
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File: xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier: yEdUCCCD0BeYY4aBMIS6Wcg/EVGes6Ar6lBL5CP4gJo=
Subject key identifier: 49:E5:F3:34:74:35:82:74:5C:D5:85:E2:E7:EF:99:DF:F6:95:B1:41
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial: 074B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number: 0744
Signing time: Tue 28 Jul 2026 22:18:37 +0000
Manifest this update: Tue 28 Jul 2026 22:18:36 +0000
Manifest next update: Tue 04 Aug 2026 22:18:36 +0000
Files and hashes: 1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: 3wOw5ZMsGcWcKP9cjrHEjh2xzd8lZtjSFjjDZNlMRwA=)
2: 485D694A454911EEB8718378C4F9AE02.roa (hash: Y8iJThI3UQs6h5LHq/2D1bpcHDn8+qLI7yAh/AJOyS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867 (0x74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Validity
Not Before: Jul 28 22:18:36 2026 GMT
Not After : Aug 4 22:18:36 2026 GMT
Subject: CN=6a692abd-196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:1a:5f:d8:74:c4:b6:d0:a9:f4:be:1f:a8:
9e:48:ec:dc:b7:23:42:73:56:6d:77:bd:e0:3d:be:
a7:d4:63:e9:26:f5:65:7b:0d:9e:fe:a0:4e:43:0d:
f3:72:13:e9:6a:14:06:c3:2e:09:c7:e0:65:91:03:
8c:ab:d6:88:12:83:27:a7:41:32:2e:42:2f:0e:d3:
38:c0:38:23:23:61:6d:06:68:26:7a:71:69:06:6f:
91:cb:2f:8d:1f:56:9f:d2:72:8b:f7:05:8e:b8:c5:
a5:6c:4e:b2:27:8f:33:f6:d4:be:32:55:28:47:90:
ce:b6:30:a5:21:3a:fa:63:8b:4b:c9:aa:b3:60:3f:
fa:fb:8d:a8:4e:9e:de:65:66:3a:ea:da:6b:d2:8b:
68:12:e1:db:df:c5:d2:09:92:cd:3d:12:2b:b4:bd:
72:7c:e7:3d:d0:56:73:58:7a:5d:85:d0:29:ae:01:
89:25:de:cf:8b:94:66:39:0e:44:f8:e3:75:34:9c:
2b:08:1e:59:bd:0c:ce:de:23:a7:66:d9:27:1f:4f:
d6:87:36:f7:6d:bd:8e:a1:33:db:62:24:6a:d1:9a:
83:50:1b:80:0b:e6:57:b2:15:c9:b2:92:5d:b0:65:
7a:f6:23:86:51:b4:03:12:15:67:98:35:e8:e2:99:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:F3:34:74:35:82:74:5C:D5:85:E2:E7:EF:99:DF:F6:95:B1:41
X509v3 Authority Key Identifier:
keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:6e:f7:0b:81:ef:26:dd:57:52:04:0c:24:a5:d9:e6:9d:
0c:aa:89:37:bd:36:73:6c:d9:9e:11:88:84:59:ba:ab:5c:78:
6c:b0:90:4b:9e:66:96:8b:05:5d:50:53:e6:9a:1f:d1:19:a5:
68:f5:73:e9:3e:df:50:ff:cb:f5:30:7e:ae:f0:60:58:c4:07:
59:b3:d6:88:15:1e:7b:5a:c0:66:4d:ff:d8:53:f8:ac:3c:15:
79:13:08:f9:81:3d:5c:0b:52:fe:89:94:95:ea:be:86:6f:1c:
e5:2b:3e:01:47:05:d0:d3:e8:c6:cb:18:bf:2b:d5:bd:e6:e4:
9a:52:f3:22:09:6d:ec:3b:4d:2e:35:df:14:05:fc:1b:88:9a:
f8:9c:af:f8:4c:af:5d:0f:72:92:f3:c8:b3:51:36:e2:3f:ce:
ed:4f:01:4b:87:da:a3:93:61:19:d6:7c:ce:a4:ae:d9:08:69:
8e:53:0e:01:ce:79:f4:d5:ca:b9:5f:61:51:30:57:bc:45:35:
85:9d:64:b9:35:ef:0c:35:62:2a:0f:56:10:76:42:b8:c8:ad:
4a:98:4c:2f:52:fe:5a:c3:e6:e1:45:ff:8a:3e:73:0c:be:63:
17:a2:60:1b:c5:4a:71:f3:64:ba:b2:6f:db:d2:8c:3c:ab:2c:
8d:80:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:16 2026 by rpki-client