
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json)
Hash identifier: 9pmxR1gMDxJxDi0O6APhcE82kITfY0eq8S/K1N5zViA=
Subject key identifier: 6C:C1:53:9B:7F:6B:0E:F4:2F:D5:B8:E0:27:68:FC:E0:01:A1:B1:6C
Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
Manifest number: 0229
Signing time: Thu 23 Jul 2026 03:57:26 +0000
Manifest this update: Thu 23 Jul 2026 03:57:26 +0000
Manifest next update: Thu 30 Jul 2026 03:57:26 +0000
Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: 8lC+gtv94ud6IEhSGSFwSl5+21g1svfVZmhiCV6YaXI=)
2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: cutsButNN4vD7PlDi3ED+TD0SRxebGD6KjlE+3nvyoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Validity
Not Before: Jul 23 03:57:26 2026 GMT
Not After : Jul 30 03:57:26 2026 GMT
Subject: CN=6a619126-e22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:54:10:9a:4e:c6:18:0f:e2:a2:93:ba:db:
62:76:7b:bd:e9:c8:b9:ed:03:a3:83:90:ce:e5:63:
42:c1:45:f2:a0:dc:4f:bf:1e:42:c1:4c:72:68:40:
f8:09:87:05:56:04:b8:46:69:f1:14:7b:de:93:e0:
a2:be:e9:c0:84:7d:45:d7:24:01:6f:d3:8f:5d:4b:
d2:d0:b1:80:b6:84:f4:7c:e4:83:1f:31:d1:e0:f0:
87:39:1c:29:93:66:2d:f3:70:5b:b9:8b:1a:58:b5:
1e:b2:e9:cb:7a:48:09:6b:63:5d:fa:50:9b:6f:db:
4b:1f:5d:dc:cd:f3:2d:8f:d1:5f:9c:cf:3e:5c:9f:
1c:92:5e:88:88:75:e2:35:f3:08:81:c5:79:31:45:
5d:2b:f8:4c:0c:58:27:00:f8:75:f3:c8:df:2b:d8:
97:72:9c:9d:7c:d6:e1:d5:a7:3d:63:9c:83:cd:ed:
a6:ff:97:05:b1:54:5e:8f:70:17:d8:f2:8e:e7:5d:
2a:a8:ee:fc:01:f9:18:44:53:05:b2:b1:c4:5e:18:
43:0b:92:d0:28:89:5a:8d:00:86:12:3b:f2:41:82:
f9:de:62:75:ff:7e:44:91:74:9d:86:72:ab:ca:e9:
ac:d1:ad:f7:6f:0c:48:59:4a:dd:ab:74:3f:71:3c:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:53:9B:7F:6B:0E:F4:2F:D5:B8:E0:27:68:FC:E0:01:A1:B1:6C
X509v3 Authority Key Identifier:
keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:19:d3:ee:02:22:d8:2f:04:46:10:61:4b:1e:ee:43:75:
1d:bb:91:38:7d:f4:24:3f:7c:87:4b:28:11:86:6a:0a:1d:c5:
94:ae:6f:da:da:dd:d7:ea:cc:47:f1:59:d1:7e:84:03:6b:82:
a4:70:5d:a7:af:06:13:4a:fb:cc:55:46:d0:08:d9:4e:56:54:
e9:6e:f1:70:be:c7:e9:34:dc:1a:36:ba:35:80:c0:e0:ac:3c:
f2:4d:15:11:2d:86:bf:1d:cc:c5:9f:28:5e:c1:be:69:da:79:
6f:84:9b:7e:93:4b:1b:a4:58:f9:ed:12:df:c8:19:51:0c:6a:
67:b0:df:d0:12:53:d6:41:4c:b5:fd:f1:12:5e:b3:7d:d4:a5:
43:1d:3d:32:4e:b6:e3:0f:a9:ba:db:fa:60:53:37:81:25:ee:
ab:06:a4:ab:c1:5e:1c:62:93:d6:e4:7d:24:6a:55:df:c5:f8:
cf:1a:55:a1:00:88:45:fa:e4:74:0c:59:ba:10:e0:b9:95:08:
33:a1:37:ac:12:d4:e2:e1:8b:45:26:60:bf:1e:c1:10:ef:c4:
68:5b:03:52:d9:cc:1d:ee:82:3e:c1:ca:d1:d6:e8:fa:54:06:
d7:3d:ae:6e:cf:0a:74:d7:4b:9a:38:89:d5:ba:58:52:49:7d:
82:f7:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:24 2026 by rpki-client