
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File: xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier: oxv8HPRpdPz6wZxRJD0JV65pycyLd9qSRHdeUHrZArI=
Subject key identifier: B6:7E:FA:D7:C3:2C:B4:2C:DA:A1:26:AE:5F:36:9D:6B:6E:AD:19:1A
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial: 0734
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number: 072D
Signing time: Fri 12 Jun 2026 21:53:29 +0000
Manifest this update: Fri 12 Jun 2026 21:53:29 +0000
Manifest next update: Fri 19 Jun 2026 21:53:29 +0000
Files and hashes: 1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: CoHthSty7oBBYstgjLZEpBc7zqfcSwz3fEhPH0LnhvQ=)
2: 485D694A454911EEB8718378C4F9AE02.roa (hash: Y8iJThI3UQs6h5LHq/2D1bpcHDn8+qLI7yAh/AJOyS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Validity
Not Before: Jun 12 21:53:29 2026 GMT
Not After : Jun 19 21:53:29 2026 GMT
Subject: CN=6a2c7fd9-a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:57:c9:b1:52:5c:6d:81:16:93:7e:3c:6a:
51:38:b3:ac:55:14:64:e6:b4:a0:92:2e:50:91:bb:
7a:be:96:21:71:85:a5:da:71:db:e5:a1:a9:a3:7a:
e5:86:f5:7f:c5:7c:73:17:4a:43:48:b3:e8:51:b3:
cb:8f:2c:15:b6:7b:8b:0b:a6:d9:d2:41:18:34:41:
36:f7:50:c9:89:78:b4:1b:0d:b9:78:df:2a:44:a2:
2e:5f:02:64:de:15:45:eb:ff:cc:c1:a4:13:26:00:
5c:fa:f0:ce:eb:36:10:f3:7d:db:ca:17:ec:1c:32:
40:23:8b:5b:b2:24:6a:f9:25:39:47:0c:88:41:2e:
0f:ec:7c:d8:5f:08:c6:18:61:e8:53:4d:3e:cd:52:
df:a0:d4:aa:0f:34:ba:50:e2:18:f3:83:bc:b5:6c:
0a:0d:36:79:99:62:09:b7:32:02:47:ae:4a:77:b4:
d3:ae:93:7a:9a:4f:62:5e:f0:c9:cf:84:ca:51:b7:
79:6c:5d:31:9e:69:09:3c:c9:ff:73:23:05:92:e2:
d2:c4:d9:74:52:8c:f0:cd:24:02:f7:eb:8c:40:7e:
97:d2:2f:5f:ba:63:97:b7:e3:5d:5b:94:2a:a4:9c:
2c:4f:0c:d5:8a:ee:bd:b7:07:8d:d6:c1:65:0d:0c:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:FA:D7:C3:2C:B4:2C:DA:A1:26:AE:5F:36:9D:6B:6E:AD:19:1A
X509v3 Authority Key Identifier:
keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e5:33:30:02:9c:74:69:4d:28:d6:2d:60:63:77:d5:6e:06:
21:b2:7b:b2:a0:ac:5a:ba:9f:cb:f9:0b:f5:63:08:3f:bd:1e:
2b:54:f2:51:f8:d0:60:18:f9:6f:bf:d5:0e:bb:77:33:27:eb:
bc:bd:41:fc:24:c7:ae:c2:44:c5:4e:92:8c:79:b8:a9:b8:b9:
5c:6a:7a:a0:3f:85:28:80:f2:ec:49:71:6b:a1:ee:e0:c8:a7:
b3:d1:80:cb:f9:6e:0c:b5:f9:fa:fc:8a:15:7a:ae:24:7c:66:
5d:6c:8e:36:a8:9d:69:3f:2d:e8:62:5a:0a:72:0f:cb:34:4a:
23:9c:a4:32:77:9f:c2:bd:6d:44:5e:41:9b:95:9c:8f:63:65:
b2:bb:83:ac:6a:73:76:0c:ee:20:7b:6a:de:82:b1:09:1b:6d:
92:ef:0a:60:66:53:c0:a6:bd:84:c2:97:21:2d:8f:30:37:fb:
45:eb:5a:9d:e3:14:4d:69:14:66:06:e1:f7:79:c7:ab:35:89:
20:52:52:5a:0e:c3:e2:f0:66:6c:62:fb:75:05:9a:93:bb:2c:
b2:39:99:96:76:74:1d:6c:48:5e:61:27:cb:49:b0:9f:29:11:
45:c1:e0:f2:06:55:b9:67:07:5d:35:62:7b:6c:de:81:3e:23:
5e:e8:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:30 2026 by rpki-client