
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File: xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier: aUpMP0Eag5tyg1kHfuiGPksORM7EGRviifW+Nr2xOGs=
Subject key identifier: D7:38:DA:83:DA:F7:5D:44:5B:AE:39:93:78:B8:27:FB:05:E5:B0:9A
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial: 0724
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number: 071D
Signing time: Tue 12 May 2026 21:58:18 +0000
Manifest this update: Tue 12 May 2026 21:58:18 +0000
Manifest next update: Tue 19 May 2026 21:58:18 +0000
Files and hashes: 1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: JWWLR868jUwrF6n5uXPBKOTBkvL1Z24yPWMVVwXAnNs=)
2: 485D694A454911EEB8718378C4F9AE02.roa (hash: Y8iJThI3UQs6h5LHq/2D1bpcHDn8+qLI7yAh/AJOyS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Validity
Not Before: May 12 21:58:18 2026 GMT
Not After : May 19 21:58:18 2026 GMT
Subject: CN=6a03a27a-24f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:7d:59:6e:d2:7b:7b:62:81:21:98:7b:52:
40:13:aa:86:9a:c7:bd:f5:8a:c2:68:66:d9:6e:1a:
9d:92:1b:6f:31:44:30:79:55:83:6a:09:0e:bb:a8:
90:35:a8:bb:07:98:44:db:d1:89:09:85:49:c2:c2:
56:6a:0b:9e:35:40:73:c4:68:88:43:31:e8:58:c8:
aa:aa:af:67:7d:11:29:ca:2e:1d:ed:9d:fb:9e:e0:
a3:f6:60:06:81:a6:0a:1c:00:92:48:ab:a4:45:ec:
fe:27:56:39:f1:a1:4b:c4:80:91:a2:bf:6a:f3:ee:
b1:7f:41:5d:4e:0b:79:3d:d2:05:83:a4:85:c7:20:
d9:91:4b:b6:fd:5c:81:98:45:a5:3b:73:c5:aa:15:
d4:25:a8:52:f6:c1:0a:41:97:f5:25:bf:f6:3d:fc:
0f:ee:05:27:37:b5:98:c9:6e:49:4e:79:79:5d:74:
92:56:6e:f4:bd:bf:65:1a:9d:24:0e:55:21:42:f4:
e4:22:c6:99:07:3c:e3:78:7d:10:f2:64:2b:81:d3:
2e:aa:07:0e:2a:d1:95:b1:d5:e3:1a:3e:f1:e4:02:
30:b9:42:0a:39:2e:a5:68:ec:4f:a2:fd:b0:9c:28:
9b:6e:c5:81:14:25:c8:ba:3f:f6:1b:2a:09:0f:96:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:DA:83:DA:F7:5D:44:5B:AE:39:93:78:B8:27:FB:05:E5:B0:9A
X509v3 Authority Key Identifier:
keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:31:37:fc:7b:25:70:ab:06:1a:55:e4:2d:cb:a5:80:7d:
ad:88:cd:4b:0f:6e:43:aa:3f:66:31:b1:11:5f:9b:0d:8d:ab:
cc:b7:ad:2c:ab:72:95:53:7e:f3:52:1b:0c:fb:5a:10:83:c0:
4c:aa:09:c0:d6:d7:cf:f5:d3:db:2b:cd:78:28:ff:0b:5f:71:
29:7f:f2:aa:48:0c:fc:d6:ff:9e:cb:c6:65:c8:6b:69:fa:37:
e1:a7:b1:7d:d9:9d:f4:96:c9:52:8a:61:ae:69:b9:19:df:7b:
9c:65:3c:0d:5d:fe:ef:64:fa:a1:a8:cd:f4:a2:be:dc:86:2d:
1c:f4:20:96:f1:64:94:bd:af:05:11:5a:1d:72:e7:22:76:f3:
c2:fb:25:ca:89:38:cf:57:7e:4e:50:f4:8d:d4:05:2c:58:f4:
f1:9c:c5:8b:e4:70:38:8c:1a:5c:be:67:58:d8:a5:f3:1f:e6:
10:c4:35:44:b2:c4:71:6c:7b:1f:05:8a:12:f3:10:ea:5b:fc:
a2:c0:49:e4:85:0a:c8:12:46:2b:c7:95:bd:30:fc:8a:83:17:
8e:2a:76:d9:95:b2:7a:2d:67:d0:0d:24:db:00:7b:56:1f:b3:
2f:6c:86:d0:a3:15:18:fb:70:82:f3:31:4f:38:cb:57:4f:9a:
ea:45:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:15 2026 by rpki-client