
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier: tXdEQDCCMVRV8PIdZnnlsFqwS1mzTaWlmTcVTP3TcU8=
Subject key identifier: 4D:ED:2B:3C:04:BB:25:84:BE:BF:14:34:FA:AC:CE:CD:2B:5F:98:4C
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number: 08C1
Signing time: Wed 22 Jul 2026 20:56:52 +0000
Manifest this update: Wed 22 Jul 2026 20:56:51 +0000
Manifest next update: Wed 29 Jul 2026 20:56:51 +0000
Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: CEV1aUd14UQrXtes/z+QkHMV0W7MPJyuc3geWlX7w/8=)
2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: HgX4tCn4FMdl0R/ylo4Q2his11f507x0EEUUjL+i3vA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Validity
Not Before: Jul 22 20:56:51 2026 GMT
Not After : Jul 29 20:56:51 2026 GMT
Subject: CN=6a612e94-85e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:94:f7:f6:f9:1a:66:8a:f5:fd:87:5b:27:
e9:c1:20:d7:55:02:98:0f:5d:1c:f0:08:b6:ab:5b:
e0:61:15:72:a5:5e:9e:38:77:c3:ee:b2:77:2c:ea:
d0:e4:49:8d:53:b5:a7:f2:b9:4f:de:1d:ee:7b:8a:
27:cd:72:fa:95:f8:96:36:49:5b:f5:d8:9d:a1:56:
fa:b7:16:f6:1c:ca:55:d8:92:99:59:9b:57:11:f3:
70:f5:d5:60:96:c5:64:74:76:07:4c:f6:a2:a0:fc:
f8:06:16:d3:24:96:8e:f2:fb:cf:21:69:e3:a9:61:
e2:29:c3:ee:9f:48:a3:b2:ce:df:f4:d1:71:09:00:
03:a3:9b:62:e9:ce:5f:f7:f6:28:7d:77:68:dd:6a:
e6:4d:12:90:2a:ae:43:ca:46:d9:0e:b7:1c:31:b9:
4a:f9:e3:52:b9:70:3b:2f:95:b4:c6:e2:f6:36:29:
d4:39:b3:47:35:ef:33:98:7f:dd:cf:79:15:fa:80:
31:18:1a:cd:54:f3:86:84:94:48:4c:7f:5b:da:b9:
f6:6d:9f:cb:80:3a:b9:8a:c5:cf:0d:48:5e:92:de:
9c:97:86:be:cd:d4:b0:05:3f:a1:4e:f3:63:3f:90:
e3:17:85:b7:11:f2:47:b4:fe:7a:c1:cb:47:ee:4d:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:2B:3C:04:BB:25:84:BE:BF:14:34:FA:AC:CE:CD:2B:5F:98:4C
X509v3 Authority Key Identifier:
keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2f:c2:3d:7d:aa:fb:1e:2e:ab:2f:f1:c1:d2:85:14:9b:3f:
02:2b:62:25:39:f0:1f:e3:4b:d7:e9:7b:d2:a7:36:eb:17:b9:
66:84:19:3a:2f:58:7b:7c:4f:80:fd:89:aa:df:9a:73:a7:82:
2c:ea:a7:a4:ae:20:b5:3b:29:6f:ff:d0:e1:45:c5:cb:f0:dc:
cf:9c:83:a8:ae:ee:87:7a:13:89:64:2e:17:e7:cd:60:c4:15:
bc:e1:44:50:5e:93:a5:47:f9:29:49:1f:20:7d:30:3b:6b:fc:
3e:1e:e2:03:f5:0c:10:2b:10:ae:92:51:2c:05:8a:23:ec:97:
43:91:45:93:48:a6:08:39:f9:82:af:f4:fd:6b:31:f8:d5:4b:
ad:de:a2:a4:5f:74:95:cc:3a:e4:1c:3e:53:28:2a:39:74:5e:
c5:4a:f1:f4:34:6e:89:b3:22:53:8e:25:8e:48:44:1c:05:ae:
0b:0b:9b:63:52:cb:a7:33:61:bd:ce:a7:2d:52:be:db:fa:6c:
52:17:5c:25:81:da:02:28:d6:fd:7f:3c:f6:f5:dd:77:89:c7:
7e:f5:3a:74:eb:10:60:7f:04:3c:e3:05:85:f4:44:68:41:57:
d3:af:00:84:6d:35:51:17:80:fc:50:88:92:96:23:cf:53:f0:
02:fc:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:07 2026 by rpki-client