
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier: taz9rW2zEFyJ58dDnGcCiAiYqxINhtQIHM34aps0TEc=
Subject key identifier: 8B:95:55:38:6D:73:83:9E:13:FD:BD:5B:C5:45:B4:E8:E5:9E:0A:EF
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial: 0F30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number: 0F09
Signing time: Wed 22 Jul 2026 17:48:04 +0000
Manifest this update: Wed 22 Jul 2026 17:48:03 +0000
Manifest next update: Wed 29 Jul 2026 17:48:03 +0000
Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: QR1IWZGiVbPj5Sxyq72nRos7zVBtwpgPJz0Mfd23bsU=)
2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=)
3: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=)
4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3888 (0xf30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Validity
Not Before: Jul 22 17:48:03 2026 GMT
Not After : Jul 29 17:48:03 2026 GMT
Subject: CN=6a610254-82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:1a:d4:d2:35:c0:c1:ba:e6:01:35:e8:45:
60:82:0e:0f:9b:c3:90:4e:4e:3f:be:3f:69:f1:9d:
aa:24:1e:aa:b0:ae:be:ad:cb:ea:bc:4e:d9:37:3b:
ec:92:2c:26:0c:9d:c7:ad:b2:61:70:36:9a:d7:5d:
0a:23:1e:de:3e:f4:e3:68:ef:93:21:a3:48:09:88:
d3:fb:d4:fc:c2:2e:dc:d1:5d:8d:e9:63:4c:9b:a5:
97:00:fa:e8:c2:ae:74:c2:42:90:1d:ef:37:9c:43:
2e:e8:b0:3a:73:e2:85:52:cf:6c:fc:50:42:25:66:
4a:73:c1:95:53:e2:5c:08:93:b6:98:10:d9:1f:f1:
fa:2c:f8:4c:ac:9f:b7:7f:b7:90:7e:23:72:2e:1b:
3a:32:c8:92:82:55:c9:26:05:67:13:fb:54:b4:b4:
d4:78:47:ad:a3:df:d2:01:ca:e9:a2:97:04:c9:3e:
13:0b:f7:7c:71:bc:44:22:ae:0d:3f:5f:09:fa:f0:
a6:55:aa:36:72:4f:e5:64:71:9a:45:b6:2f:c6:03:
87:8a:15:a7:98:fb:39:43:62:06:fe:a1:99:4e:23:
1b:d2:21:4d:2a:4e:e3:55:a7:3b:d2:35:65:73:72:
bf:15:49:9d:c8:2c:24:85:37:92:df:a0:89:78:43:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:55:38:6D:73:83:9E:13:FD:BD:5B:C5:45:B4:E8:E5:9E:0A:EF
X509v3 Authority Key Identifier:
keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:9f:b4:b7:6d:05:fa:fd:6c:c7:61:b5:bd:07:58:33:f0:
f9:b1:c7:c2:e2:43:b2:9c:f5:35:b4:bb:9c:eb:86:03:37:e1:
e8:bc:b2:92:e5:85:40:e5:2a:2f:d4:25:9d:22:9e:02:4c:10:
13:9b:57:7e:19:27:92:b7:86:38:3f:76:16:03:3d:c1:86:ae:
47:10:c1:96:3d:f4:d4:9a:67:79:1f:f6:54:08:ab:81:75:0a:
38:07:47:ae:9c:2d:d6:2e:7a:18:c5:15:0c:08:6e:be:60:7c:
91:35:1a:cc:84:3d:f7:25:ca:5b:41:d5:e4:bf:f4:c9:1e:09:
7b:02:29:f7:36:49:61:12:a8:76:f3:04:d8:dd:9a:3e:50:70:
80:45:8f:f4:29:9e:8a:bc:7e:2f:4b:c7:c3:b2:9b:45:dd:12:
6e:98:2f:5a:06:58:57:0b:55:24:be:81:1f:b5:65:0d:8f:99:
bf:ee:af:6e:e8:c5:c9:ea:6a:36:22:06:1c:49:47:b3:48:78:
ca:6a:4d:14:84:87:3e:d9:93:65:45:79:43:76:1b:00:f6:60:
9e:44:50:ce:04:87:86:56:ac:90:e3:97:88:0e:cb:77:89:8d:
df:64:c6:bd:94:00:a7:e8:c8:07:d3:9f:a3:76:cc:c5:7b:4e:
62:48:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:02 2026 by rpki-client