
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier: qZLfqTgwdHHY0KGzy/u/tlYl2QRO+66i+E9zDg4dyIU=
Subject key identifier: C9:62:AC:CB:8D:19:89:E5:AA:EB:D0:00:90:A4:ED:6C:B9:68:AD:37
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 23F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number: 23D4
Signing time: Wed 22 Jul 2026 15:52:56 +0000
Manifest this update: Wed 22 Jul 2026 15:52:55 +0000
Manifest next update: Wed 29 Jul 2026 15:52:55 +0000
Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: wg05tw5afdrZE3PR0+QdDvLpwEuf7PiqKS1KUmgTG3U=)
2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: wQrd292YTRpmRkuOGjz/MSOU9HFRIK607/TbYDjVG7o=)
3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: oPPTl1sV6xGDw5Unly6kTOoNd3Ow/tpEEI0WHWs24Fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9203 (0x23f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Validity
Not Before: Jul 22 15:52:55 2026 GMT
Not After : Jul 29 15:52:55 2026 GMT
Subject: CN=6a60e758-3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:49:86:87:9e:68:ff:1d:06:6a:a2:9e:53:
68:f4:85:af:26:d8:4c:22:e9:01:ea:0a:a8:ac:69:
88:4b:61:74:fa:47:db:07:0b:0f:33:d6:08:8e:60:
4d:be:aa:2d:93:e4:cc:3c:74:9b:85:f3:16:46:c3:
ed:1d:4b:3b:f1:ca:ae:1f:73:36:e8:b8:6c:42:11:
8f:89:c1:5c:d4:ac:44:04:f0:d5:ce:01:0e:2a:1e:
11:2f:e8:c0:08:c4:df:c2:3f:eb:38:5e:9d:c3:1c:
a0:fd:ba:72:13:4b:c6:6a:53:38:03:5c:d0:2b:2f:
cd:9e:89:74:f5:e2:7d:65:69:51:5d:8d:16:0a:c6:
3d:e8:60:cd:1e:11:2d:2e:b2:a8:58:33:ed:6d:0a:
ef:59:c7:aa:6b:b1:25:a7:f9:4f:a3:83:42:a2:2d:
18:89:26:54:d5:8f:e4:7e:db:8c:29:d5:46:34:d9:
cc:80:43:00:56:cf:14:3c:f1:06:bf:34:f5:1c:37:
54:80:dd:9b:3e:11:4f:c2:97:ae:9d:8c:1e:12:97:
09:2b:ed:90:be:5d:fe:6b:b9:51:05:5a:78:fa:17:
39:73:29:10:0d:94:95:aa:2a:de:77:f1:a4:69:31:
f8:10:d5:99:d8:28:42:bd:9d:b8:1c:ca:36:fe:77:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:62:AC:CB:8D:19:89:E5:AA:EB:D0:00:90:A4:ED:6C:B9:68:AD:37
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:86:00:da:63:34:30:01:66:c7:23:c5:68:1b:72:ab:12:
83:40:a6:d4:d9:7c:ed:95:ca:e6:25:3a:ff:91:ba:81:a6:46:
61:47:63:09:51:bf:1e:2b:6f:53:5d:2c:9a:af:ca:30:96:4f:
87:ef:44:79:99:d2:76:57:83:06:0b:29:0d:bb:ad:d9:d5:bb:
93:0a:28:44:7a:7d:b4:80:3b:46:b5:f4:ed:19:8c:d3:be:4e:
2f:5f:2a:ea:93:d4:e1:2b:d2:1a:36:c7:cc:e3:0a:88:9b:7c:
eb:f9:dd:16:f8:6f:d1:14:bc:8f:e9:ba:5f:ca:48:cf:aa:f6:
c9:a5:a1:26:4f:c1:21:8c:39:c3:78:2c:01:66:6b:01:d2:e7:
bc:bd:dc:a6:df:e0:e4:64:60:ee:0c:8d:0e:5f:49:50:dc:f2:
bb:a9:d6:61:37:b3:c5:18:a9:04:52:7a:aa:79:34:7f:c8:0b:
38:03:54:96:4d:51:20:cf:f9:34:2c:db:fa:65:09:7d:7b:97:
14:4c:a2:e3:e8:d9:f2:23:fa:7d:3f:40:c8:92:1a:67:f9:2b:
29:ad:04:d8:33:65:2a:e8:98:77:f7:01:60:77:08:10:72:13:
14:11:84:72:7f:94:02:fc:68:2f:19:66:1d:a4:5a:07:65:1e:
b1:f1:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:34 2026 by rpki-client