
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: dqBKX+8NNJpMF3nS+MZv/bl7uRDeos94P8tpSsXF6Aw=
Subject key identifier: 17:62:EA:B7:D0:19:73:32:7C:26:79:4F:F7:99:F1:A3:E6:34:9F:FF
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 0344
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 033E
Signing time: Mon 27 Jul 2026 02:10:35 +0000
Manifest this update: Mon 27 Jul 2026 02:10:34 +0000
Manifest next update: Mon 03 Aug 2026 02:10:34 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: 4l8nkfCoopf33mP/i1IUtFWJNnEwCgmFwFcNdS1f4w8=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Jul 27 02:10:34 2026 GMT
Not After : Aug 3 02:10:34 2026 GMT
Subject: CN=6a66be1b-d281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:cf:54:97:16:ff:cd:30:de:f3:a9:ff:ed:
34:ff:ea:ec:37:74:6b:de:de:ba:83:c8:36:0a:b2:
8b:7d:a7:05:a2:b5:b2:f8:b6:89:a3:0b:ed:2e:8d:
88:bf:c8:24:f4:ab:45:e5:93:2f:2d:20:55:a0:cc:
04:c9:87:1b:5a:2f:80:32:aa:43:09:89:98:33:7f:
e1:5b:81:e0:7a:5b:e8:f5:96:07:f2:88:5a:c1:44:
c9:3f:0c:62:5b:36:b3:5e:d5:c0:9b:f9:7f:3e:94:
36:e2:af:8a:ba:8e:bf:19:74:72:a1:22:c5:b3:14:
44:3e:b7:ed:57:57:f4:b6:42:71:7e:0c:a5:da:0e:
0c:2d:d6:74:df:13:9a:59:dd:42:f6:61:0a:dc:9a:
d8:2f:0d:38:3d:62:ca:1a:fb:75:11:f6:35:11:c6:
af:fe:03:aa:7d:90:50:b2:90:d9:77:81:55:b0:db:
58:99:16:3d:3a:af:23:6b:b1:99:96:d1:6e:1a:0b:
fb:98:d7:d4:b3:38:d9:18:c0:ef:12:67:1d:c7:00:
57:d1:50:5c:a3:45:d0:1f:d0:9f:9b:01:0e:9a:c1:
c2:10:96:a7:9d:10:6c:72:4b:07:37:6f:1e:99:d9:
55:10:e7:55:4f:be:54:b3:f3:3f:8a:4d:8c:42:19:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:EA:B7:D0:19:73:32:7C:26:79:4F:F7:99:F1:A3:E6:34:9F:FF
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:88:a6:d9:4c:f1:ae:be:02:5b:6b:e3:13:05:f2:bc:be:19:
ca:f3:bd:a3:0b:4c:31:b0:51:2c:93:cf:be:73:8f:50:1a:11:
50:80:37:03:53:1a:5d:2c:f5:ff:d5:f3:a8:62:ca:79:25:0b:
13:d5:3d:88:ea:69:54:87:71:b6:d9:93:24:ce:b3:3d:44:df:
87:12:f9:d7:f4:c1:80:f2:d7:bf:88:4c:2f:36:29:13:23:08:
5c:25:25:d1:97:b2:6a:fa:8e:ac:99:50:7c:d8:de:06:53:4f:
dd:c9:d7:ac:66:af:f2:47:e7:7d:9b:8e:20:a2:f7:f7:a7:83:
bb:91:c7:f5:d5:06:d7:a0:65:0d:72:b1:24:7c:8b:cf:a7:8f:
25:3a:54:07:84:b1:30:f4:af:f8:21:a7:ae:d3:ac:60:75:67:
25:5d:d0:b2:08:0c:59:93:7a:3a:3f:3d:72:29:89:40:9b:b5:
02:41:63:3d:4a:10:63:ef:c3:24:04:7d:66:86:41:88:8f:6b:
6c:28:19:95:be:07:84:0c:cc:5b:67:12:fd:18:d2:de:95:f7:
e6:b4:f9:54:63:76:17:b0:ca:2f:ef:f4:a6:fd:60:e5:b3:16:
13:24:93:96:b7:5a:7c:8a:33:9f:96:7b:d9:c0:f5:98:11:70:
a8:37:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:52 2026 by rpki-client