
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier: Pp/+nkpIbjAUU1061Me8kQ47H5bE+9er5NHXhQtknKo=
Subject key identifier: A4:78:A3:8B:2A:2F:16:EC:03:AD:40:DF:8D:18:B9:EE:63:7C:5F:45
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial: 062C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number: 0625
Signing time: Sun 20 Sep 2026 22:38:09 +0000
Manifest this update: Sun 20 Sep 2026 22:38:08 +0000
Manifest next update: Sun 27 Sep 2026 22:38:08 +0000
Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: H33kGjVyCa8YzIfPuTe6nyM/m5mDoU3pz1QZPuhn+jA=)
2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: UgEEJTWIM54CHKob5V3mW5gsYSR/YNMzJ4dhTAYf1UI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Validity
Not Before: Sep 20 22:38:08 2026 GMT
Not After : Sep 27 22:38:08 2026 GMT
Subject: CN=6ab06051-8daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:b3:96:e0:4c:23:b2:70:2e:d3:4f:40:62:4c:
0e:e1:fc:ce:83:b5:ce:39:18:d9:37:b7:ff:65:2d:
12:90:b1:e8:20:2a:5a:6a:25:9b:3b:bc:13:8c:39:
c2:47:f5:b8:15:c2:c1:00:86:d8:d7:c8:e6:90:19:
d5:3e:62:e3:82:00:58:ef:05:9d:fd:fe:a4:1c:ea:
6f:f4:8f:82:35:9a:ee:a7:c1:7f:11:f5:f7:3f:0e:
a2:c8:f7:7f:15:15:ed:f1:21:97:2c:f5:ec:30:b8:
e9:ac:4d:f7:5d:21:85:29:fb:17:81:17:72:0e:f0:
39:7c:2c:93:2e:3e:93:cb:9f:d2:da:63:66:b9:90:
c1:36:26:19:95:9a:08:40:94:61:16:93:86:b3:bf:
9a:67:c2:bc:03:db:c6:92:d5:88:fa:b1:b8:7e:5a:
bd:5f:8a:27:f3:92:69:1d:27:fa:0a:5f:e6:ea:0a:
ec:07:9f:5d:fa:f3:ad:52:05:45:99:50:41:a7:ab:
55:9a:a3:00:72:f7:a7:a2:bd:4c:09:fe:40:f3:15:
e7:5f:7d:a2:1c:06:55:61:5d:b2:d3:66:13:42:ce:
6a:6e:af:92:45:61:3b:dc:b5:d5:66:2f:e3:ef:aa:
3d:57:3f:5d:55:09:68:72:e2:85:38:c0:4f:20:ad:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:A3:8B:2A:2F:16:EC:03:AD:40:DF:8D:18:B9:EE:63:7C:5F:45
X509v3 Authority Key Identifier:
keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:b3:cc:7c:1a:db:77:ab:4c:7a:32:0e:2f:2a:ea:59:c5:
2e:d4:64:ce:9b:3c:37:5b:40:ba:cd:1b:ed:9b:ab:48:d3:02:
38:2d:15:1b:ea:b2:11:58:ab:53:6c:a2:15:48:2b:7d:1c:99:
70:7a:8f:ea:a6:da:50:02:6c:df:43:41:43:6c:48:c4:a9:83:
f4:70:c3:47:f4:55:71:00:9f:71:04:78:af:a2:0a:95:a0:49:
5d:33:40:70:e7:91:4d:ed:29:75:f4:6a:ff:49:d1:c7:90:d1:
fc:34:de:23:e6:3c:49:b2:af:61:14:51:07:19:ad:47:a1:c1:
22:2b:c2:27:bd:17:5c:5c:0c:46:e7:35:30:d5:4d:a0:96:b9:
83:9f:10:62:b3:9d:27:c9:c0:c8:a0:96:18:f7:38:f9:c9:d6:
f7:e0:83:1f:9e:87:a1:3c:70:f7:e7:f1:5d:1e:4c:ba:31:22:
f7:8b:e8:0d:4d:1d:07:03:20:8a:5a:ee:d6:e8:8e:38:18:38:
38:1e:42:32:96:5a:b0:b1:79:f2:20:c9:33:30:62:80:55:f5:
69:a3:fd:ef:a5:ee:af:9a:1c:fd:73:07:8b:71:fd:7b:f0:4a:
8c:4c:8c:59:3a:c5:f5:db:dc:6b:77:cc:e0:66:fc:72:1b:73:
73:17:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:25 2026 by rpki-client