
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier: hOjoh3/1hzCb/jQOssD2wG3RBfcKdfOhKtg0WiEvuJA=
Subject key identifier: 54:DB:16:17:CC:21:1D:65:AE:FF:6E:3B:3D:FD:68:43:E4:CF:94:99
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial: 13D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number: 13C8
Signing time: Wed 22 Jul 2026 17:03:24 +0000
Manifest this update: Wed 22 Jul 2026 17:03:24 +0000
Manifest next update: Wed 29 Jul 2026 17:03:24 +0000
Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: zzT67J0gSOpr0q+1hbGgY4i+sDuDiDTYw2d7KO5AmXM=)
2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 4+E5E8FScsGLPxnpqLaTouQdBYC+cZmSDj6CuV7yD1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5076 (0x13d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Validity
Not Before: Jul 22 17:03:24 2026 GMT
Not After : Jul 29 17:03:24 2026 GMT
Subject: CN=6a60f7dc-30e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:a1:99:70:25:15:65:f6:5b:a7:e7:12:25:
b6:7c:3f:64:ba:a3:9a:7b:f5:88:93:f5:30:eb:d7:
2b:3c:f9:70:37:a6:48:9c:7c:a5:3f:47:57:c6:39:
0d:26:51:46:89:96:e6:8e:de:a5:7f:60:80:18:ab:
e0:54:db:7f:62:78:8e:53:15:5e:6e:4f:8b:b9:07:
62:f4:d3:4c:d2:90:ee:e7:c6:f0:56:ee:3c:99:c7:
8c:9b:ba:0f:a5:f7:1a:4d:59:98:ff:fb:dc:c9:38:
b3:25:8e:f1:f5:1f:98:f9:86:55:cc:6c:5c:b0:a4:
39:01:38:17:b5:83:48:d3:76:70:c0:d3:8b:e7:61:
ca:fc:ed:cc:f7:ba:c6:7c:3a:1e:40:c0:fd:e7:e3:
9a:a5:e2:65:37:ac:f2:b4:cd:56:a9:0c:f1:c5:67:
bd:73:33:64:48:26:26:3a:e1:74:6d:8c:87:5e:fc:
56:94:c6:40:5a:92:02:15:88:41:ac:44:83:40:2f:
34:df:6a:de:8f:8a:d2:d4:72:17:fa:38:ed:04:cc:
3e:37:36:25:7f:b0:fa:52:d3:4f:b2:3b:fd:b7:56:
c7:2d:a8:d7:31:e1:c9:10:88:b1:6a:27:0f:5b:21:
36:e7:bf:57:7d:d7:73:4d:02:a2:12:d9:fd:c9:2b:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:16:17:CC:21:1D:65:AE:FF:6E:3B:3D:FD:68:43:E4:CF:94:99
X509v3 Authority Key Identifier:
keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:a6:71:78:82:4e:d6:3c:be:d9:8e:ad:af:c6:e5:85:13:
09:cb:f5:8a:66:39:39:1c:5a:4a:bc:39:13:88:9e:8a:be:5c:
07:f5:0f:cb:e1:46:b5:80:81:9f:a5:ee:56:d5:d6:a0:40:91:
db:3b:81:7b:93:57:ae:ae:15:c3:df:6a:82:3d:e7:4a:2c:68:
a7:5e:f0:a4:26:93:0d:c7:c0:81:bd:57:0b:cd:8b:cc:6a:28:
42:9c:25:41:ce:0b:64:93:7f:fd:5c:a9:68:65:66:3a:5a:f8:
df:16:03:9a:e2:4f:5e:80:fc:88:d1:f2:31:e0:f3:72:21:c6:
7b:0d:95:76:29:ca:bc:64:a1:23:b5:4a:0a:81:7b:59:5b:f6:
10:be:e0:18:77:3c:95:ec:9c:78:c7:b5:51:92:b6:49:7a:33:
89:1e:e6:06:63:0b:60:e7:70:4e:b7:06:22:22:c6:ce:6a:37:
1e:b9:20:e8:99:ee:5d:36:88:f9:7e:e8:bc:fd:e9:b4:57:ba:
84:4d:c1:8d:46:12:6a:8d:ae:2f:ad:74:94:63:e3:7f:b1:9c:
db:ea:27:f6:f4:4d:7d:6f:81:1e:b1:37:2c:b9:31:aa:2e:b5:
98:2e:c7:4a:0a:49:ce:5b:9e:94:34:37:5e:c0:67:0f:aa:f0:
3f:ab:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:37 2026 by rpki-client