
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: mb8A+2uy8Y9gm0fdoks3IA7f9hMV3oehBVFQXiHPrGk=
Subject key identifier: 4B:84:27:46:36:42:75:7C:5C:9A:19:1B:DF:E0:AE:5B:01:84:11:81
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 02C4
Signing time: Thu 23 Jul 2026 02:20:42 +0000
Manifest this update: Thu 23 Jul 2026 02:20:41 +0000
Manifest next update: Thu 30 Jul 2026 02:20:41 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: pCWn4vDHeZLp/Haf2HJWrRBYFhLMlUgchrdHaZR8Zf0=)
2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=)
3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Jul 23 02:20:41 2026 GMT
Not After : Jul 30 02:20:41 2026 GMT
Subject: CN=6a617a7a-a9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:93:a5:4a:31:b7:f0:10:5c:5c:d2:5f:a7:
fb:34:16:dd:e1:53:ba:5d:ec:c8:93:45:d3:88:bc:
70:09:2d:f5:23:cf:49:09:51:86:ff:c0:2d:3c:d3:
e5:08:b4:b4:02:46:e5:8a:fa:4e:bd:aa:d0:bd:dc:
48:f6:4c:04:44:96:d0:f7:e3:6d:64:ab:12:18:b9:
7c:50:18:a0:dd:d7:f5:ac:ad:75:3f:a8:af:60:e7:
e4:bd:63:f0:53:b6:07:8f:55:de:a2:d7:8b:3e:4e:
0c:71:cb:1b:13:e6:e4:6b:bb:94:43:69:55:bb:33:
27:17:82:72:13:b1:06:ff:3d:d4:9b:9e:ae:b8:6b:
76:c1:36:f1:5b:f3:41:0d:07:da:5b:79:a0:f0:0f:
fc:30:b4:6a:de:96:d4:02:98:9b:31:70:13:3a:19:
6d:d1:34:8b:98:0b:c5:4b:22:c0:54:91:80:0c:30:
21:fb:95:25:43:c1:58:e1:74:40:5c:38:92:eb:5c:
b5:0e:b8:95:51:2c:8a:09:a6:49:07:8b:83:bb:ef:
7a:bb:68:82:4e:60:22:d6:65:d9:b5:69:f1:c3:61:
da:e9:38:9e:68:23:a5:67:3c:14:68:ac:10:01:f7:
3c:a9:e0:13:26:f6:d5:4b:f9:64:3a:17:7f:64:72:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:84:27:46:36:42:75:7C:5C:9A:19:1B:DF:E0:AE:5B:01:84:11:81
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:86:fc:3a:b3:ce:e9:54:63:18:2d:2c:86:57:35:61:04:a5:
ed:b5:13:4d:c0:c0:8d:c8:69:25:a7:f1:42:ab:6a:4d:f9:32:
58:a6:54:8c:dc:db:e0:cc:30:3b:35:e0:ff:03:00:47:86:f6:
5a:e7:c8:a9:2b:ba:8c:fa:9c:dc:b1:90:a6:c4:84:6c:97:89:
48:9d:9b:f7:12:29:30:53:66:1e:73:c4:ed:de:e6:ad:93:11:
aa:fe:5a:7c:33:d3:2f:63:45:f9:ec:4d:10:e9:a4:3d:03:01:
b9:75:08:bc:a4:9e:7e:0e:d3:89:d0:c4:0b:56:c2:d9:e4:2a:
56:80:8a:81:07:12:79:95:1b:0a:54:73:86:7d:b7:ea:89:64:
4f:2a:ef:44:e5:b3:f3:62:65:11:2e:cd:1a:c6:9c:f4:38:99:
79:85:4f:5a:3d:85:fe:a0:86:3b:fa:d6:2a:dd:43:76:71:09:
e8:90:f4:46:6f:2b:4f:97:ef:99:aa:fc:b2:a0:38:be:dd:16:
5b:ee:67:fa:e2:95:7d:b2:9a:b4:67:06:ac:27:55:3d:b2:08:
9b:18:aa:c1:d8:70:5c:21:9d:bb:40:8d:3e:8d:44:34:2f:f2:
e8:20:24:f9:b3:da:e3:21:38:ec:ad:0e:84:7f:6c:9d:3b:58:
7c:42:f1:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3
MEVGMkIxNEMwHhcNMjYwNzIzMDIyMDQxWhcNMjYwNzMwMDIyMDQxWjAYMRYwFAYD
VQQDEw02YTYxN2E3YS1hOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtymTpUoxt/AQXFzSX6f7NBbd4VO6XezIk0XTiLxwCS31I89JCVGG/8AtPNPl
CLS0AkblivpOvarQvdxI9kwERJbQ9+NtZKsSGLl8UBig3df1rK11P6ivYOfkvWPw
U7YHj1XeoteLPk4MccsbE+bka7uUQ2lVuzMnF4JyE7EG/z3Um56uuGt2wTbxW/NB
DQfaW3mg8A/8MLRq3pbUApibMXATOhlt0TSLmAvFSyLAVJGADDAh+5UlQ8FY4XRA
XDiS61y1DriVUSyKCaZJB4uDu+96u2iCTmAi1mXZtWnxw2Ha6TieaCOlZzwUaKwQ
Afc8qeATJvbVS/lkOhd/ZHIj4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuEJ0Y2
QnV8XJoZG9/grlsBhBGBMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE
RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR
M2Uta21VQW9EQzF3N3lzVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4b8OrPO6VRjGC0shlc1YQSl7bUTTcDAjchpJafxQqtqTfkyWKZUjNzb4Mww
OzXg/wMAR4b2WufIqSu6jPqc3LGQpsSEbJeJSJ2b9xIpMFNmHnPE7d7mrZMRqv5a
fDPTL2NF+exNEOmkPQMBuXUIvKSefg7TidDEC1bC2eQqVoCKgQcSeZUbClRzhn23
6olkTyrvROWz82JlES7NGsac9DiZeYVPWj2F/qCGO/rWKt1DdnEJ6JD0Rm8rT5fv
mar8sqA4vt0WW+5n+uKVfbKatGcGrCdVPbIImxiqwdhwXCGdu0CNPo1ENC/y6CAk
+bPa4yE47K0OhH9snTtYfELxOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:58 2026 by rpki-client