
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: MTthJ/1tmXEp+WkCcgiijUk+ObBIn/5O4NX3wMaLmSM=
Subject key identifier: A9:78:54:E8:4D:77:30:E7:D4:DE:41:16:5D:38:D1:47:CC:88:03:E3
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 02A1
Signing time: Wed 13 May 2026 01:38:58 +0000
Manifest this update: Wed 13 May 2026 01:38:58 +0000
Manifest next update: Wed 20 May 2026 01:38:58 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: hKA0cLPrsSoEwRMhrbBXQdGsTALB19hOHXvCkfgTTqc=)
2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=)
3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: May 13 01:38:58 2026 GMT
Not After : May 20 01:38:58 2026 GMT
Subject: CN=6a03d632-077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:31:8d:b9:69:6f:ab:54:01:1c:e4:a9:94:
f0:61:db:35:42:ac:f8:50:2a:f1:6a:ab:73:11:0d:
2c:2b:62:78:26:7c:c4:9a:cf:c7:e1:12:e1:ac:07:
8d:9e:74:03:2e:8a:12:74:f1:5e:c0:35:c1:df:6d:
92:0c:42:da:55:25:7b:78:ed:29:7d:19:22:da:ad:
f7:c1:a4:a7:df:91:a3:04:d5:5f:b8:55:8a:62:f0:
18:b8:1c:14:e4:f0:f2:e2:3e:16:bb:d9:6e:44:3f:
88:31:45:b5:2d:4a:ce:1f:f0:c6:16:cb:a5:92:a2:
fe:a2:65:98:b9:f3:86:ed:7e:28:3c:5a:30:7a:31:
3a:00:b6:06:88:43:d8:64:6a:41:66:32:1b:5a:06:
77:16:e6:7a:af:17:6a:46:d1:b5:d1:47:5b:b6:f4:
f6:c1:92:09:a0:44:b3:99:6c:cc:56:11:4a:71:d8:
a1:d9:b1:26:37:6d:56:06:19:8a:19:d5:40:1e:e2:
18:35:83:ec:9a:5f:f9:18:b5:6b:a2:81:19:4d:2c:
32:f8:95:e8:a5:68:fe:30:4a:45:a6:54:ea:66:97:
93:69:f0:32:3a:f7:15:f8:7e:61:44:28:d5:da:45:
6e:f9:2f:3a:b5:3c:ff:63:99:78:52:28:65:4a:50:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:54:E8:4D:77:30:E7:D4:DE:41:16:5D:38:D1:47:CC:88:03:E3
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:d8:12:3f:9b:0d:78:5d:6b:f0:55:aa:ef:97:56:eb:c5:
33:8d:71:08:a0:32:42:89:c7:cb:80:51:b1:e5:04:a1:d9:92:
17:98:a9:18:02:b3:df:c9:14:73:92:75:85:55:55:7b:16:57:
70:82:00:24:ab:b0:a3:ef:3f:13:f6:86:65:cf:46:aa:0e:ed:
89:f8:87:25:e4:43:20:d7:c6:54:5c:b4:38:ce:ac:2c:9a:e6:
1b:a8:05:46:82:59:18:b0:3c:3a:f2:f5:f1:8d:17:ce:19:47:
2f:e4:24:58:4d:b1:eb:29:56:b2:dc:b5:e6:8b:91:23:64:5a:
68:52:6a:f2:de:a4:78:bb:46:05:54:b9:2f:37:ea:fc:3a:91:
ad:dd:2f:3b:0e:7d:cc:73:04:a2:5b:1d:3c:b0:d8:02:ab:62:
30:51:80:6b:9a:7d:54:66:ae:f0:99:e4:bc:2b:2f:67:28:74:
ec:c3:6b:09:7c:a0:50:e6:76:4b:4d:7d:8f:27:a1:59:2f:85:
0b:e6:9d:32:22:c5:2e:af:20:d6:53:d9:d6:00:b8:dd:e7:f6:
64:23:d6:27:87:27:ec:c2:42:d2:ff:cd:6d:5d:d4:34:b0:98:
6a:48:80:69:5f:1b:52:4e:ec:88:4d:f7:53:d4:03:89:14:5e:
bf:90:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:52 2026 by rpki-client