
$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier: W/Hw9DGxKVdUDcAb4W1T5QAKguoFxCKFPsi5zZIRUuc=
Subject key identifier: 89:46:5A:F9:34:25:50:74:78:96:94:FF:1B:76:98:55:47:04:08:3D
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number: 014B
Signing time: Thu 23 Jul 2026 06:55:46 +0000
Manifest this update: Thu 23 Jul 2026 06:55:46 +0000
Manifest next update: Thu 30 Jul 2026 06:55:46 +0000
Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: y86kEj4tsHQpWyEclmbA6fsRIou1tT0U947/LqKLf28=)
2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: 2YuAa3vXnmLnBf2q5mIusFMk4m38OnK+8EAkU7/cT84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Validity
Not Before: Jul 23 06:55:46 2026 GMT
Not After : Jul 30 06:55:46 2026 GMT
Subject: CN=6a61baf2-ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:ed:42:40:5b:01:43:34:97:9e:37:9c:a4:
84:e7:b5:9d:b0:c6:5e:cf:40:35:d4:d5:92:56:bb:
0a:d6:71:2b:59:cc:39:81:bd:62:b2:26:17:1f:78:
04:35:ff:b4:da:de:43:f9:54:f5:59:ea:80:8f:b3:
b4:18:9a:77:f7:fb:a8:85:77:9f:4e:13:2f:df:e1:
fa:f6:84:4b:ba:3d:a9:b3:01:d3:48:b0:99:0b:d7:
23:f0:7e:96:64:34:0b:54:68:63:67:73:ec:be:95:
99:e9:44:cd:dd:e5:9a:a8:a2:67:9f:3d:1b:2d:b7:
4e:5d:87:40:85:e6:03:20:71:63:e7:fb:86:6e:c6:
02:9f:4f:35:d1:c3:86:d6:48:fc:ca:41:b4:b8:26:
01:88:9b:4a:77:32:cf:1c:38:92:76:f9:fe:ba:68:
e4:d5:52:b0:ad:fc:78:ef:66:63:74:cc:02:55:e4:
b6:c4:87:bd:0a:da:ef:39:a0:59:89:c7:1b:3a:27:
21:d2:7b:c8:88:b9:8b:64:b2:6e:fd:1c:78:01:b1:
12:06:b5:6c:7d:7f:ac:91:3d:28:6d:3e:36:2c:e1:
8f:d0:25:2d:16:2e:5f:c6:86:86:d0:ba:62:cf:7c:
96:40:79:07:1b:19:e9:34:1b:2d:53:3d:b2:5e:8c:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:46:5A:F9:34:25:50:74:78:96:94:FF:1B:76:98:55:47:04:08:3D
X509v3 Authority Key Identifier:
keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f6:2e:98:a4:20:54:38:8a:b3:31:85:d4:61:d0:83:52:60:
38:a7:bc:a2:7b:fe:3e:f5:76:a4:b9:f3:8e:55:10:6f:6e:dd:
2b:81:ff:e7:cc:1e:01:bc:0e:07:66:9a:a1:a4:c5:ed:13:1b:
29:54:3e:41:20:00:f9:8f:86:73:59:f5:e2:fe:18:e6:eb:bc:
10:f1:de:be:a3:bb:1e:bb:f0:61:5a:a1:08:a2:f5:56:a8:93:
f5:20:6d:e7:e7:97:c8:98:38:c2:82:4d:f3:f5:c8:4c:49:93:
b2:1d:9d:f6:50:20:c2:f3:69:b3:45:52:b1:b8:a1:77:81:50:
92:32:dc:87:5c:9f:8b:b1:a9:43:76:8a:54:cd:07:8a:15:7a:
83:d0:de:8c:10:9b:cb:0a:a2:9d:1e:ac:56:de:bc:c9:e4:1f:
ce:4f:41:8c:0e:b7:01:17:6e:ed:a2:c6:d0:f8:aa:3f:08:1e:
0e:4a:e7:cd:0b:8a:53:a8:d3:b5:c3:fe:03:34:b9:c3:e0:81:
e6:fb:ad:21:05:28:ec:f4:b9:12:8f:56:c8:2f:45:80:08:b1:
19:59:49:8e:b9:41:21:62:64:29:f9:09:96:6d:ed:cf:23:a5:
27:30:e1:d3:49:53:bd:b1:f6:64:72:f8:89:a5:d2:eb:24:ee:
ac:ef:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:49 2026 by rpki-client