:ff:a6:d1:c6:10:16:cb:
e9:85:7b:60:17:cc:01:a9:00:41:09:77:9b:fe:99:d6:98:6f:
1c:f9:95:b3:2f:0e:f7:46:04:81:bd:b1:ab:e9:90:5b:21:ba:
63:af:6f:f2:f3:67:29:c3:8e:c3:5e:bc:05:16:f3:da:24:51:
ab:b9:0c:99:73:f5:b3:3a:90:eb:7f:e1:9f:70:a3:55:ac:01:
45:17:b5:53:8c:6c:0c:84:d6:8a:e1:ca:19:e9:69:f3:5c:71:
9e:50:6d:ef:28:5f:75:df:93:26:b5:90:21:d1:94:e3:c1:9f:
4c:a3:ba:58:30:98:fb:82:62:e3:79:c7:e8:22:f5:48:f3:d1:
ee:61:80:4e:be:fb:42:59:aa:80:31:63:c9:0c:e0:85:68:9e:
d3:c9:d0:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0
MzQ1NTM3M0IwHhcNMjYwNzIyMTUxMTEwWhcNMjYwNzI5MTUxMTEwWjAYMRYwFAYD
VQQDEw02YTYwZGQ4ZS1kMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkkAnGxrHFWnZgpVjoEcJWAI6rxmcG9kAdP1cPdEN78lkmE40yQBXxWrRKPBu
c/wgbRCKKlm+9bO5ULaqM+ODjJGvp7IvWKIoviOnu6mGOxwLr5pb5JVmnKYOU1AW
5BVE9uwIctJNYjMRy8x2p+SOJ/crRknWPy7GDIc4Q8rY3fOsCz+W4erplTn/YDl9
3osK+ISlYmAbXjY0f/DTb42IGQw67bnZXMtOlupbNpHpPp/8P6Ttwo0I31Vtty+I
HG07/YbP9NvZPNWKWBqYGLIrqDzqrG9RiO/Wl/B36dJuLTy26QkGe3uPoOHITQG5
ojSveMzbwgydCw91Y4opqoh/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtnbCgJ
LxXFoT33t9qMd8lDqtO7MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE
QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu
S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJKRNtwAAvLsaNC15mCJBnIksMsFDHDmb7u+TDQVDYLBr68JkJwsf563Q23l1
BlaXYW54bt88vOTCQvSritlxd6D4hpyc13Tky8lz0b9Eoc7huh6uksBk38jVJl9f
WxYhjOnEGyr/ptHGEBbL6YV7YBfMAakAQQl3m/6Z1phvHPmVsy8O90YEgb2xq+mQ
WyG6Y69v8vNnKcOOw168BRbz2iRRq7kMmXP1szqQ63/hn3CjVawBRRe1U4xsDITW
iuHKGelp81xxnlBt7yhfdd+TJrWQIdGU48GfTKO6WDCY+4Ji43nH6CL1SPPR7mGA
Tr77QlmqgDFjyQzghWie08nQcA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:10 2026 by rpki-client