
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier: PEHu3OqPfUMleVl3Y/sOXGz/QZE63RJA0D2NsSVmWTQ=
Subject key identifier: 5B:E3:71:E8:77:BD:99:46:A0:6D:95:3B:2B:80:5E:01:5F:84:33:ED
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial: 23CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number: 23B0
Signing time: Tue 12 May 2026 15:49:09 +0000
Manifest this update: Tue 12 May 2026 15:49:08 +0000
Manifest next update: Tue 19 May 2026 15:49:08 +0000
Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: jMWTF33r89RjRrPMsmxhDpn74oih63TtZajPaNrFYw4=)
2: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: oPPTl1sV6xGDw5Unly6kTOoNd3Ow/tpEEI0WHWs24Fo=)
3: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: wQrd292YTRpmRkuOGjz/MSOU9HFRIK607/TbYDjVG7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9167 (0x23cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Validity
Not Before: May 12 15:49:08 2026 GMT
Not After : May 19 15:49:08 2026 GMT
Subject: CN=6a034bf5-1f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a9:61:14:f1:2e:0d:75:90:d4:9d:a8:bd:59:
20:9a:c4:1f:0d:9d:1a:d9:51:ea:16:cb:3e:a9:24:
a1:30:4b:f1:c6:93:32:db:68:4d:2e:5e:f4:c7:09:
fd:75:c5:65:ed:f8:28:6d:75:5f:ec:10:3a:a9:f1:
9b:98:d4:54:ba:ac:f3:40:64:d1:44:41:31:d4:41:
da:f5:9f:b5:c5:f4:75:56:3b:a4:42:21:05:96:66:
7d:78:3c:c1:13:d5:05:b6:cc:2e:c7:7e:97:e4:5f:
2e:8b:c6:dc:6f:e5:52:9b:d4:1d:35:1e:50:d1:36:
c3:02:12:36:ef:bc:a6:5f:7f:e7:03:5a:13:db:a7:
cd:bd:37:df:63:ea:69:be:55:b7:8e:2f:d4:a9:60:
ac:c1:9e:19:1e:59:66:91:c0:fe:9c:22:68:13:2a:
61:4d:6e:f5:bc:96:54:41:29:02:9c:e9:94:f1:99:
61:d2:12:71:95:62:ce:80:37:0e:0f:a7:37:d0:00:
40:9f:a3:a7:57:50:ce:ac:37:d3:5a:75:e1:21:a9:
3d:1f:3e:37:93:1f:47:e5:5f:19:40:9a:89:1b:d1:
3c:46:2b:ef:c0:f6:d8:47:b7:ff:2f:39:e3:21:8f:
21:65:44:01:a0:9c:34:87:1c:c1:46:3a:2f:6d:58:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:71:E8:77:BD:99:46:A0:6D:95:3B:2B:80:5E:01:5F:84:33:ED
X509v3 Authority Key Identifier:
keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:83:5b:e7:31:3b:ac:4b:33:98:7f:67:d4:1a:5a:2c:79:
e8:ee:e8:e1:57:9a:a8:6f:56:19:5c:e3:c0:9b:a0:bc:94:60:
95:cf:ed:fd:a7:31:fa:93:4c:46:1a:15:5d:b7:b6:c8:7e:6f:
4a:92:0b:8d:25:fb:5b:2e:1c:d1:b3:76:e1:08:bd:14:10:cb:
63:83:fd:fd:36:93:9d:1d:27:b0:bb:2b:33:90:63:2e:b4:2a:
85:e2:00:e2:88:d4:e5:27:89:ac:8e:a2:7f:33:f7:f7:be:13:
6a:64:4a:88:43:24:a4:7e:f0:10:82:4e:9c:e2:06:be:1f:62:
a8:9e:4a:12:f5:66:60:36:3a:dd:99:c8:b9:28:b5:1f:fc:f0:
87:2a:14:85:d0:2a:38:c9:ee:79:26:71:d0:38:11:95:9f:d3:
95:93:dd:42:a1:07:b2:87:8d:13:7f:36:5d:3d:b7:e0:da:52:
c2:88:33:32:73:96:0f:b3:1f:65:ab:0c:7e:e6:cb:ef:b7:e1:
3a:b7:e8:46:41:62:c6:b7:1f:eb:48:e7:42:f4:67:dd:0d:66:
14:15:63:ba:e8:19:e2:a0:0d:45:74:86:e1:5f:f8:67:96:15:
c6:5b:9e:38:f7:03:6b:e7:dd:07:03:eb:47:c8:c6:bb:29:ed:
a5:82:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:50 2026 by rpki-client