
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json)
Hash identifier: 9dg/YPpkTdMbXI36G2klmntS7pKa9FZQ3DIN8yi/1QA=
Subject key identifier: 52:39:4F:68:72:01:6C:56:5B:A6:20:22:C1:FF:27:FE:F9:AE:4B:EE
Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
Manifest number: 024A
Signing time: Fri 25 Sep 2026 02:26:47 +0000
Manifest this update: Fri 25 Sep 2026 02:26:46 +0000
Manifest next update: Fri 02 Oct 2026 02:26:46 +0000
Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: vXcH/kYXUmjq8ghb0t7PzF43qMszyyypQjEjFTJz/HQ=)
2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: cutsButNN4vD7PlDi3ED+TD0SRxebGD6KjlE+3nvyoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Validity
Not Before: Sep 25 02:26:46 2026 GMT
Not After : Oct 2 02:26:46 2026 GMT
Subject: CN=6ab5dbe7-2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:ac:4e:09:fd:48:23:cd:68:3d:0a:11:b2:
88:fb:54:7b:32:1e:f5:e7:7a:fe:d1:9b:5c:8e:e8:
de:f9:41:ef:29:46:3c:bf:b1:e3:d1:42:d9:8c:6f:
18:5e:be:6f:8e:88:90:12:7c:e7:c1:75:fc:d9:92:
e2:93:ba:da:3a:4d:02:1c:78:e3:4c:d2:aa:3d:5d:
5a:e5:1d:c4:9f:99:d9:32:bf:e0:3d:16:17:af:c4:
02:a0:0b:b8:da:65:cd:1e:80:70:3e:5f:12:e8:55:
f4:5e:b4:07:02:ec:5c:aa:48:fb:2f:ab:37:4d:83:
65:b9:ad:a0:9f:7a:cc:53:5c:fd:ce:b2:41:45:8c:
21:f7:36:cc:17:62:fd:5c:93:8c:fc:27:51:fc:3b:
6c:dc:68:18:dc:6e:f2:10:0b:19:ff:7c:ba:fb:84:
6c:58:b7:b9:88:d4:f2:22:90:b4:bc:bf:ae:99:75:
3f:b0:f0:9b:3a:c3:a6:b8:b7:d1:5d:5c:9f:24:90:
a7:3f:a6:bd:57:63:49:57:39:80:e0:0f:b8:15:f8:
25:21:9e:21:f8:e9:0e:75:25:2e:d5:37:70:65:5b:
88:df:1f:d3:4c:c9:21:a3:38:48:aa:0f:6a:71:cc:
53:90:fe:ed:9e:c0:1f:a1:0c:cd:05:66:17:0a:4c:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:4F:68:72:01:6C:56:5B:A6:20:22:C1:FF:27:FE:F9:AE:4B:EE
X509v3 Authority Key Identifier:
keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:7f:75:51:e0:ce:35:d5:fe:e1:8e:57:b5:c3:ea:92:a9:
46:d7:07:39:08:2e:42:7f:fc:fa:47:d4:b6:49:fb:84:27:5c:
96:57:99:35:9b:2d:5e:6a:e4:86:8f:16:d9:94:37:45:ab:aa:
bf:05:b4:17:7d:0a:19:74:0a:b4:35:87:68:56:c5:77:91:1d:
d1:16:8c:70:a2:33:30:27:bf:d3:73:0f:1d:e3:8c:88:b6:00:
29:0e:36:ba:38:81:41:b9:c8:3d:32:4f:57:39:ec:85:b0:38:
2f:f8:b9:87:d2:6a:e1:37:0a:65:f7:4a:1b:d6:f2:07:a9:4d:
59:fa:df:f8:f4:16:37:51:09:1e:cf:dd:21:28:43:09:30:dd:
1f:7d:bf:1b:9e:ef:3a:d6:ee:3d:88:88:16:b2:1c:f0:b7:5b:
33:79:d6:66:a1:2a:8f:59:47:8c:4d:5b:d9:ea:0e:00:6c:86:
f3:43:0d:b1:72:c2:ba:5d:b4:49:87:96:da:fd:eb:1c:5f:cd:
0e:6d:cc:01:62:1a:48:2c:ef:dc:d3:34:24:e9:3e:81:5f:f5:
59:80:b9:1b:c3:33:1d:a8:d3:3b:02:51:4a:e7:da:9e:b1:d1:
51:d0:9d:81:3b:15:ab:62:a7:91:2d:b7:88:41:95:7e:df:29:
6d:58:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:10:13 2026 by rpki-client