
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier: a/e2LZVDFv9fK4FsKxukc04F4NjzMyzCAyZ1Ya775Aw=
Subject key identifier: D7:18:9C:43:95:7B:F4:8D:56:D0:32:5B:55:85:78:FB:7D:0B:AE:D9
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number: DA
Signing time: Sat 03 Oct 2026 07:21:41 +0000
Manifest this update: Sat 03 Oct 2026 07:21:41 +0000
Manifest next update: Sat 10 Oct 2026 07:21:41 +0000
Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: LzWpiMRJ4fac49bwfpYEnrkPglvZjmzAUSHLd7n+IcY=)
2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Validity
Not Before: Oct 3 07:21:41 2026 GMT
Not After : Oct 10 07:21:41 2026 GMT
Subject: CN=6ac0ad05-3895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:7d:d8:44:c4:cc:7c:69:fd:fa:3d:84:64:
16:94:78:70:c6:6b:ea:30:5d:28:56:cc:23:21:26:
ef:8a:8a:53:37:1a:c1:f6:16:6c:6d:e2:6a:e3:75:
67:2b:63:7a:9c:10:9e:c8:23:74:b5:b8:a0:81:15:
52:8e:e3:67:46:77:0f:31:99:27:0e:c1:b7:70:55:
ac:83:d4:c0:1b:cb:90:a0:b5:1d:ea:9b:86:13:bd:
ff:56:ec:75:18:2b:5c:f8:a6:ef:d7:c9:9b:c3:56:
13:5c:5d:a8:2d:49:a7:14:70:f4:72:d4:bc:03:31:
88:ec:c5:08:cb:20:27:98:7e:ec:60:24:51:98:5f:
5c:79:fa:53:d9:67:dc:5b:71:05:1b:2a:c5:85:05:
e0:ca:1b:dd:82:2f:31:2f:a6:18:06:f8:35:dd:c0:
3c:9d:a8:29:8b:12:8b:f7:b8:f7:f5:91:dc:33:e1:
3f:f5:b7:f3:e6:18:1f:c6:ea:8b:aa:30:32:92:f8:
a1:94:2a:4e:f8:f2:d5:87:5d:ee:18:77:b1:87:b4:
88:e7:b8:b5:98:20:e4:a0:9b:20:4e:94:28:d1:e5:
05:91:06:0d:d4:c0:c7:50:4f:50:ee:7b:08:f4:ab:
b7:d6:98:ad:1d:be:c1:a7:39:91:83:cb:19:ff:ad:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:9C:43:95:7B:F4:8D:56:D0:32:5B:55:85:78:FB:7D:0B:AE:D9
X509v3 Authority Key Identifier:
keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7e:88:41:69:35:04:2b:02:6e:d0:d2:d9:c7:05:34:e2:37:
d4:8f:30:91:09:ca:8b:49:e8:0a:c5:48:21:2f:b3:7e:8d:56:
69:f3:3d:f9:a2:79:bf:ed:d4:e6:93:de:7a:c9:dc:45:49:a2:
e6:fd:51:11:3a:86:ae:b8:22:ae:0e:00:53:9b:90:aa:c0:4e:
a5:2c:4f:99:5f:b1:e4:aa:49:b7:05:02:30:09:1a:3b:1d:65:
94:f1:3e:6d:40:0c:1d:8b:92:f0:77:77:20:9f:3e:dc:f4:cc:
90:52:a1:26:d7:08:a7:3c:aa:10:57:90:6e:cf:5c:28:76:b8:
c5:27:2b:04:71:5b:14:fd:ad:7f:35:67:a4:66:0a:e5:4c:16:
7c:cc:aa:48:f3:9e:5b:9e:f9:cb:a5:88:2e:5a:73:4d:0c:56:
36:71:4f:50:99:45:7d:2c:43:5b:2e:45:79:d2:67:7d:ef:34:
65:38:e2:f4:5f:00:be:cc:fa:1a:cf:cf:cd:5d:31:ae:81:8e:
d5:df:8a:49:eb:60:0e:5d:4a:4b:8b:a6:17:f0:04:d2:a2:5e:
fd:58:75:3b:e7:f2:a8:48:48:6a:fa:c5:65:0e:30:d8:31:aa:
69:79:c1:39:ad:67:d3:37:a8:31:be:96:33:03:14:90:a8:1b:
cf:64:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:24:26 2026 by rpki-client