
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json)
Hash identifier: cyFoRZFdcC0VzZUcByCAsldge29+Us1FwNJEKok+H0I=
Subject key identifier: A8:00:FA:A5:01:A2:53:C9:25:09:57:7D:37:96:B8:11:88:F8:26:1F
Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Certificate serial: 0937
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
Manifest number: 1906
Signing time: Wed 22 Jul 2026 17:38:20 +0000
Manifest this update: Wed 22 Jul 2026 17:38:19 +0000
Manifest next update: Wed 29 Jul 2026 17:38:19 +0000
Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: 1leoXMkRRiII0Fp1YA3H+AkEbi6dZxp+IAXZ2YnfZwI=)
2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: EK9kVyzeiWqOhwcTpeNVZN6VNsEzUxGtWn7Dne/n1iA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE
Validity
Not Before: Jul 22 17:38:19 2026 GMT
Not After : Jul 29 17:38:19 2026 GMT
Subject: CN=6a61000c-9c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bd:89:18:b6:59:24:ef:01:6e:ec:4d:e3:9d:
a8:35:3f:33:bd:0a:a9:57:44:e3:27:23:81:17:66:
27:74:aa:6e:04:8e:4b:e0:4b:46:2e:bd:44:95:80:
35:e3:1f:96:4e:a8:61:8f:83:3f:44:8d:91:c4:db:
22:6e:d6:65:08:e0:84:3c:1d:ef:fb:0a:85:a5:5e:
53:ae:57:38:fb:59:78:33:48:4d:21:99:2c:f3:7b:
e3:42:90:2e:34:e1:a4:c6:3a:d1:87:a8:95:ec:04:
eb:a6:fd:f7:90:ac:93:b8:ee:a1:2d:ce:fd:92:43:
7a:21:10:50:b3:d9:91:63:97:57:08:f9:d2:12:39:
9c:54:a2:52:f6:c9:ad:d6:ca:35:c2:cc:4c:df:fa:
42:06:55:7d:84:b0:e3:62:24:1c:c4:4d:95:8c:92:
eb:5f:e2:8e:72:c9:23:59:2e:5a:f8:0b:e9:73:2c:
0e:d5:1a:ed:ea:ca:ce:e4:2a:89:b4:43:53:46:c2:
b5:2a:ff:14:79:e4:60:03:3e:e9:60:d0:67:88:18:
10:a1:25:b3:a5:c9:ca:2b:61:1a:71:b0:24:7a:78:
38:6f:63:ec:21:2e:88:2b:ad:9a:69:a8:df:ab:be:
8d:97:1b:c3:10:34:22:9c:ef:ee:b6:c6:2d:9b:83:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:FA:A5:01:A2:53:C9:25:09:57:7D:37:96:B8:11:88:F8:26:1F
X509v3 Authority Key Identifier:
keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:48:35:8f:aa:ee:d5:60:dd:4b:0b:ea:6a:bf:87:31:9f:
2d:97:11:9b:21:c0:2c:b5:76:d8:24:bc:59:18:33:f7:02:8d:
0c:56:ad:46:d7:64:e2:1a:0f:55:03:c1:25:0b:92:97:2a:e0:
b6:06:79:9e:dc:02:81:fe:35:43:ac:a6:f2:de:33:d9:fe:93:
ed:3d:ea:b8:3a:5c:1e:7d:b6:89:e1:e4:8e:4a:85:f8:21:bf:
1d:1e:b9:3f:6f:5e:c9:07:81:64:9f:4d:8f:5d:c1:c0:f4:d3:
43:ec:5e:3e:5d:c7:f7:cf:a7:35:78:3f:cd:a4:e8:89:2a:17:
73:63:60:e4:6e:ad:4f:b2:60:b8:f7:91:82:3e:3f:25:da:8e:
6e:cf:ea:ad:9c:a3:ff:b1:6e:d0:1d:c8:55:8a:9c:03:28:90:
58:66:72:7a:a8:91:40:8f:40:fb:57:88:8d:e9:2d:ef:31:db:
ed:41:03:8d:a1:d6:4b:1c:7d:e0:55:ab:14:b1:80:3d:e8:4e:
9c:7e:af:db:42:70:e0:1f:5e:97:df:d8:4f:48:43:70:30:6b:
6d:c3:f5:cc:e5:f1:b7:88:97:48:ac:fc:4c:95:59:24:90:8e:
9a:ea:2f:c2:99:b4:ab:a7:01:a8:51:ff:3e:a0:ba:6b:39:85:
76:12:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:09 2026 by rpki-client