
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier: rm/sXGYCKBO8JkpPeoy0tHrqGVXH8rOv30h5US/bQck=
Subject key identifier: 45:6E:A1:83:DC:53:D2:AB:FE:18:28:EA:3C:AC:34:16:34:F6:66:AA
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial: 073D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number: 072C
Signing time: Wed 22 Jul 2026 22:34:40 +0000
Manifest this update: Wed 22 Jul 2026 22:34:40 +0000
Manifest next update: Wed 29 Jul 2026 22:34:40 +0000
Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: FocwoF77CIHpikaKZIgo6lI4pBNXB0/IfEY+hkVIxjE=)
2: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=)
3: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Validity
Not Before: Jul 22 22:34:40 2026 GMT
Not After : Jul 29 22:34:40 2026 GMT
Subject: CN=6a614580-d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:36:12:df:8a:e2:27:6a:6e:29:87:4a:ab:4d:
52:f3:c5:1c:13:f8:74:3e:e5:91:95:cf:6b:f7:19:
7f:e0:92:01:a2:e6:eb:40:de:7e:43:90:22:39:ca:
c3:ab:ce:0f:15:54:f9:76:54:d1:ef:04:52:b9:26:
27:d3:30:be:d7:0e:57:3a:5e:b1:3d:bb:f0:8a:ad:
94:e2:e1:46:b0:29:45:f0:a2:cf:1e:04:d0:82:ae:
88:1d:a4:6f:6f:6f:bf:ce:2f:7f:0c:63:f5:68:3c:
32:f2:ab:2d:f2:94:be:49:34:fc:bd:9b:f9:e5:b0:
46:72:ae:f3:68:72:b9:48:f2:04:ac:7b:19:d4:0f:
01:45:f9:64:d9:f3:48:29:17:e5:f5:f1:87:47:e1:
d7:db:ee:2e:2a:f3:6f:70:ab:9e:81:19:39:47:6b:
c8:47:59:d1:64:f3:95:c7:3d:c2:3e:6e:fb:d0:72:
bd:0e:29:b1:6a:a7:17:8f:95:be:a3:2c:1e:09:6b:
b2:38:f5:f1:e0:17:d3:99:1d:d6:57:5a:6b:84:35:
8e:9e:6d:83:2a:c5:34:d1:a9:13:74:f6:02:a5:6d:
8b:a9:05:2e:e7:c1:48:ff:22:64:8e:2a:95:1f:43:
21:31:10:72:9c:e5:c0:f1:27:c7:3b:a9:fa:0b:4e:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:A1:83:DC:53:D2:AB:FE:18:28:EA:3C:AC:34:16:34:F6:66:AA
X509v3 Authority Key Identifier:
keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:67:c8:1c:13:91:24:c0:07:71:f9:60:ab:f3:a6:c9:7d:04:
f9:49:58:02:0d:29:76:19:f9:cd:e0:34:b5:b8:8a:56:2e:db:
02:70:33:92:0d:51:a6:d6:21:08:40:b2:e2:70:15:6d:40:5b:
dd:ce:14:70:00:17:f3:db:38:ee:29:4f:09:3b:af:66:d8:b5:
79:ad:5a:de:ad:15:e2:f6:4c:e1:4e:5a:71:67:81:3f:67:b8:
98:46:b4:26:b0:3b:cc:5c:05:30:0f:c6:08:9f:3a:0a:b2:97:
d6:78:30:1e:59:a0:f0:22:8c:90:44:73:27:b3:5d:da:9f:b9:
a4:c7:f7:6f:ac:2b:30:6f:74:55:6f:d4:5e:4b:6d:7b:ac:dc:
74:8d:07:e2:b1:5e:a4:78:47:ea:45:b4:d0:57:53:3e:b3:d5:
6a:59:cc:c8:1f:fe:15:74:e6:c5:7a:91:72:bb:16:f5:dc:f0:
cc:b6:c7:a9:63:72:f6:1a:6e:9e:89:19:52:a4:a0:6a:22:36:
dd:f9:ec:31:43:e6:35:b5:94:d9:2a:f7:b3:b6:aa:7e:f0:97:
a1:6b:d6:85:7c:d6:99:b3:35:9a:22:c3:22:a6:b2:77:fc:e0:
3e:1a:63:ae:f1:b6:a6:91:58:b7:ff:c6:3d:b7:55:6b:01:41:
d5:53:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:39 2026 by rpki-client