
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: zFCuZ5bTkonzorJcQULxmaxKhDPWWBPyYnr1Czj4aoM=
Subject key identifier: 41:B3:F8:55:E7:26:B2:37:FC:71:FD:21:E0:B0:21:BB:FA:B7:5E:96
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 0342
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 033C
Signing time: Thu 23 Jul 2026 01:58:21 +0000
Manifest this update: Thu 23 Jul 2026 01:58:20 +0000
Manifest next update: Thu 30 Jul 2026 01:58:20 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: L/qMtb72g8nMcWtaJpMnhjMmM/+Zb2Jq+BV5+4CVWMc=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Jul 23 01:58:20 2026 GMT
Not After : Jul 30 01:58:20 2026 GMT
Subject: CN=6a61753d-b328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:82:69:77:4d:16:0e:a7:65:e1:ea:94:31:
ba:f7:5a:cd:6f:eb:ff:9f:bc:fc:fe:67:ba:50:25:
cf:01:2f:5a:fb:5e:a9:0c:0c:fc:7f:58:e8:73:f2:
02:a4:80:6f:fd:6c:15:56:48:a4:fc:67:47:9a:7d:
34:31:92:d8:68:9e:8b:8e:3e:e8:7a:78:b1:26:5e:
cb:68:73:cb:7f:9c:a7:c5:eb:38:da:e5:78:3a:32:
75:58:d3:a5:07:0a:1e:12:dc:10:76:e9:25:cd:80:
27:3d:e9:c6:be:19:e9:ee:71:7a:42:b8:be:62:7f:
4a:04:d5:40:1c:8e:8e:a0:25:ce:e9:7f:7a:3e:71:
2f:70:5c:2f:fa:2c:e0:fe:77:e2:85:a3:21:68:b4:
d6:e6:0a:68:fd:ec:22:b0:8d:86:88:e1:cf:ce:94:
d3:e4:04:63:4a:32:08:9f:17:f2:66:0c:ff:0e:87:
99:2a:84:25:72:c6:8e:b0:45:35:1b:29:79:19:eb:
aa:c5:21:16:d8:88:90:ad:dc:b1:ba:28:a9:fe:7e:
79:aa:e4:3c:af:40:ce:44:54:da:d2:bd:1e:48:ef:
af:4b:f2:95:ee:49:04:a2:64:cc:3e:c5:e5:f4:3f:
78:f7:8f:b5:f8:53:a1:20:d2:98:82:e1:28:93:99:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B3:F8:55:E7:26:B2:37:FC:71:FD:21:E0:B0:21:BB:FA:B7:5E:96
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cb:70:df:8f:6e:c4:86:04:27:3c:d7:01:18:71:6b:a7:ae:
b5:00:e6:a0:e7:d5:26:e3:b8:6b:fa:9b:9a:f5:56:55:10:6c:
5b:34:77:be:11:1a:d0:e7:e3:20:ad:95:81:81:28:7a:6e:f5:
70:de:70:e2:d2:5b:84:8b:8d:0a:10:3a:47:76:a5:07:7b:63:
48:66:10:48:95:23:07:23:41:68:4c:bd:9a:38:4a:9e:c9:3f:
78:1a:c5:29:b5:b4:90:6d:6f:6c:f5:fe:49:24:d7:a5:3d:a2:
be:02:6d:4a:66:d8:2c:7a:67:09:dd:db:00:90:35:e0:f4:2c:
6f:7f:30:5e:14:b0:5c:59:ef:8b:ab:a6:0c:11:a4:7a:d9:77:
d7:f9:46:5e:e0:0e:fc:11:2f:11:00:8f:59:55:d9:2e:1f:a3:
05:cc:28:67:ac:38:ec:2f:10:23:11:e8:6e:78:13:78:6e:da:
1e:10:66:99:2c:84:b7:18:c5:bc:99:7d:4b:c1:09:3c:b4:96:
4a:ad:59:48:35:a4:06:24:c4:e9:24:be:49:5f:01:0a:08:1f:
b2:d1:6f:93:17:d0:06:32:4d:5d:e9:06:08:3c:aa:59:cf:5c:
34:35:84:31:ac:84:e6:b6:d6:9b:27:54:f9:a8:9e:2a:b0:83:
de:09:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:49 2026 by rpki-client