
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier: GetKKiWVu3ww8p6jEcr8P3yMF61YkXpC3xcaQn5fRew=
Subject key identifier: B8:1C:18:B4:35:28:2A:77:2F:3D:98:3E:31:45:B7:7C:D5:21:9C:CB
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number: 0164
Signing time: Mon 21 Sep 2026 02:59:16 +0000
Manifest this update: Mon 21 Sep 2026 02:59:15 +0000
Manifest next update: Mon 28 Sep 2026 02:59:15 +0000
Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: dpYJKdSlcbd/UgeX/25wQ9gv6d5q7wEV2834lLCKrXY=)
2: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
3: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Validity
Not Before: Sep 21 02:59:15 2026 GMT
Not After : Sep 28 02:59:15 2026 GMT
Subject: CN=6ab09d84-a9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:08:c1:0f:ce:31:38:e5:c5:77:06:8e:00:
e7:62:dd:6f:df:86:53:94:c6:0c:1a:b8:29:7a:76:
a8:e9:28:25:b9:db:13:f8:f0:5b:4e:1f:9c:ea:16:
cb:1f:8f:68:34:98:d6:f9:b3:46:0e:a7:8b:6d:c4:
c3:17:5c:39:7e:6c:2d:7c:08:8f:c6:4b:8d:79:7c:
b8:6a:46:ab:30:2c:cf:1d:50:53:6b:53:90:76:3e:
a1:50:44:a8:8f:06:a6:cf:dc:ab:bd:4d:c8:0c:41:
66:af:57:23:ef:16:88:2d:01:9d:af:c4:79:8b:f4:
fa:7a:8b:31:77:df:7e:a4:dc:b8:f0:57:45:b2:ea:
3e:4f:7b:79:22:97:4f:d8:5b:76:98:c6:cc:68:47:
28:ed:9b:14:d8:72:d2:52:b4:e0:8c:44:0d:c1:8a:
e5:43:a5:70:cf:34:af:63:ea:0a:0e:e9:6c:60:42:
8c:92:41:ab:77:5c:ee:4f:ae:88:d2:51:f9:e9:59:
c7:98:7b:04:93:e0:40:8d:6b:6a:8a:0a:2f:8d:3f:
06:69:bb:e6:18:23:f6:97:d6:8b:5a:b5:41:26:14:
61:e3:d9:28:a3:26:4c:be:25:6f:a8:85:de:93:25:
a1:91:04:87:5f:d5:eb:59:e1:76:6f:12:3d:ab:88:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1C:18:B4:35:28:2A:77:2F:3D:98:3E:31:45:B7:7C:D5:21:9C:CB
X509v3 Authority Key Identifier:
keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:00:7b:35:49:ff:ca:7a:34:a1:1e:b9:11:ed:01:95:da:08:
16:cd:2c:c5:6f:03:a3:64:0f:76:f7:37:a3:ad:8f:08:44:d5:
90:e6:46:6b:c5:7f:cd:e7:7a:17:5e:d5:be:d1:ab:16:f0:ed:
6e:4f:9c:bc:4b:ce:58:e8:4c:92:df:dd:d4:03:6f:bf:af:cf:
73:e3:26:24:01:0f:49:c1:18:68:ac:64:f4:a0:4f:38:1c:aa:
e1:ff:e6:23:99:25:22:33:9d:c6:98:f1:21:0a:c0:fb:56:b0:
f6:e5:aa:f3:d0:2a:70:85:bc:7f:ba:9f:be:5c:d0:54:37:a9:
d9:17:3a:72:8f:10:0f:58:7c:14:36:f4:d1:fe:3c:8c:a1:8b:
05:ba:89:15:dd:9d:fc:fe:d9:05:3d:d4:8b:65:c8:ec:99:7f:
0a:7b:74:19:c9:6d:ef:17:08:5a:5e:44:73:d2:8e:39:81:9e:
68:06:3d:4d:52:6a:17:13:58:23:cf:76:cf:53:ac:a0:2d:fc:
f7:0a:f8:6d:52:7f:75:c2:66:5d:e0:c2:db:81:e9:52:39:f0:
3a:80:3d:cc:f0:7f:32:87:c9:e2:23:ea:50:0a:7c:fe:a6:b7:
52:8d:da:34:fd:15:21:29:ea:bb:71:2c:a5:32:60:0a:7a:8d:
1d:61:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:01:05 2026 by rpki-client