
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
File: XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json)
Hash identifier: 0wxGSgVepwSajylzGU48WPDFhQAQTrAYrOxwRDVF8XM=
Subject key identifier: C7:D5:E2:F4:C8:97:CF:62:DB:FC:7A:C8:55:CE:B9:70:CE:7C:24:30
Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Certificate serial: 017F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
Manifest number: 0173
Signing time: Fri 25 Sep 2026 04:57:17 +0000
Manifest this update: Fri 25 Sep 2026 04:57:17 +0000
Manifest next update: Fri 02 Oct 2026 04:57:17 +0000
Files and hashes: 1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: 1YNpr4pe9lI+MnriZs7YJ0+jkh8wXI1L6HPJoZSX0U0=)
2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: 6FOSG+PDOX8IQ8IkU4F+r2ZxK7Ap4wqnXAN3PEPi5FM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl
rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Validity
Not Before: Sep 25 04:57:17 2026 GMT
Not After : Oct 2 04:57:17 2026 GMT
Subject: CN=6ab5ff2d-2001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:57:a4:f6:1e:3b:40:32:ed:6c:0c:f5:54:
5d:19:a1:f9:bd:7a:96:36:c6:38:3e:d2:6b:2c:d1:
8b:50:d6:c4:65:b7:0b:7a:90:23:66:69:4a:20:c3:
57:35:a9:b9:8b:95:39:aa:1d:ef:f9:2c:9d:7d:00:
e0:0f:22:43:14:4c:b2:7d:b2:44:64:a6:07:b0:e6:
66:7f:16:bb:ed:ba:7a:ee:e8:bb:d1:65:33:07:a4:
0b:48:87:c8:6b:a9:44:08:83:7f:67:d7:4c:9a:3d:
c1:85:e5:e5:4b:1d:06:9d:a6:5e:5f:33:05:60:0d:
7d:94:f8:4b:8d:ba:64:f1:b7:1e:62:4b:dd:66:1a:
94:c5:e0:00:0b:c7:6f:fa:cb:76:65:47:df:5b:32:
90:f7:a4:6b:27:38:1f:98:38:fa:08:f2:e7:59:9b:
e1:c4:1b:1b:76:68:87:24:74:15:98:67:07:f2:51:
16:f7:8e:77:0a:bc:d4:b5:d9:87:a8:6d:d4:e6:a1:
51:35:d8:ce:c1:99:8b:67:3c:50:39:1c:f2:22:17:
fb:cc:1b:a2:10:18:1d:70:ac:a1:e1:71:d9:78:63:
34:9e:4a:90:35:0d:f0:59:20:e3:ad:f4:f4:f7:39:
42:c0:b8:4f:12:ba:49:2b:38:c3:a1:20:5a:a1:2d:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:E2:F4:C8:97:CF:62:DB:FC:7A:C8:55:CE:B9:70:CE:7C:24:30
X509v3 Authority Key Identifier:
keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:90:be:89:2b:4b:ec:ee:ce:46:14:e7:70:93:ca:4f:9a:5c:
a5:e8:6c:94:4c:a9:d0:59:da:e3:b7:ac:c3:61:13:2b:99:9f:
40:87:76:e6:ec:82:42:c2:7e:87:ae:50:54:83:1e:6f:88:2a:
79:6e:0c:06:bf:1d:cd:ca:e4:a3:ca:31:e2:b7:ea:b7:dc:6a:
a3:f3:b4:87:58:b1:3b:9a:87:ed:50:0d:e8:3e:0f:1f:0c:15:
3a:cd:3a:f1:9e:96:28:e8:61:90:81:96:35:f6:c0:b3:d6:eb:
11:34:3f:3e:67:c7:c5:25:6f:8e:ac:7e:f2:53:9e:28:31:7b:
74:3d:13:d9:63:2a:4b:1f:c2:8e:f0:a9:aa:2f:2e:9d:af:d2:
48:56:96:4b:15:4d:00:9e:dc:93:4f:9c:97:1b:d4:bd:4e:43:
25:e9:ab:7b:90:df:43:a7:4a:f6:6e:27:87:b9:28:9c:45:92:
ea:b0:17:7a:98:0d:3d:76:7b:f4:ec:23:b4:0d:44:67:e0:f8:
b7:2f:44:10:49:90:da:e0:e0:96:60:be:81:d4:64:05:ac:b0:
93:12:17:e3:da:d6:f8:df:2c:dd:53:cd:91:2b:82:67:d3:4b:
78:74:2e:26:22:41:51:73:6f:8a:68:8d:2c:c0:c0:fd:dd:30:
f2:7f:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:00:50 2026 by rpki-client