
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: 9IR68WzXMNYF6vrxL+FJkaqrFdZ3t77mAKvvvHElCiI=
Subject key identifier: 36:74:9B:AF:17:93:41:D7:C9:AF:28:C9:AE:C6:08:F0:E2:35:23:F8
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 0364
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 035E
Signing time: Sun 27 Sep 2026 00:57:03 +0000
Manifest this update: Sun 27 Sep 2026 00:57:02 +0000
Manifest next update: Sun 04 Oct 2026 00:57:02 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: iLKto/KBBeWVm/L6EAh5cwNFpTRKcnBk/J3J0VrIDLo=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868 (0x364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Sep 27 00:57:02 2026 GMT
Not After : Oct 4 00:57:02 2026 GMT
Subject: CN=6ab869de-3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:03:6e:0a:d5:19:8d:44:37:46:7c:10:a1:
28:2a:2b:63:f7:7e:ee:ea:cd:80:51:8d:c1:45:a8:
c6:2c:b1:d6:a5:5d:9b:28:6c:62:cc:16:0b:25:b4:
cb:34:d5:b0:45:d5:4d:6a:95:cc:3b:1e:c2:e8:bd:
04:11:ca:90:04:e5:e4:0a:64:f7:29:4e:57:e3:4a:
cc:55:b1:1b:f7:ab:4a:c6:17:fe:20:bf:e8:14:e8:
97:6a:7d:c9:af:15:6b:b5:7a:81:73:9f:8d:13:1c:
06:74:a3:4c:b3:17:54:ee:e5:ce:29:2a:14:5a:25:
b0:27:fc:07:13:63:d1:6c:c5:74:37:24:23:e8:d3:
9a:72:76:0f:42:ca:c3:19:a7:c6:f7:21:e7:b9:7c:
02:d5:84:82:34:83:ec:2d:d9:ff:93:af:42:e9:d9:
3e:7a:77:b6:6b:7e:09:4f:4c:e7:2b:dc:98:c1:55:
70:8d:5f:67:39:2b:47:0f:ae:25:52:2a:c2:02:5a:
e2:97:76:8c:37:4b:e0:24:51:20:72:b5:0d:c3:87:
ca:8e:28:fb:48:fa:75:b3:6c:3d:8b:b0:b1:63:6e:
3f:5a:a6:36:e6:db:14:d0:92:44:ec:d8:38:84:87:
38:e3:5e:7c:6e:f4:32:35:1a:b9:7e:b2:b1:3f:80:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:9B:AF:17:93:41:D7:C9:AF:28:C9:AE:C6:08:F0:E2:35:23:F8
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:73:52:f3:92:d7:e5:3e:2c:cd:2f:b6:68:65:ca:fd:dd:
ea:df:b1:c5:f6:c7:0e:ba:a6:02:d1:ac:87:7d:e1:79:ea:53:
85:53:4f:27:21:38:a5:e8:83:43:1b:62:f9:19:53:53:de:85:
d2:68:00:70:4a:5b:d1:00:89:64:94:cc:dc:ea:69:82:d1:57:
d5:19:05:24:39:00:dd:19:83:34:2e:85:54:79:0c:97:1c:78:
9a:bc:ed:eb:ef:0e:ba:6d:e9:57:bd:d8:48:fb:4d:de:95:da:
6b:97:36:d5:2a:c3:f1:a1:b1:c0:4c:3f:05:5a:ae:87:8b:96:
55:36:ea:8f:dd:c5:7f:54:e4:bb:0a:02:df:e6:5e:30:1d:05:
b9:92:90:53:40:5e:d6:e2:35:06:29:43:1e:6a:26:42:80:3c:
34:90:38:27:51:de:c7:6d:28:49:b1:b8:de:25:a0:75:dd:4f:
04:83:5e:ef:5f:79:c7:c4:cb:21:41:91:2b:56:e8:ec:bb:ce:
2a:05:c6:7b:06:75:97:c3:41:34:cf:fd:ee:3e:ad:2f:fe:a1:
bf:7b:9c:d0:48:b6:94:2b:d9:e2:67:01:bc:95:b0:16:84:28:
89:4f:cf:8f:b9:9c:c1:0a:3b:e4:3a:f7:95:e1:5f:db:c0:fe:
a1:09:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:00 2026 by rpki-client