
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
File: xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft (raw, json)
Hash identifier: LrUIsikcFZFkVm3TQz3uT2IcYok0qcENfEaHrtLF+hQ=
Subject key identifier: 93:C6:AE:71:ED:0A:97:6F:49:E5:A6:B9:F0:5E:DF:10:CD:9F:8D:7F
Authority key identifier: C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
Certificate issuer: /CN=A913C68B/serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
Manifest number: 02B2
Signing time: Tue 13 Oct 2026 03:07:09 +0000
Manifest this update: Tue 13 Oct 2026 03:07:08 +0000
Manifest next update: Tue 20 Oct 2026 03:07:08 +0000
Files and hashes: 1: xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl (hash: NmzbdD9ob3nQezCzcbjbT1VNCI1P2An4nufrStXZ2dM=)
2: BDE8001C1DDC11F19EDFCAE80F3D8C67.roa (hash: 8F8BmpcqqNwCt1bx4x79r5JtxIiJgA0CKQxMbNzF+xQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C68B, serialNumber=C4D8BDA7B8BE4310666F36F4CC2AF444F60FA323
Validity
Not Before: Oct 13 03:07:08 2026 GMT
Not After : Oct 20 03:07:08 2026 GMT
Subject: CN=6acda05d-0f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:b7:8c:45:a0:3a:3d:11:4b:61:d9:2f:06:
c4:5c:31:f1:f4:b8:5b:50:1c:16:b4:63:dc:58:ab:
39:23:bc:49:6d:c4:1d:37:d0:21:ef:8d:5d:09:7f:
66:12:7f:79:01:32:61:d6:dd:7b:61:dc:53:0e:84:
ef:13:81:8c:ad:be:2c:f0:b4:61:64:49:bb:c2:a5:
35:1b:3f:d9:00:26:41:42:27:77:cb:69:0d:6d:fc:
13:d3:4e:29:d7:ce:31:01:28:1b:49:89:91:0a:87:
86:f1:61:df:a3:e7:c6:e2:04:60:d1:4e:c3:bc:cf:
b2:f2:a9:36:66:49:3d:d5:73:48:ec:51:b8:03:c3:
48:63:ac:56:54:74:59:dd:4d:09:49:59:dd:94:be:
87:87:a7:61:ad:e3:7f:a7:ee:2b:0a:72:c9:6f:46:
ce:f8:f4:b5:1c:a1:83:46:f6:3d:2f:c2:c5:32:d6:
59:db:77:39:60:ba:24:6b:e0:5d:7b:05:21:b7:28:
80:79:48:69:89:bb:05:8d:ff:ab:c4:85:2a:b6:ed:
75:20:2c:c7:8e:e6:b3:7e:83:39:01:fb:9b:69:b4:
53:ff:7e:e8:b0:b8:56:7e:96:cb:d7:1e:65:d4:44:
f1:49:d5:2d:2f:2d:4d:bf:4a:59:ba:91:76:1e:cf:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:AE:71:ED:0A:97:6F:49:E5:A6:B9:F0:5E:DF:10:CD:9F:8D:7F
X509v3 Authority Key Identifier:
keyid:C4:D8:BD:A7:B8:BE:43:10:66:6F:36:F4:CC:2A:F4:44:F6:0F:A3:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNi9p7i-QxBmbzb0zCr0RPYPoyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/xNi9p7i-QxBmbzb0zCr0RPYPoyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:ff:57:41:6b:2e:52:50:9e:e5:84:cf:11:69:02:34:76:
a7:09:5f:76:a9:d9:1a:36:11:f0:6c:09:8c:a8:bd:8c:22:54:
e4:c0:1a:f3:c7:a5:ef:01:51:78:05:02:b1:e3:f6:74:f9:14:
24:5d:e1:ec:c3:ff:b0:3a:7a:90:6d:17:9a:94:f5:62:67:3e:
a8:06:10:cc:36:af:1b:51:e7:68:9a:86:05:ec:9e:d5:94:98:
6a:0d:80:24:d9:58:a1:48:9d:06:bc:3e:31:6a:cd:8a:fb:3d:
d1:14:ef:55:1a:fa:65:fd:d6:3a:c1:11:e6:6b:bb:cc:a0:a5:
39:49:55:b2:d4:ea:b9:e2:d4:d8:7b:e7:7d:b7:2d:54:71:ae:
e7:63:f9:20:ef:00:e5:a7:60:dd:f3:34:bf:67:2e:44:3a:f3:
aa:12:e5:dd:52:6b:48:06:32:5a:8e:06:aa:2d:69:12:6a:28:
4b:8d:75:b9:7a:2e:2b:07:84:3f:6c:53:86:86:70:e6:9e:f9:
46:10:34:9f:00:90:22:7c:e4:2f:e3:7c:90:25:d2:e6:23:25:
bd:a5:a4:bb:aa:55:72:d2:34:24:59:3d:bd:be:7a:b3:4b:26:
1e:bf:3f:a0:22:1b:d8:e3:17:eb:e4:96:bf:c0:ff:35:91:bd:
fb:b8:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:16:26 2026 by rpki-client