
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: WYtYagjEIvosBYqDqhv4eTvdYNvcWdreYHH67WsczKA=
Subject key identifier: 4B:E8:11:EE:49:D8:13:D2:CF:7E:A8:6D:CB:40:8A:FE:65:7B:58:14
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 0277
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 0271
Signing time: Fri 25 Sep 2026 02:03:58 +0000
Manifest this update: Fri 25 Sep 2026 02:03:58 +0000
Manifest next update: Fri 02 Oct 2026 02:03:58 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: vY+pcN6YDxff+V5ZOAdgMY+xfoowSJv/6esaIme946o=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Sep 25 02:03:58 2026 GMT
Not After : Oct 2 02:03:58 2026 GMT
Subject: CN=6ab5d68e-0697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:97:99:3e:4d:1f:7f:06:1a:89:26:12:95:
e7:cf:58:a7:06:f6:54:f6:5a:34:73:22:81:57:f7:
c4:a3:3c:e5:79:25:32:ae:52:0c:41:e8:8b:fe:18:
db:24:49:77:66:61:33:f3:11:a1:9e:4d:97:44:8b:
35:9c:79:c5:d9:fc:9f:26:89:e9:88:78:92:53:94:
46:6d:19:4c:f6:ce:86:fb:fb:00:0e:09:74:fb:9a:
c2:3a:c9:a2:3c:c3:ff:77:5f:21:88:1f:ef:9d:66:
54:4e:42:c1:9a:30:40:df:9f:73:68:a0:ca:d2:de:
47:6c:74:56:78:0f:c0:82:84:cb:32:78:63:9e:f6:
bd:94:ad:29:5b:be:0c:df:dd:19:e5:7a:9a:20:51:
1d:fd:ff:e7:c6:b0:7a:cd:0d:a8:f4:4c:ed:6a:59:
44:11:99:24:e5:e3:97:b9:a7:04:3d:99:ce:3f:52:
2e:02:1e:c0:e5:f2:f7:42:ce:e7:da:92:25:46:08:
9e:a1:89:fb:33:e6:0d:17:65:e9:db:81:36:5d:e8:
9d:1a:13:70:6d:f2:1d:99:9f:d7:4a:88:0e:6c:76:
20:0d:3e:a9:54:61:71:b8:7f:14:a2:5e:73:c7:e1:
d2:9e:f3:e7:a9:54:55:79:53:e2:ac:c1:61:5c:71:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:11:EE:49:D8:13:D2:CF:7E:A8:6D:CB:40:8A:FE:65:7B:58:14
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:6b:cf:8f:86:99:91:3e:8f:ed:ba:0f:c8:57:6f:94:cc:
53:e2:66:1e:91:1d:00:82:d4:3c:09:1c:ab:a2:88:27:39:d8:
97:4b:57:17:c1:b0:2c:13:2b:4a:27:88:09:a8:90:07:a1:5f:
14:20:c5:10:25:c3:05:20:d7:f6:90:de:fc:da:ee:06:06:6a:
38:ef:32:4a:d3:9e:27:44:05:42:71:51:30:fb:90:64:91:d9:
03:87:44:be:de:25:25:57:51:de:bd:29:d0:4b:d6:61:93:27:
d7:f3:c4:3a:35:9a:cf:90:24:52:c2:39:55:37:4b:81:14:4e:
ad:62:23:1e:bd:8c:68:83:c7:aa:2b:7c:91:9b:2a:0f:1c:26:
dc:81:87:fe:8b:62:84:5a:b0:9a:1d:32:fd:7d:b6:a0:9b:34:
5b:12:ae:ef:fd:65:48:3b:7a:3c:40:21:6e:cc:b2:78:bc:eb:
e9:1e:e2:cf:ec:90:aa:a2:d7:ff:35:b5:35:fc:27:8f:93:fd:
b8:cd:c5:12:65:95:26:15:24:ff:4d:b9:12:4e:34:ad:67:a7:
7b:46:2d:50:9c:b9:e3:ed:f0:5f:85:af:97:58:4a:26:6e:77:
17:85:bf:b1:7f:8b:e4:be:07:dc:d5:ca:ee:7d:4e:44:0e:dc:
72:96:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:55:06 2026 by rpki-client