
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier: Opk/R8OTKg3KEaTafmZR48CfVwdhdycvwp7+M6bUN6U=
Subject key identifier: 07:17:06:12:51:F9:54:4E:E1:5D:6C:FE:90:F3:D9:3C:31:EB:F3:21
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial: 06FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number: 06F5
Signing time: Tue 28 Jul 2026 21:26:44 +0000
Manifest this update: Tue 28 Jul 2026 21:26:43 +0000
Manifest next update: Tue 04 Aug 2026 21:26:43 +0000
Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: GKPYVoZCz5FHp/HmEttNRfL4omcWdRs2A82afl30MBI=)
2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Validity
Not Before: Jul 28 21:26:43 2026 GMT
Not After : Aug 4 21:26:43 2026 GMT
Subject: CN=6a691e94-0b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:ac:58:a2:c4:d6:4b:1e:60:41:82:22:73:
dd:53:a8:f3:55:a7:e3:1b:6e:f6:0d:fe:27:ac:7d:
67:1a:f8:2b:89:45:c3:0e:ea:4c:d2:80:c8:ef:f4:
dc:eb:e0:75:1e:89:b7:0c:cf:3d:eb:15:9d:0d:8b:
b4:e3:dc:db:04:2c:25:88:92:34:50:6a:b6:d2:ce:
be:14:38:69:0c:fc:e9:33:81:9f:2c:b0:aa:7b:3d:
a7:ae:4a:95:ff:64:f4:46:8a:70:a6:8e:9e:cd:14:
53:1f:a2:7f:3d:4d:9f:6b:53:35:b0:26:3a:e8:b7:
04:e6:b5:7d:87:4e:71:30:4f:37:92:2f:08:af:ff:
d9:6a:48:1b:5e:dc:5f:65:4d:87:57:c4:07:48:62:
ec:66:85:fc:1f:da:2d:2c:38:37:d9:0e:5a:8b:91:
0a:d5:78:e9:5f:31:80:81:1b:22:2e:d3:f5:33:5d:
1d:c7:17:aa:e3:8a:8b:da:b6:fe:d3:48:e2:32:fd:
bf:01:07:16:f5:69:80:76:37:55:96:db:aa:e4:db:
b2:8f:16:84:93:b9:19:56:5f:6e:e5:7e:e7:54:41:
25:2e:76:41:23:d4:39:a6:c9:53:f1:85:3a:b0:98:
7a:d3:d9:cc:ee:b1:fd:48:95:89:ca:f7:98:e5:5b:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:06:12:51:F9:54:4E:E1:5D:6C:FE:90:F3:D9:3C:31:EB:F3:21
X509v3 Authority Key Identifier:
keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0a:1d:62:85:ca:7c:4b:bc:ac:51:ef:a2:c7:03:fd:cd:75:
39:5d:4f:ba:bf:de:0b:fb:c5:23:bf:ea:30:e5:84:7d:38:51:
dc:9c:9f:04:45:f1:f2:3c:c1:27:b7:ed:3a:96:05:9e:10:24:
5f:91:b9:62:d6:14:ce:99:ea:7a:22:4b:97:32:3f:d8:12:31:
88:f0:8c:d7:09:d3:2a:6a:fd:69:22:1b:1b:5d:8d:77:b2:8d:
00:d5:73:7d:06:6b:6b:03:6c:29:79:29:52:b2:21:ce:b1:0c:
06:76:f1:f4:88:a9:dd:c6:f1:82:d6:65:de:6b:a6:18:86:79:
08:05:e3:ad:db:0d:6a:bf:20:8d:b2:77:62:8e:2b:2e:4e:6e:
37:f9:d8:e6:a1:42:74:87:49:53:4f:3b:73:f8:26:1f:7c:ae:
d4:06:ec:8e:f2:31:88:ec:c0:3e:8f:eb:04:1b:6c:38:d3:e5:
c2:c3:4d:3e:67:d5:8f:e8:03:02:16:b1:b0:64:99:1e:29:c1:
10:73:f7:65:60:68:e5:a2:39:8b:84:19:07:0e:ef:8a:00:1b:
e5:b8:2e:33:de:1e:30:f5:53:10:d2:6b:01:bc:f7:8c:88:2e:
dd:7d:4b:2b:59:f3:28:70:ca:2c:ce:d1:c2:64:2c:43:25:8c:
fa:27:20:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF
REU0M0E2NTAwHhcNMjYwNzI4MjEyNjQzWhcNMjYwODA0MjEyNjQzWjAYMRYwFAYD
VQQDEw02YTY5MWU5NC0wYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1SsWKLE1kseYEGCInPdU6jzVafjG272Df4nrH1nGvgriUXDDupM0oDI7/Tc
6+B1Hom3DM896xWdDYu049zbBCwliJI0UGq20s6+FDhpDPzpM4GfLLCqez2nrkqV
/2T0Ropwpo6ezRRTH6J/PU2fa1M1sCY66LcE5rV9h05xME83ki8Ir//ZakgbXtxf
ZU2HV8QHSGLsZoX8H9otLDg32Q5ai5EK1XjpXzGAgRsiLtP1M10dxxeq44qL2rb+
00jiMv2/AQcW9WmAdjdVltuq5NuyjxaEk7kZVl9u5X7nVEElLnZBI9Q5pslT8YU6
sJh609nM7rH9SJWJyveY5VsvkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcXBhJR
+VRO4V1s/pDz2Twx6/MhMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx
RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa
LUtibWx4WTIxSVR0NURwbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApAodYoXKfEu8rFHvoscD/c11OV1Pur/eC/vFI7/qMOWEfThR3JyfBEXx8jzB
J7ftOpYFnhAkX5G5YtYUzpnqeiJLlzI/2BIxiPCM1wnTKmr9aSIbG12Nd7KNANVz
fQZrawNsKXkpUrIhzrEMBnbx9Iip3cbxgtZl3mumGIZ5CAXjrdsNar8gjbJ3Yo4r
Lk5uN/nY5qFCdIdJU087c/gmH3yu1AbsjvIxiOzAPo/rBBtsONPlwsNNPmfVj+gD
AhaxsGSZHinBEHP3ZWBo5aI5i4QZBw7vigAb5bguM94eMPVTENJrAbz3jIgu3X1L
K1nzKHDKLM7RwmQsQyWM+icg3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:19 2026 by rpki-client