
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier: bvyopxlbO7WE676hdhaRTf++Xrm97BJbXNqXwlJqVO8=
Subject key identifier: 69:CE:5F:DD:86:E5:15:78:39:BE:82:26:77:D2:6A:AF:82:48:1C:AF
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number: 0751
Signing time: Fri 02 Oct 2026 22:07:14 +0000
Manifest this update: Fri 02 Oct 2026 22:07:14 +0000
Manifest next update: Fri 09 Oct 2026 22:07:14 +0000
Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: Y8/7HskI+eywvYiHwFrnJFkNBgncMpk5IUluCOYqatg=)
2: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=)
3: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Validity
Not Before: Oct 2 22:07:14 2026 GMT
Not After : Oct 9 22:07:14 2026 GMT
Subject: CN=6ac02b12-93d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:b4:a1:b2:aa:3d:75:1f:99:b4:86:76:f6:
14:de:85:ce:d2:df:bd:c3:2c:98:7a:0f:b4:5e:7f:
4d:fb:83:f1:40:66:d6:18:69:0e:91:cf:5a:d1:e1:
fd:33:ee:a2:55:5f:15:1d:94:2e:ce:37:7a:97:8d:
02:c4:a4:ac:14:51:5b:10:a4:22:a9:37:e5:9f:e3:
ca:9b:a2:83:44:b1:e2:fe:d3:ee:6e:7e:6d:cc:e2:
95:08:6e:d5:b0:1c:87:df:de:33:6d:75:15:e8:29:
99:14:c0:bc:65:11:13:8b:0e:93:b3:51:75:8a:bf:
9c:8a:ad:cc:e4:bd:db:04:4c:96:54:aa:3a:1b:0e:
6f:e7:6e:fa:0b:8a:f9:0b:7c:7a:56:92:2b:d0:b1:
10:e1:58:52:b2:0b:e5:12:9d:6c:3b:67:0b:14:60:
fb:83:16:ba:d2:98:f9:b6:79:d5:18:54:e9:9d:4d:
dd:83:ea:49:4a:3d:1d:fd:5f:69:80:b3:fc:f1:27:
83:15:11:51:62:be:1e:e6:b6:6e:de:c8:62:2e:01:
c3:28:42:64:9f:fb:e0:c6:05:d4:ab:cd:e0:99:78:
0f:a5:db:79:9f:7c:99:30:d3:24:fa:e0:09:15:c2:
04:3d:8a:a7:7b:16:c9:d0:d4:6f:78:44:1b:00:33:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:5F:DD:86:E5:15:78:39:BE:82:26:77:D2:6A:AF:82:48:1C:AF
X509v3 Authority Key Identifier:
keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:04:22:f8:4a:3e:ec:12:3f:6b:81:d3:f2:f2:b3:77:58:
af:95:cb:a5:c7:7d:3f:88:c4:af:2f:d8:e6:d7:98:1e:c2:eb:
d0:80:16:b0:10:b5:62:57:52:53:9e:a8:7a:ee:49:88:f2:be:
13:66:46:77:69:10:f6:35:f3:8d:d5:e2:07:ea:14:91:7f:39:
23:1b:ae:d3:fb:e7:26:ba:dd:48:4c:be:7e:8b:61:e0:da:ee:
b4:e0:db:1c:d0:ba:9c:cb:9b:75:c9:51:79:ed:bf:e3:83:a7:
01:39:0a:6c:3c:65:69:6a:7d:3e:2b:99:87:84:47:e5:78:bc:
5d:08:dd:7f:58:38:71:1c:5e:ca:0f:00:16:bb:dd:0e:26:0e:
ce:1b:9f:14:a9:e9:8a:77:cf:b7:7c:f1:0d:bb:01:bd:99:e5:
79:06:40:e5:a8:8b:dd:34:3f:82:26:22:98:7e:6c:7e:25:2c:
2b:e4:83:e7:55:8f:df:e9:bd:39:1b:db:05:31:7b:1d:07:c9:
61:27:90:a1:98:21:30:34:66:c8:03:76:d0:e1:8f:3c:54:44:
3c:6b:23:7c:c7:86:e6:98:f3:23:30:bc:4c:49:09:c8:1d:1c:
4c:3d:f8:09:31:8b:35:fc:e7:02:3b:f2:0c:33:da:39:44:d2:
70:6b:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:50:05 2026 by rpki-client