
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json)
Hash identifier: cTBJroZJPA39w0vjGA73JUkAfFv9E34nNVOBgsGrJjY=
Subject key identifier: 8D:D8:31:AC:F5:46:40:41:81:83:D6:A1:8D:A8:10:05:AC:3F:A0:8C
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
Manifest number: 01BA
Signing time: Thu 23 Jul 2026 05:22:34 +0000
Manifest this update: Thu 23 Jul 2026 05:22:34 +0000
Manifest next update: Thu 30 Jul 2026 05:22:34 +0000
Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: PjLZsNW6AqmDALk4W4fZNLf3QbPpz02gitzfah00ZMQ=)
2: 1481122880F311F186C940A665A30FBC.roa (hash: 4ayH0gEev6gZYOn7EYd/KpJzCLNlp7Ec6Z4t1lK6RrE=)
3: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: 6NTho7fCZ0RCJplWa2uFjJlS3TpkgTf4y4zdBtALNSM=)
4: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: VeqArLpmDZZ//i0Flmu4xn4xSflQptlUOOEitb5IssE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Validity
Not Before: Jul 23 05:22:34 2026 GMT
Not After : Jul 30 05:22:34 2026 GMT
Subject: CN=6a61a51a-e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:55:fc:8e:ff:32:21:f3:8d:58:52:33:f9:
53:eb:65:89:74:4c:39:38:c4:cd:7c:47:52:b4:64:
31:78:ca:95:b6:ea:bb:92:42:61:de:f8:4e:30:f8:
a7:3b:fd:62:f8:2e:82:9b:94:40:13:ee:27:28:99:
03:ef:74:87:3f:b1:a2:d3:c4:4b:5e:29:8e:b4:ec:
9d:71:d8:c7:0d:d5:da:24:ea:69:e6:b4:14:73:ae:
54:73:0a:cd:9b:b6:76:e3:1c:ff:20:40:30:ae:b7:
f0:41:fe:42:da:cd:b7:f1:a5:6d:91:b5:fa:40:69:
5e:5b:6c:d3:1d:20:ce:d5:ec:a1:73:85:1b:63:a9:
03:45:f9:f4:ae:cf:6a:ef:66:13:7e:10:26:97:5b:
e3:f2:64:d2:a7:5b:47:9d:66:fa:c0:42:5d:9c:65:
a1:44:f3:7b:0b:4f:5a:e7:04:26:cc:d5:62:75:16:
b6:d5:3f:9b:8f:9a:bf:25:bb:0a:38:65:88:e1:d6:
aa:7e:b8:9d:02:39:c5:e5:e4:44:6f:44:a7:a3:7c:
f2:ed:3f:0b:8a:21:5a:6f:af:db:a4:6b:f7:63:cc:
b4:3d:29:ec:40:d9:01:f8:9a:d0:b0:18:5d:30:7b:
a8:d2:22:0b:55:30:9c:86:e7:31:c7:94:9e:35:89:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D8:31:AC:F5:46:40:41:81:83:D6:A1:8D:A8:10:05:AC:3F:A0:8C
X509v3 Authority Key Identifier:
keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:92:eb:95:92:75:3c:41:9d:90:30:9b:10:63:7a:4e:40:
11:e0:85:11:99:e0:c5:50:52:b3:9b:2b:58:99:83:dc:09:bf:
9a:4d:ef:12:a5:13:1c:c6:89:46:5d:38:ec:3f:6b:9f:33:a4:
78:c5:04:57:e3:48:ca:01:51:ec:fe:13:03:ec:12:b2:0e:9e:
94:cf:0c:22:bc:55:f0:89:37:1b:49:de:0a:e3:8b:b9:80:b2:
d1:a3:1a:3a:2a:d3:dc:ae:ea:23:78:8f:bb:86:ae:65:bf:6b:
20:5d:9d:fe:f4:f4:a8:59:66:45:cd:03:4a:02:06:e6:6d:35:
80:06:1f:e3:4e:df:17:7a:1b:dd:5b:52:3e:d4:e1:9e:32:60:
bf:63:88:ad:65:aa:db:86:35:03:b8:60:85:78:ad:cb:49:b8:
81:a5:ca:72:e6:dc:1e:ea:87:46:b4:3b:c0:01:e5:7e:77:ff:
83:21:1f:2f:94:4c:21:18:88:af:ff:2c:41:96:37:dd:d1:39:
e4:2d:d3:e7:cd:b5:7c:75:36:82:61:5c:ad:2f:d3:13:ed:ea:
a9:ed:d0:a9:94:aa:47:cc:60:d7:a2:90:35:4c:0c:cd:95:04:
29:e9:f4:18:20:52:15:00:be:57:2f:93:0d:be:50:52:ce:ad:
8a:70:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:40 2026 by rpki-client