
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: P+9zXRoHt03MxgQtz4VbuDkP+sxKy/KTTubzadiXsV0=
Subject key identifier: AA:9D:35:04:D4:63:07:68:01:39:56:AF:41:41:C5:81:B0:A7:38:93
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: 01E9
Signing time: Sun 26 Jul 2026 23:45:10 +0000
Manifest this update: Sun 26 Jul 2026 23:45:10 +0000
Manifest next update: Sun 02 Aug 2026 23:45:10 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: QYpQ4+G2JREQ1Dr+46z5aNjHchZNTDqqd+z9WsgC0yQ=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Validity
Not Before: Jul 26 23:45:10 2026 GMT
Not After : Aug 2 23:45:10 2026 GMT
Subject: CN=6a669c06-2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:2e:d7:8d:a9:5d:85:dd:42:da:59:5d:de:
f7:d8:32:20:41:e2:c4:5a:df:af:71:ec:d2:5a:16:
87:73:a9:e4:a3:eb:b8:27:a4:f7:1b:f6:66:b9:5e:
cc:f3:c0:f9:9f:a9:a2:2e:48:5f:9d:8f:7d:4f:ca:
a7:42:41:98:fe:e1:2f:14:2a:32:ba:55:f4:74:be:
7d:89:fc:71:e9:ac:b2:4c:fd:06:b8:ff:ab:61:e5:
5e:c2:e1:3b:72:32:9f:84:b4:a0:16:0b:56:20:45:
96:25:c8:44:f8:d9:07:f5:b8:9f:dc:3c:06:86:c3:
b4:49:3e:17:11:26:9a:9d:a2:d8:fd:cb:d7:c1:af:
e7:9c:92:05:d0:45:46:f6:55:6e:23:53:cc:24:28:
df:60:7c:6a:ce:9a:c2:e0:bf:84:64:d4:70:90:53:
d3:4a:16:21:cc:bb:c3:61:78:f5:d0:3a:03:48:2f:
90:6d:0d:c7:59:4a:ba:3b:bb:39:c0:86:e6:08:79:
04:6f:13:f7:af:35:44:26:fd:31:86:e6:97:52:cb:
db:b6:b0:3a:f8:00:ca:95:73:59:30:29:6c:e1:fc:
ad:b2:19:11:e5:3b:92:8b:01:34:3c:e9:a6:1b:d6:
20:af:d1:ea:c5:9f:a8:b3:d2:ba:b2:a7:48:4c:32:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:35:04:D4:63:07:68:01:39:56:AF:41:41:C5:81:B0:A7:38:93
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:22:1b:c6:8b:62:79:d5:e1:c7:9e:d6:02:cc:b8:bc:24:
f8:da:27:02:a6:c2:46:b5:d2:ba:17:5b:0c:4a:99:1f:21:3c:
46:06:36:83:77:20:63:6d:58:bb:71:ce:a9:aa:13:ee:37:a3:
d1:9b:bc:62:e8:4c:fc:9d:38:ef:52:7d:64:dd:24:cf:7f:21:
7d:b8:c4:b6:4a:58:20:25:75:67:d7:7f:92:a2:bc:b3:2a:d0:
19:0f:69:01:85:77:8a:a6:f3:de:6f:2c:93:ca:98:c6:27:b7:
db:cd:5d:f8:d7:58:34:c1:09:03:1b:3c:2e:f6:53:a5:2f:c1:
b9:f4:86:4a:ea:c1:ec:1d:b8:7e:56:af:49:ff:1f:7f:41:0d:
b1:97:38:bb:a8:0c:63:cd:b4:2e:6d:00:91:e6:e5:4a:61:07:
d5:0e:7c:16:3d:e7:13:9b:de:0a:40:92:39:1e:39:8a:a5:b7:
8e:ae:96:97:0e:fd:a1:36:6c:7b:04:df:c3:87:bc:ab:d9:6e:
f9:40:08:17:ed:c7:57:09:50:b7:42:55:0e:78:82:4c:65:d9:
a1:14:e6:60:a5:f8:22:a6:ab:9d:69:8d:fd:c8:19:f4:de:9f:
5f:b8:73:9f:79:fb:69:f5:e3:c3:9d:13:e0:36:f0:22:38:51:
35:11:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:03 2026 by rpki-client