
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier: YJhzbJGy+MizPY/8hj/usZ8neaGW+05mSnjxeePOERc=
Subject key identifier: 9C:09:0C:C6:FA:04:AF:F4:0E:93:68:63:22:ED:98:DA:E7:A0:49:23
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial: 0895
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number: 0883
Signing time: Sun 20 Sep 2026 20:42:13 +0000
Manifest this update: Sun 20 Sep 2026 20:42:13 +0000
Manifest next update: Sun 27 Sep 2026 20:42:13 +0000
Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: TY3fnjY0pzpXjaYwboqsT73c6p0zfMmTykLsy1zA05I=)
2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=)
3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Validity
Not Before: Sep 20 20:42:13 2026 GMT
Not After : Sep 27 20:42:13 2026 GMT
Subject: CN=6ab04525-5fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:89:9d:3e:1c:ef:bc:19:55:98:b3:87:84:
97:46:0a:e5:8f:3f:36:2f:06:ae:35:6d:3c:84:03:
96:f7:a7:e1:fb:f2:0f:9c:f9:c6:18:6f:c7:b0:6a:
52:e5:cf:a9:38:1d:de:a4:65:f8:30:4e:e1:95:17:
b8:08:3a:d7:d3:3a:da:d5:7a:b8:28:38:3e:6a:29:
75:19:c7:9a:4b:37:58:c5:f8:03:a9:62:69:1d:05:
83:f9:b0:2c:88:36:08:7f:f7:9c:71:3f:4c:b7:f1:
10:02:53:fa:99:f1:67:24:b8:34:0f:e3:40:47:e2:
01:48:61:8e:8d:d1:bb:67:22:40:4a:b7:9a:fd:0d:
7f:b3:72:e7:b1:23:ba:aa:05:49:60:47:92:48:e6:
f4:30:15:4b:0c:bb:71:aa:fe:da:e9:e2:d4:b4:c1:
b8:13:b2:3e:e1:f6:58:c0:3e:e1:46:d3:af:1a:d4:
3c:50:40:2e:33:2c:0d:8a:8e:00:31:60:2f:59:01:
58:8e:33:d9:91:96:b1:17:9f:57:be:71:b2:af:0b:
d9:01:56:39:82:c2:8a:1e:30:4f:b3:d7:48:22:6f:
d1:35:e5:97:f2:40:e7:fb:6c:8d:ca:c3:40:53:59:
76:0e:b5:0f:1c:64:6b:89:f8:50:e6:3b:ed:ce:fb:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:0C:C6:FA:04:AF:F4:0E:93:68:63:22:ED:98:DA:E7:A0:49:23
X509v3 Authority Key Identifier:
keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:bf:6f:25:ef:10:47:68:34:26:82:04:ef:16:38:60:c2:
56:64:47:30:7f:a3:67:9d:38:b1:57:a8:59:bb:96:94:c9:5f:
f9:d4:5f:96:2f:3a:83:2b:ba:fe:f7:6b:3b:5d:45:af:c2:25:
c7:6d:31:b5:c9:57:e6:cf:6e:69:7a:6b:5f:26:d0:65:1a:e1:
19:54:14:ea:da:3f:4a:6c:03:0c:be:cc:08:74:9d:fd:7e:58:
bc:a0:d1:48:ec:df:ac:b0:06:96:4b:43:8e:2f:a1:b0:5d:94:
99:d2:13:bd:cc:60:f1:0e:ab:63:a4:2a:ce:0a:f4:2b:be:62:
43:53:25:d6:c4:b1:62:32:f8:c7:14:ea:07:5a:77:58:d6:40:
a1:23:26:78:f6:54:8f:3b:6d:e7:e2:40:67:0e:1a:95:0d:14:
07:5f:f6:01:e1:2e:52:dc:78:04:a6:5a:78:92:d7:0a:89:1c:
68:80:e8:06:d7:61:dd:59:1f:dd:8b:1d:55:ea:e1:02:1c:63:
d6:59:d0:34:63:b7:ad:fa:72:1a:4d:45:da:8e:c2:1c:c3:fa:
d3:a9:ab:67:01:7d:62:d7:1d:6b:8b:d9:10:68:11:66:a4:79:
5e:f2:bd:09:e6:e6:15:20:49:65:b5:2c:47:b5:cf:74:f3:3c:
ae:8f:49:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4
OTQwNDRDM0YwHhcNMjYwOTIwMjA0MjEzWhcNMjYwOTI3MjA0MjEzWjAYMRYwFAYD
VQQDEw02YWIwNDUyNS01ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuaJnT4c77wZVZizh4SXRgrljz82LwauNW08hAOW96fh+/IPnPnGGG/HsGpS
5c+pOB3epGX4ME7hlRe4CDrX0zra1Xq4KDg+ail1GceaSzdYxfgDqWJpHQWD+bAs
iDYIf/eccT9Mt/EQAlP6mfFnJLg0D+NAR+IBSGGOjdG7ZyJASrea/Q1/s3LnsSO6
qgVJYEeSSOb0MBVLDLtxqv7a6eLUtMG4E7I+4fZYwD7hRtOvGtQ8UEAuMywNio4A
MWAvWQFYjjPZkZaxF59XvnGyrwvZAVY5gsKKHjBPs9dIIm/RNeWX8kDn+2yNysNA
U1l2DrUPHGRrifhQ5jvtzvvuVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwJDMb6
BK/0DpNoYyLtmNrnoEkjMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG
NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj
aW9EMkJIM0ZLWGVKUUVURDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW5q/byXvEEdoNCaCBO8WOGDCVmRHMH+jZ504sVeoWbuWlMlf+dRfli86gyu6
/vdrO11Fr8Ilx20xtclX5s9uaXprXybQZRrhGVQU6to/SmwDDL7MCHSd/X5YvKDR
SOzfrLAGlktDji+hsF2UmdITvcxg8Q6rY6Qqzgr0K75iQ1Ml1sSxYjL4xxTqB1p3
WNZAoSMmePZUjztt5+JAZw4alQ0UB1/2AeEuUtx4BKZaeJLXCokcaIDoBtdh3Vkf
3YsdVerhAhxj1lnQNGO3rfpyGk1F2o7CHMP606mrZwF9Ytcda4vZEGgRZqR5XvK9
CebmFSBJZbUsR7XPdPM8ro9JUw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:07 2026 by rpki-client