
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: pCjYrHr51LUMu6C7Xz5SBIQNSx+Y3TsbsMJPE8X3NzI=
Subject key identifier: 31:04:29:A4:63:DC:A3:BF:E5:EF:44:23:F9:61:97:B4:2A:FF:F4:80
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 0361
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 035B
Signing time: Mon 21 Sep 2026 00:43:03 +0000
Manifest this update: Mon 21 Sep 2026 00:43:02 +0000
Manifest next update: Mon 28 Sep 2026 00:43:02 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: cOy8Hb7Q6GH0yZUsRKQEHzd0G+wOJtaiV4Kb2pFN8LA=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865 (0x361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Sep 21 00:43:02 2026 GMT
Not After : Sep 28 00:43:02 2026 GMT
Subject: CN=6ab07d97-9a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:14:03:7d:50:ae:37:19:54:e0:47:f8:f6:
26:ca:1a:4e:f5:80:2f:22:b4:e6:df:f6:77:cf:1c:
1f:38:b4:4f:ea:35:eb:2e:12:9e:7d:43:9a:05:de:
f8:ee:d6:5e:21:ba:57:f4:c3:e6:72:d7:83:78:d1:
1a:8a:84:e6:94:93:60:f2:15:53:c5:5b:d6:fb:f9:
cb:46:05:44:64:ed:5f:e3:fb:48:e2:b3:e6:b7:01:
b0:5e:a8:34:98:3f:ee:d0:b0:59:6d:95:fe:ff:f6:
f3:ef:6d:e7:5f:fc:9f:97:0c:fc:84:72:e1:be:4b:
4c:14:0a:30:39:2e:a7:8f:b1:18:4b:bb:3c:d9:3d:
e6:c2:2f:23:2e:72:86:37:fe:e5:c1:40:8f:16:1d:
78:af:5f:15:97:67:c3:11:c4:02:80:13:fa:f6:2d:
dd:ab:e9:bc:e7:bc:ba:d2:74:c9:50:7e:d0:90:c8:
4b:32:9f:32:4d:2b:db:37:48:8b:36:bf:db:18:55:
dc:01:2c:ce:bf:05:6a:6a:2b:a4:4b:fc:ef:dd:55:
a2:08:2e:10:b6:5b:7b:1a:5f:20:62:8a:87:51:eb:
85:ca:01:a3:b0:59:c7:e4:2b:14:b3:f1:9d:6d:94:
ea:03:06:9d:8c:a2:4f:b7:59:02:13:a5:23:13:9b:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:29:A4:63:DC:A3:BF:E5:EF:44:23:F9:61:97:B4:2A:FF:F4:80
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:08:27:b2:af:50:e9:dd:f8:25:af:91:d6:ad:b3:f9:47:4f:
37:f8:63:bc:8e:61:f8:e3:c1:ae:db:1d:92:1f:f9:83:1d:40:
6e:a0:0d:aa:03:29:f6:85:17:0e:ce:8e:ae:21:76:71:14:de:
8f:ac:89:58:bd:6a:e4:ee:ce:f1:a9:06:8b:2f:ea:ee:ad:a0:
cf:d6:ed:fc:fe:43:0b:b1:36:df:37:0a:91:13:e2:a1:25:01:
52:00:9d:11:3a:71:24:79:9b:82:c1:86:17:44:e4:ed:85:a0:
77:a1:91:56:cd:d2:3b:1a:9a:2a:76:20:95:a7:11:72:fa:b4:
fb:27:52:a1:da:2b:5b:f7:5f:73:ef:57:6f:0f:87:a7:06:77:
3a:7b:b2:6d:87:0e:eb:cb:b6:01:1e:ea:50:1d:f9:9d:4c:70:
0a:35:14:52:5e:6a:af:b3:3e:d8:3c:5c:5f:0d:90:ba:cf:1a:
3b:04:80:d2:19:f7:84:ca:89:ed:af:b3:8a:7d:28:ef:5a:40:
f3:66:d6:b9:92:71:f6:ec:db:cc:99:fe:5e:10:67:ca:d4:19:
13:7a:13:fe:be:98:99:47:b8:5a:2b:0f:df:a0:a2:20:02:81:
84:3a:fe:a4:8d:0e:80:62:d7:9f:fb:61:8a:dc:19:eb:93:4b:
8e:ec:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:21 2026 by rpki-client