
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json)
Hash identifier: nNpFm7NzOkue/NvfiS7Mfq2PEAgpS5uMHuXbuFVYUl0=
Subject key identifier: 13:C4:4C:C9:E7:E1:08:5F:39:50:4F:A3:13:79:5F:AE:3A:3B:76:AE
Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Certificate serial: 0D2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
Manifest number: 0D1F
Signing time: Wed 22 Jul 2026 18:27:23 +0000
Manifest this update: Wed 22 Jul 2026 18:27:22 +0000
Manifest next update: Wed 29 Jul 2026 18:27:22 +0000
Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: J8n2WXRe2EUoQvV7Xhz1QFsF0/W0OnYsSfDCE94Rpdw=)
2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: iq52SS5rKgtAhBHnN907lIALCsokLuoxuGMG7jMGP+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D
Validity
Not Before: Jul 22 18:27:22 2026 GMT
Not After : Jul 29 18:27:22 2026 GMT
Subject: CN=6a610b8b-000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:19:85:96:62:51:09:1b:49:b0:17:70:eb:
2d:11:4b:eb:09:23:ba:02:c2:d5:60:68:8e:e2:7e:
ec:be:db:aa:57:81:f9:3b:8d:df:03:e4:77:1e:08:
c7:89:d4:37:58:6e:55:dd:b6:8c:4e:4b:5e:0e:db:
16:33:cb:00:fb:6b:b8:62:8a:55:e0:cc:cf:04:75:
5a:ac:36:8f:6d:32:88:5d:5b:4d:97:0e:62:3a:a9:
12:29:44:b5:5a:c3:9a:d9:f7:3e:db:a6:98:b4:9d:
ea:1c:d3:ab:96:fe:20:83:47:37:96:7f:34:e3:4b:
43:59:ac:6b:ea:14:b6:e9:e2:1c:6f:c1:00:75:cf:
0a:57:ea:a3:67:ec:b9:d0:14:54:22:84:0c:11:ba:
81:42:cb:56:cb:ba:48:3e:4e:0f:fd:29:37:3e:c9:
e6:10:f2:a9:67:d9:fb:fb:31:ed:46:92:3e:d2:cb:
46:6f:ad:e8:d7:f4:c9:bb:0d:44:5f:15:17:c6:a5:
68:2b:38:29:9a:51:92:b2:55:30:97:51:3f:b5:18:
e9:2b:98:be:db:03:aa:52:6f:6a:34:fb:e3:64:0c:
92:5b:fa:4d:e3:a9:67:7e:d8:d8:ec:f2:16:16:68:
3a:4b:9d:32:6b:5e:17:ae:bc:3f:7a:80:b5:6c:46:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:4C:C9:E7:E1:08:5F:39:50:4F:A3:13:79:5F:AE:3A:3B:76:AE
X509v3 Authority Key Identifier:
keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:ca:2e:6e:67:2a:90:27:f9:75:20:78:5e:2a:75:07:47:
a4:58:e6:55:56:43:40:6a:29:0c:27:53:3b:b5:65:2c:dc:82:
77:d9:4b:3d:5e:79:65:fd:0d:c1:9f:26:4b:60:6c:ed:ff:f8:
31:d4:55:4f:c1:21:83:47:94:6c:e2:4c:0e:0b:53:e6:d8:a7:
5a:3d:6d:c3:72:fd:1c:45:c9:4b:f9:02:08:5b:60:a5:90:d7:
64:87:08:1f:b8:d6:4b:95:92:e5:48:c1:86:53:6a:b0:8e:74:
06:8c:8b:a6:3a:cb:e3:9a:61:78:35:3b:11:3c:2d:5d:ba:df:
0e:97:b5:66:93:af:73:30:13:ca:04:bc:86:19:bd:d5:bb:0f:
f9:bb:01:ac:9b:01:4e:5d:fa:a5:59:3f:32:3c:b8:e2:84:58:
12:0c:30:e3:50:ce:13:e9:66:60:35:5b:b8:e5:fd:e6:d5:cf:
98:08:21:4c:3b:9b:e0:77:94:67:3e:c6:66:af:7b:1d:63:a8:
63:42:24:43:7c:0d:c6:ae:2c:9c:4f:a0:7d:fd:8c:9d:07:65:
c1:36:07:92:74:77:6d:38:71:e3:15:0f:f6:e7:8d:09:c0:41:
14:72:60:d2:10:85:4f:db:27:15:d6:d5:d8:dc:3e:66:f9:6f:
30:22:1f:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC
NkIwMzFBMkQwHhcNMjYwNzIyMTgyNzIyWhcNMjYwNzI5MTgyNzIyWjAYMRYwFAYD
VQQDEw02YTYxMGI4Yi0wMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PoZhZZiUQkbSbAXcOstEUvrCSO6AsLVYGiO4n7svtuqV4H5O43fA+R3HgjH
idQ3WG5V3baMTkteDtsWM8sA+2u4YopV4MzPBHVarDaPbTKIXVtNlw5iOqkSKUS1
WsOa2fc+26aYtJ3qHNOrlv4gg0c3ln8040tDWaxr6hS26eIcb8EAdc8KV+qjZ+y5
0BRUIoQMEbqBQstWy7pIPk4P/Sk3PsnmEPKpZ9n7+zHtRpI+0stGb63o1/TJuw1E
XxUXxqVoKzgpmlGSslUwl1E/tRjpK5i+2wOqUm9qNPvjZAySW/pN46lnftjY7PIW
Fmg6S50ya14Xrrw/eoC1bEZwwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBPETMnn
4QhfOVBPoxN5X646O3auMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1
RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3
a1pZdllPdmxxX3kyc0RHaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgd/KLm5nKpAn+XUgeF4qdQdHpFjmVVZDQGopDCdTO7VlLNyCd9lLPV55Zf0N
wZ8mS2Bs7f/4MdRVT8Ehg0eUbOJMDgtT5tinWj1tw3L9HEXJS/kCCFtgpZDXZIcI
H7jWS5WS5UjBhlNqsI50BoyLpjrL45pheDU7ETwtXbrfDpe1ZpOvczATygS8hhm9
1bsP+bsBrJsBTl36pVk/Mjy44oRYEgww41DOE+lmYDVbuOX95tXPmAghTDub4HeU
Zz7GZq97HWOoY0IkQ3wNxq4snE+gff2MnQdlwTYHknR3bThx4xUP9ueNCcBBFHJg
0hCFT9snFdbV2Nw+ZvlvMCIfIQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:06:12 2026 by rpki-client