
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: qkOohOU4VsZHTpm+RW01UbbZDiQaorpWQSZc3SWa/Ew=
Subject key identifier: 2B:20:96:D1:3C:E0:EA:F0:5A:4B:CD:31:A6:D6:8E:D0:F0:50:68:4F
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: 0207
Signing time: Tue 22 Sep 2026 22:29:32 +0000
Manifest this update: Tue 22 Sep 2026 22:29:31 +0000
Manifest next update: Tue 29 Sep 2026 22:29:31 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: FdQoap2MnnWg7u9/A+jn4eQ+et4eGDVO6JSW339dJzA=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Validity
Not Before: Sep 22 22:29:31 2026 GMT
Not After : Sep 29 22:29:31 2026 GMT
Subject: CN=6ab3014c-f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:99:57:ce:ed:a4:e6:e0:0b:e3:b4:aa:ff:
c8:bd:87:0b:a4:ae:6c:27:f1:1a:9f:4d:73:66:78:
ad:b1:21:6e:8c:12:bf:14:00:a8:8a:de:5b:27:3c:
25:80:3e:05:c2:50:42:38:c9:d0:5b:51:b6:d0:06:
90:7a:a5:bd:21:36:58:dd:f0:71:9a:b4:14:fb:63:
05:06:be:b9:d4:13:40:08:6a:96:38:7c:bc:59:cd:
c8:7d:4a:36:12:8e:07:0b:d3:4f:82:a8:f0:58:a0:
f8:32:74:a4:85:68:cf:4a:eb:85:20:47:93:16:64:
ba:3f:2d:2d:9f:10:5e:df:fd:b2:2a:d9:5b:37:8b:
65:f4:53:ee:1c:bc:3a:98:8c:30:1f:f1:ea:55:5a:
c5:c3:58:46:77:c5:19:74:b5:22:02:15:52:7c:9f:
2a:a6:d7:75:ec:46:4b:b2:99:36:05:58:40:f0:1f:
8a:d7:3c:28:07:82:53:0b:80:96:28:36:58:19:a3:
d6:ed:db:64:70:2c:cb:ea:ec:db:a2:11:b1:1b:53:
87:ac:62:ed:72:4e:63:a6:3e:11:1a:ef:32:9e:50:
66:0b:c9:9a:ca:8f:4b:b6:5d:8a:9f:69:bf:d8:b7:
37:ad:91:e9:13:20:bd:9b:c6:b2:47:1c:5b:ab:88:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:96:D1:3C:E0:EA:F0:5A:4B:CD:31:A6:D6:8E:D0:F0:50:68:4F
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e0:4f:29:46:c6:0e:52:75:eb:36:ab:68:5f:80:ee:77:47:
8e:59:39:f3:9d:7e:52:f9:7d:e9:fd:6b:ae:1c:0e:b8:41:1a:
33:bd:8e:e6:e0:fd:c3:da:82:37:93:62:02:3f:c7:22:8c:58:
0f:ad:e7:3d:e5:3c:e5:77:2e:c3:a9:c6:71:8f:4f:96:97:1b:
dc:ba:d5:1a:95:88:90:92:d9:1f:14:eb:8f:df:80:7e:b9:27:
d1:40:b8:92:ee:a0:a1:ea:cb:58:a8:34:83:00:fd:81:db:4d:
66:8f:04:ef:39:d2:b2:c2:11:83:61:eb:ff:b2:86:0e:d5:ff:
b0:a8:ac:54:cf:be:ba:66:aa:03:fb:60:50:33:37:ca:4a:20:
b7:b7:6b:e6:c6:32:03:b6:bf:f3:b6:37:56:9c:45:19:5c:bf:
79:43:79:1b:23:9e:ae:df:5b:42:b9:09:1d:a0:8a:6a:56:36:
10:3f:85:14:54:47:04:8c:52:f9:cc:6c:2c:37:15:84:69:49:
f4:a4:79:34:cc:65:55:1f:b8:7b:11:91:64:36:93:87:a3:d0:
33:2a:31:39:7a:20:11:99:53:09:0a:5f:13:e4:8f:8f:18:61:
f1:80:8d:00:81:f9:e3:e2:0a:20:bf:7c:a6:84:bb:37:53:af:
a7:69:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:46:13 2026 by rpki-client