
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File: X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier: sfOaSSEu3IMG20UMXRe5+D59/efCm+D6HfmVJ7Mwu4k=
Subject key identifier: BC:02:65:FE:10:F7:50:93:70:85:80:85:E3:42:1B:85:B8:97:ED:69
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer: /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial: B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number: AD
Signing time: Fri 25 Sep 2026 07:12:43 +0000
Manifest this update: Fri 25 Sep 2026 07:12:43 +0000
Manifest next update: Fri 02 Oct 2026 07:12:43 +0000
Files and hashes: 1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: ckpCNPzqUDeroLkxPlJoM21WHPoSSyDDVcmQ1jfwYrA=)
2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: 4i/uUW0EPbovmguUA9d/xrDXtJ/F/0zbgO41Ho8dU5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Validity
Not Before: Sep 25 07:12:43 2026 GMT
Not After : Oct 2 07:12:43 2026 GMT
Subject: CN=6ab61eeb-e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:59:66:eb:3c:ca:dc:ec:96:44:73:97:6b:
3a:e5:01:54:46:6b:7b:21:0f:9b:21:c8:57:4b:78:
84:34:0b:d7:29:23:f7:35:4c:57:84:b2:c5:f0:46:
f6:73:fe:bd:54:dd:e7:29:64:0e:d4:80:0e:88:74:
d5:d1:9e:d1:71:57:3f:d8:08:9c:a9:79:af:d2:84:
6a:d3:03:34:55:e8:e6:eb:f2:ca:64:7b:e2:72:34:
2a:37:e7:43:1b:b1:2a:e3:1c:6f:9e:a3:a4:b6:e7:
62:df:5e:ec:9a:7e:2a:34:35:4d:95:d3:0a:45:e4:
ca:af:58:d0:e0:87:63:9c:e1:9b:66:d8:e7:b3:46:
1b:fc:d8:6e:f2:06:91:90:1a:30:ce:9e:73:38:33:
7c:9f:60:4d:be:cb:94:da:72:40:c9:f0:b7:57:d1:
f5:e1:d0:b1:fb:5a:87:b1:cb:5e:06:d9:06:70:56:
ac:16:ad:e1:91:ee:79:19:0f:cd:3d:1e:ad:fd:0d:
40:86:21:05:97:e9:45:e3:e5:b1:8b:ba:1b:7b:7b:
94:fe:74:5d:91:92:f4:73:a4:58:c1:34:73:6e:f6:
4e:03:cd:06:de:11:04:52:c6:f9:ae:ce:3f:6e:59:
b6:ba:89:2e:90:0a:4d:3b:a5:8f:76:98:b7:7f:68:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:65:FE:10:F7:50:93:70:85:80:85:E3:42:1B:85:B8:97:ED:69
X509v3 Authority Key Identifier:
keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:23:f4:15:a6:ac:44:29:c3:15:41:38:70:e6:f5:28:37:d5:
b3:68:35:63:68:13:3a:c9:65:85:a7:41:75:68:8b:03:0f:a5:
66:91:51:0f:0e:a4:91:09:42:67:fb:27:79:e1:52:b4:b9:47:
d9:87:a7:da:34:4d:36:51:36:e3:fb:d6:3e:05:3a:c1:ba:64:
f1:e2:36:ca:fa:d9:c4:64:9f:8b:4c:ef:93:9e:bc:6b:c1:cd:
75:fd:d8:1d:8d:57:54:ca:f9:be:8a:23:54:82:21:76:8d:ca:
dc:be:a5:73:8c:68:ef:a7:2b:8d:ce:19:2d:5f:9d:5e:91:a6:
12:3e:fd:b6:66:8e:d9:99:08:8a:db:03:a4:1a:e1:3c:34:63:
f3:11:cb:e6:b3:d8:0d:d7:c5:aa:f5:eb:ce:7e:1b:b3:c4:d6:
a5:ec:9b:af:1e:c2:69:41:c7:e4:d6:ee:f9:c2:37:76:db:98:
5e:1e:c9:da:68:33:2a:11:bf:86:e1:69:bd:7c:b5:86:e4:81:
94:d6:66:1a:c6:d9:e7:0a:6e:38:f4:97:3e:e4:66:67:2f:d7:
84:9d:17:9b:ca:70:de:55:53:f5:2f:fb:2e:2c:7c:a9:a1:c7:
5d:96:a5:1a:3e:f5:4a:cc:13:b3:91:d1:8b:29:c8:a8:2a:5a:
60:93:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:56:31 2026 by rpki-client