
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier: flKxIdNiGOFhysD9/UkA/x6pIdPXE5Uu+SQRUoe+AOw=
Subject key identifier: B9:97:46:47:65:BF:3C:EA:17:36:78:33:AA:31:C1:B8:72:1B:F7:8C
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial: 01BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number: 01B3
Signing time: Thu 23 Jul 2026 05:26:41 +0000
Manifest this update: Thu 23 Jul 2026 05:26:40 +0000
Manifest next update: Thu 30 Jul 2026 05:26:40 +0000
Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: heCfJ0y+9F+lqLu62dJbQ7lh88HInjZwSFXjJMCL7ss=)
2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Validity
Not Before: Jul 23 05:26:40 2026 GMT
Not After : Jul 30 05:26:40 2026 GMT
Subject: CN=6a61a611-2c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:f4:ea:86:32:a5:78:25:c6:2e:9f:9d:46:
d6:9c:dc:58:c5:a7:d2:f2:3b:fc:15:42:16:93:c2:
36:a8:69:f6:19:e9:3b:e6:38:7f:81:9c:14:6d:4c:
2e:66:79:f1:ad:7b:5a:e0:ea:79:d3:1a:b9:65:6d:
7f:14:7e:5a:ed:4d:f1:8c:6f:de:19:15:26:ab:b0:
9a:3c:cf:66:91:ea:64:4f:7c:a1:40:e3:64:93:78:
01:1b:a4:ca:b0:06:3d:c9:a6:f5:01:ed:73:5b:b9:
58:54:3e:eb:5a:cd:22:06:8f:f8:20:67:ed:10:32:
27:a4:d0:51:86:30:28:72:1b:2e:c5:7a:d5:e8:31:
41:5c:9d:03:39:e4:89:e8:0f:7b:55:d1:38:76:4c:
ee:0e:af:24:cf:6c:f9:50:4b:07:6e:41:86:8a:01:
45:fe:37:e1:88:83:a2:02:74:8e:9f:f8:87:51:1b:
a0:6b:76:d5:e3:e8:93:ea:ac:4e:66:16:c8:96:c2:
73:6c:ba:7e:5a:fa:8a:ad:7b:f6:72:44:1b:e9:fc:
98:dd:6a:20:71:b1:29:94:39:3c:16:66:2f:f0:e9:
4f:b6:7f:80:31:20:ce:c4:e8:1b:46:5f:02:ef:68:
c3:d8:29:74:7d:06:90:ed:cc:f9:95:c8:15:65:60:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:46:47:65:BF:3C:EA:17:36:78:33:AA:31:C1:B8:72:1B:F7:8C
X509v3 Authority Key Identifier:
keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:03:09:5b:46:61:28:37:c4:d0:a2:57:ac:ce:74:c2:bb:13:
2e:e8:5b:cc:07:e6:2e:7f:92:99:d8:31:c1:95:f3:c1:22:25:
a5:eb:13:98:f2:76:ff:b4:e2:14:88:5a:06:77:e4:f0:3c:a9:
21:c1:35:ca:51:7b:eb:de:d5:7d:65:fb:c3:b2:4a:c2:b2:83:
63:62:8a:5e:38:0f:a5:8d:63:e5:80:cf:8a:5c:af:be:b5:e9:
95:84:b7:84:50:58:32:e7:e3:cc:2e:e5:2e:d0:52:66:c5:18:
fc:8c:9b:1c:36:fd:1d:f6:e7:f6:4e:c2:f5:93:89:56:63:62:
c1:9b:a1:9f:95:cb:8f:fa:cf:1b:e8:4f:38:25:b3:2e:b0:42:
20:b8:fd:d1:c0:4c:8a:c8:30:b0:be:c2:6b:28:b8:60:45:ad:
dc:0a:5e:9d:be:85:bc:c8:1b:a6:d7:73:d2:a9:f6:9f:88:c1:
12:d1:7b:9a:44:0d:6f:72:2b:65:21:30:02:d3:1d:19:6e:91:
b9:39:a5:b3:d6:d1:88:d3:81:b0:b4:41:9a:a8:36:da:a4:2e:
9f:e0:92:f1:14:f9:f2:05:d6:bf:e2:6c:27:20:9d:2a:06:89:
ed:0f:d9:19:db:0a:d8:d1:45:66:75:7e:30:e0:ce:c7:1c:13:
d3:84:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:45 2026 by rpki-client