
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier: QiNlpnoe9OtqEm9JVXxCve/2PKYOCO10KE0YkJC3rBg=
Subject key identifier: E2:98:DA:94:E2:B3:E2:C4:65:2F:95:CA:2E:68:6F:A8:A9:0B:79:DA
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number: 01B6
Signing time: Wed 29 Jul 2026 05:13:13 +0000
Manifest this update: Wed 29 Jul 2026 05:13:13 +0000
Manifest next update: Wed 05 Aug 2026 05:13:13 +0000
Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: aa1eEJeROSn96DICcOwDd7e0x2Q6SeWk6AlBYWg5BAk=)
2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Validity
Not Before: Jul 29 05:13:13 2026 GMT
Not After : Aug 5 05:13:13 2026 GMT
Subject: CN=6a698be9-66b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:6f:04:a9:1f:19:62:76:a0:89:42:48:8c:
c5:c0:7f:5c:cb:8e:45:99:5a:67:17:ad:36:93:a0:
f5:3a:f7:df:c3:2c:53:f9:3c:5e:16:aa:03:7c:9e:
f5:79:8e:bb:84:1d:20:0e:37:3a:70:9a:ed:8a:10:
82:1b:55:05:b5:b3:89:86:7b:6a:5e:59:33:dc:9b:
49:7c:66:cb:2b:15:b8:05:e0:c3:00:23:f8:bc:75:
77:83:51:54:fa:1e:21:06:7b:d4:e4:32:4b:66:f5:
84:58:4a:46:c3:c1:e8:86:03:ad:c2:20:41:de:76:
f1:20:2a:e3:60:da:0a:8f:f6:c3:e5:2c:6e:7f:78:
ca:ab:b4:33:b3:d3:e6:98:f6:07:c4:f8:00:91:d3:
20:7f:cb:1c:57:d8:ee:e0:78:02:3d:58:90:eb:7a:
f9:de:f6:c1:04:f8:6b:5f:e5:05:97:9c:51:f1:46:
fc:56:d9:44:bd:f1:3d:03:89:91:a0:6b:c2:64:4d:
c2:f0:c8:d5:17:04:41:82:5e:32:79:01:a5:3e:c6:
4c:5e:a2:f8:59:dc:a8:9e:48:0a:28:76:75:1b:45:
79:9a:5d:56:55:ea:78:d6:20:91:ce:d8:f3:73:bf:
8d:ca:85:81:2c:87:11:83:51:bb:7f:ef:0f:f9:e3:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:DA:94:E2:B3:E2:C4:65:2F:95:CA:2E:68:6F:A8:A9:0B:79:DA
X509v3 Authority Key Identifier:
keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:ce:f1:c3:87:5f:2b:f8:39:5f:cc:2c:13:e0:ba:6a:15:
86:35:ea:3e:79:ae:13:95:fa:11:0e:d1:e8:6d:be:7b:5f:2e:
cf:be:7b:3d:18:db:44:e2:f7:34:7f:f4:b2:10:cd:33:5a:c6:
a6:8f:99:10:1e:97:0f:8f:0f:42:08:62:96:68:54:a7:52:ff:
aa:b1:9b:b2:63:36:f0:23:a4:62:be:d4:13:78:29:e5:70:98:
7c:df:63:f9:21:82:be:95:10:37:f1:df:64:db:ca:00:d5:0b:
fc:ab:ad:53:e2:14:e9:bc:a4:98:05:bc:a1:96:3b:45:c2:48:
5e:34:93:08:52:86:2b:d7:ae:79:a0:ac:f7:3f:dd:3f:1b:3d:
1c:bc:87:8c:83:70:0b:f0:e0:a1:b3:ae:4d:97:a1:15:49:1c:
82:9b:85:10:f0:50:ff:ce:0b:2a:2e:6e:fe:42:84:f5:96:8a:
0b:2e:c3:04:13:4c:a1:55:ef:aa:43:e8:f7:dc:7b:e4:89:a5:
33:1d:0a:92:36:b2:67:28:30:12:77:1b:88:39:06:ed:af:26:
aa:9a:da:83:f8:4b:bc:96:d4:9f:8c:b1:81:62:8c:fc:5a:fe:
ab:b4:2e:6d:ba:29:88:62:a2:29:5c:fc:96:9d:d8:ee:c0:e4:
7c:41:9b:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy
MTg1MzBDNjUwHhcNMjYwNzI5MDUxMzEzWhcNMjYwODA1MDUxMzEzWjAYMRYwFAYD
VQQDEw02YTY5OGJlOS02NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwXNvBKkfGWJ2oIlCSIzFwH9cy45FmVpnF602k6D1OvffwyxT+TxeFqoDfJ71
eY67hB0gDjc6cJrtihCCG1UFtbOJhntqXlkz3JtJfGbLKxW4BeDDACP4vHV3g1FU
+h4hBnvU5DJLZvWEWEpGw8HohgOtwiBB3nbxICrjYNoKj/bD5Sxuf3jKq7Qzs9Pm
mPYHxPgAkdMgf8scV9ju4HgCPViQ63r53vbBBPhrX+UFl5xR8Ub8VtlEvfE9A4mR
oGvCZE3C8MjVFwRBgl4yeQGlPsZMXqL4WdyonkgKKHZ1G0V5ml1WVep41iCRztjz
c7+NyoWBLIcRg1G7f+8P+eND3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKY2pTi
s+LEZS+Vyi5ob6ipC3naMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy
MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH
a2t1N2xsWG40UGdoaFRER1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNPO8cOHXyv4OV/MLBPgumoVhjXqPnmuE5X6EQ7R6G2+e18uz757PRjbROL3
NH/0shDNM1rGpo+ZEB6XD48PQghilmhUp1L/qrGbsmM28COkYr7UE3gp5XCYfN9j
+SGCvpUQN/HfZNvKANUL/KutU+IU6bykmAW8oZY7RcJIXjSTCFKGK9eueaCs9z/d
Pxs9HLyHjINwC/DgobOuTZehFUkcgpuFEPBQ/84LKi5u/kKE9ZaKCy7DBBNMoVXv
qkPo99x75ImlMx0KkjayZygwEncbiDkG7a8mqprag/hLvJbUn4yxgWKM/Fr+q7Qu
bbopiGKiKVz8lp3Y7sDkfEGbfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:20 2026 by rpki-client