
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier: eQjThOV60ElPoT15rVj0L1wyWUH7Xv1fuqHZH1Cgj28=
Subject key identifier: F3:D5:CB:92:9E:4F:AD:B7:48:36:F6:C9:81:52:59:1A:6F:B3:B8:BE
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial: 0779
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number: 076E
Signing time: Sun 20 Sep 2026 21:32:33 +0000
Manifest this update: Sun 20 Sep 2026 21:32:32 +0000
Manifest next update: Sun 27 Sep 2026 21:32:32 +0000
Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: D/Bwm46gy9ucgPh6u+ie72GOEK9BljOzuzhf8/Lbl+Q=)
2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: LQ6rMhZDzAY8FPwtfGTf2Oca3RZNu+bmDyNVPU27Ec0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Validity
Not Before: Sep 20 21:32:32 2026 GMT
Not After : Sep 27 21:32:32 2026 GMT
Subject: CN=6ab050f1-1d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:fe:66:b3:fb:56:78:c8:db:d6:78:c1:bf:
5b:34:28:a3:b6:95:25:c2:85:ad:94:b0:ea:4d:8f:
c1:59:a8:78:fd:14:17:2d:30:78:1f:78:5d:1b:71:
c7:ac:22:2d:13:01:92:e9:2e:3a:68:f8:07:ed:60:
74:ee:4e:a0:25:dc:ef:8f:14:8e:fc:f4:d9:74:91:
9f:96:cf:55:7e:b8:9d:c8:97:24:4c:b2:cd:f1:71:
c1:bc:73:d2:e8:73:2f:61:6a:c2:83:de:29:1b:ed:
0e:b7:77:1e:15:93:c5:d0:07:23:73:b1:45:ba:7d:
a4:ee:bf:e9:4a:83:c0:58:30:6b:1e:60:45:bb:db:
80:eb:b6:4a:6d:79:22:b3:e1:39:4d:63:11:aa:b8:
53:37:2e:fe:72:45:f2:76:23:3a:0d:09:e3:e6:3a:
d6:6b:39:19:42:a5:73:67:a3:75:fd:a7:e6:b7:ed:
56:88:5e:64:df:0c:a6:a9:ae:47:32:95:7c:a8:3c:
48:b7:2b:50:8d:ec:5b:84:52:4c:4d:0c:6f:eb:2f:
5e:2f:c0:9c:64:e9:08:20:5b:ef:71:fd:30:40:3c:
86:eb:02:ff:87:56:e9:36:bb:58:97:06:98:b5:4a:
e8:df:ca:98:80:0c:78:7c:d7:36:20:41:56:4d:1c:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:CB:92:9E:4F:AD:B7:48:36:F6:C9:81:52:59:1A:6F:B3:B8:BE
X509v3 Authority Key Identifier:
keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:23:60:2c:02:3f:e1:bb:dc:57:b8:4b:9c:6f:db:df:9b:
09:01:e9:e6:da:58:4c:97:20:e3:53:2c:5b:84:79:23:55:a1:
ad:52:4c:8f:11:b0:93:f6:5f:df:b4:86:7b:1d:cc:a6:2f:77:
67:36:64:6d:27:e2:21:77:00:c0:3e:4e:72:cb:20:a5:c5:2b:
3b:0c:de:33:86:a5:76:4d:b6:1e:e5:16:7f:9c:ec:85:b2:73:
39:82:20:92:1a:ba:a3:24:e6:08:31:da:ff:9d:5d:a8:a7:18:
7f:76:94:c0:ad:8b:44:f2:00:06:72:04:cf:91:9a:cf:84:d3:
b8:8a:27:91:fe:bc:e7:f8:f9:d7:d3:10:70:2d:e6:dd:43:93:
d8:5d:41:7f:15:0a:89:83:94:fc:76:f0:27:69:52:ee:ea:a1:
7a:c8:71:a3:e3:66:76:0d:b6:ba:c4:a5:56:96:42:fc:7c:9b:
4d:ea:8b:b2:03:a2:79:05:88:04:c5:77:1f:3d:63:7f:b0:63:
35:10:82:fa:ba:d0:e4:f3:ec:50:c7:61:5b:39:fa:5b:83:ec:
28:ac:4f:02:f8:27:01:83:a2:6a:36:4f:02:e5:d7:f6:73:98:
15:72:03:c6:69:f8:d7:0a:44:65:b8:04:1d:11:44:6f:24:6f:
a5:9b:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:07:23 2026 by rpki-client