
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json)
Hash identifier: wNjUA/4hH6HeNqPGm0FyBfwA6UWEocgWbpsGdLUPG4w=
Subject key identifier: 79:32:D5:D3:D8:76:72:98:E9:6D:35:F1:45:80:4A:0B:6C:5C:C9:A0
Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
Manifest number: 02F2
Signing time: Mon 21 Sep 2026 01:11:14 +0000
Manifest this update: Mon 21 Sep 2026 01:11:14 +0000
Manifest next update: Mon 28 Sep 2026 01:11:14 +0000
Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: 2AHfXZZeW5neIIIA0Cb+Ih6kHfpZD7Afi2g7FiqVzfk=)
2: 403C37D454EE11F18BF3D50DA0833773.roa (hash: CqiZbfQsdSr5WOK24+P608ghGihUdoFddSIGup2XQa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445
Validity
Not Before: Sep 21 01:11:14 2026 GMT
Not After : Sep 28 01:11:14 2026 GMT
Subject: CN=6ab08432-b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:55:b6:32:da:cd:99:b8:04:bb:9d:6f:ac:
ce:24:1e:bc:4e:47:df:0a:de:d5:60:92:99:c9:9d:
db:8c:ca:d7:55:e8:07:3e:c3:dc:13:d9:cd:ef:5e:
f2:28:37:8f:24:16:ea:ce:6e:89:df:59:f3:a1:a7:
2d:df:92:2f:6d:b0:39:af:6d:7c:e1:be:68:dd:86:
2f:77:0f:57:e9:bf:26:ee:e1:0d:68:6b:30:25:91:
1f:db:77:6b:62:cd:0c:85:49:f2:b7:aa:34:59:71:
2d:a2:2e:04:d5:a1:dc:fc:7f:48:b9:0f:a3:06:12:
0e:08:79:20:f7:81:d1:3f:46:72:21:23:82:16:ee:
17:fb:62:f1:ab:4c:5f:23:21:84:53:31:cb:93:96:
35:4c:af:46:a4:ca:04:fb:a8:c4:52:77:87:62:4d:
ca:2c:cb:9d:ee:db:3b:16:39:18:63:98:0d:80:94:
6d:bb:21:9c:c1:88:26:0e:81:0d:d4:f3:de:d1:4d:
98:6a:60:72:2c:f4:99:0b:f2:9b:49:d2:04:2c:fe:
41:2e:dd:ae:45:09:86:fd:cd:62:5d:11:ec:32:d2:
e2:35:26:0e:72:e9:f7:2b:3b:90:94:4a:fc:97:a3:
2f:ff:14:c5:4a:b6:1d:12:15:3a:07:3f:af:49:59:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:D5:D3:D8:76:72:98:E9:6D:35:F1:45:80:4A:0B:6C:5C:C9:A0
X509v3 Authority Key Identifier:
keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:c6:5d:0d:14:94:bb:ad:e5:51:02:02:bd:49:07:d6:34:
29:b5:f7:a7:6e:18:7c:09:90:38:8e:01:fc:3e:1f:e4:b9:60:
94:35:ed:bb:7a:25:ca:a2:9a:99:3f:6f:80:4e:c6:f8:c6:06:
98:33:d3:c1:34:a3:4a:fa:02:5d:ac:ff:09:73:46:3c:d1:0e:
14:29:31:bb:65:21:c9:30:a2:d2:2a:b7:47:1a:49:c9:74:94:
0d:36:1a:a7:a5:7a:ed:ae:68:01:dd:dc:17:7a:b2:1a:49:11:
1f:de:50:db:40:c0:2e:d3:55:51:81:48:88:db:95:0d:29:59:
71:11:37:bf:fb:47:64:3f:2b:23:67:3b:d7:3e:3d:1c:44:06:
2c:d5:13:14:54:f7:ab:d4:49:53:d2:20:5a:94:0e:b9:9a:15:
9a:fe:b8:ac:8c:3e:4d:2e:b0:a2:06:b6:e4:30:30:d1:56:81:
b0:5f:ba:98:b5:dd:63:d5:33:89:49:77:39:ab:20:06:97:15:
ff:fa:57:91:2c:8a:3a:84:22:c4:73:19:65:7b:97:09:68:07:
ff:61:75:91:59:bc:1f:c0:b2:6a:9b:49:40:41:a3:99:ac:65:
81:43:70:d1:ee:30:ff:ad:53:40:74:2f:97:21:95:2e:88:47:
81:e2:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:14:50 2026 by rpki-client