
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: eMN+ncYYskDSDIrsJjgyKdNY+cnI5Wac8EY6XMLfkeg=
Subject key identifier: EA:A1:1D:8B:36:7B:F8:E0:71:1F:FD:B9:7E:5B:F0:D2:C6:4C:C5:CD
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 032E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 0328
Signing time: Sat 13 Jun 2026 01:07:54 +0000
Manifest this update: Sat 13 Jun 2026 01:07:53 +0000
Manifest next update: Sat 20 Jun 2026 01:07:53 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: M0JNV2xZr3yL4OQc8cFB7AEFtxju7gp07brm/ZvklDM=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Jun 13 01:07:53 2026 GMT
Not After : Jun 20 01:07:53 2026 GMT
Subject: CN=6a2cad6a-9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:c1:29:b1:8b:c7:84:8f:27:d6:ae:ab:21:
63:5b:22:95:89:b7:6c:14:f9:5d:f0:8b:4a:95:dd:
56:3c:e5:47:55:0f:cd:d6:83:69:9c:24:4d:7c:dd:
75:c1:c9:42:c7:ff:32:51:7e:e3:86:c9:38:87:40:
c5:eb:e5:47:1c:32:2a:11:2e:6f:2b:b2:1b:b4:f6:
ad:a2:a0:3f:4a:9d:ba:d2:55:9a:16:fb:dc:4c:b5:
be:c1:4f:79:b8:50:99:69:84:74:2b:c1:ac:88:59:
0c:16:75:fb:71:18:8b:5e:40:cc:64:26:a0:bc:6a:
a6:c1:cd:f9:d2:51:f3:31:ba:0b:f8:c2:bd:d2:88:
ee:5a:8d:a0:95:25:92:59:f8:32:30:3d:32:7c:c1:
76:70:30:c9:91:ff:21:1c:62:60:c6:e2:42:1e:46:
b0:76:7e:37:4a:8d:ed:82:33:76:33:69:06:05:91:
02:9b:ac:37:2a:fe:36:2b:5a:30:a8:19:de:78:9d:
a5:d4:31:6f:d8:a2:73:ea:9d:95:e1:05:12:97:35:
a1:08:f1:00:9a:11:ac:b0:3b:2f:ed:dc:d7:5d:fd:
bd:24:12:19:2a:3d:3c:48:bf:ae:05:21:bf:fb:52:
a3:75:72:da:54:8d:a1:3c:a6:03:0f:fd:22:b4:3b:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:1D:8B:36:7B:F8:E0:71:1F:FD:B9:7E:5B:F0:D2:C6:4C:C5:CD
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:3c:1f:f5:a2:33:f9:ec:a8:fa:f2:a4:c7:dc:59:0c:ef:
51:5a:5c:f1:ca:3c:32:cb:62:f6:26:52:9d:13:d4:43:22:9c:
de:73:e2:1d:a2:66:b9:b8:83:af:4c:cb:e8:8c:de:91:d1:41:
a4:e9:76:eb:12:1a:a4:19:c0:fe:ae:d0:b7:2b:3d:bc:d0:ed:
48:53:53:a5:f1:13:42:c5:60:29:6e:49:44:73:1c:46:4b:62:
1c:c4:cc:2d:e9:bb:38:ac:91:9b:3d:60:a7:65:9e:75:a3:9a:
d8:01:dd:3f:b6:a2:fb:7d:f0:3b:5a:f8:f0:f1:1a:a6:c7:7a:
19:0d:18:6d:b9:00:63:8a:05:89:07:01:2b:69:9f:78:00:a2:
a2:af:73:37:7a:5e:5f:74:5b:32:a3:6d:35:84:88:99:8f:9f:
0f:33:b4:78:ac:55:0d:72:3e:22:77:02:44:76:79:fd:7b:7d:
f5:55:36:54:81:f0:c7:e9:85:60:ee:98:0c:12:21:76:f2:06:
f0:69:a0:86:56:dd:59:6d:1d:d5:d0:e5:11:08:b1:08:a5:86:
09:8e:31:37:21:d9:b0:80:50:33:3a:96:f9:5d:d1:ac:c0:fc:
bf:22:37:f1:89:01:a2:72:fd:4c:a8:33:86:70:1c:01:e6:4a:
c8:bb:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:55 2026 by rpki-client