
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier: b9iriuS9GqlH2ox+HsTgTxRGlL3Ko2uFEbjtTLFcfOg=
Subject key identifier: 7B:2F:BD:FC:4E:DC:D5:6C:3F:58:50:50:1B:E7:6F:80:CA:2B:10:35
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 0782
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number: 073A
Signing time: Thu 08 Oct 2026 22:23:19 +0000
Manifest this update: Thu 08 Oct 2026 22:23:18 +0000
Manifest next update: Thu 15 Oct 2026 22:23:18 +0000
Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: XwdqnzsCsFdwt1E/SqkYR8SSjowNkXK7xXktzPLFAUs=)
2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: AReViyH8qYJmKjUIQ8QrviAg/eKIeslm79IJrfhFTIA=)
3: E1201A0422D611EFAE700044C4F9AE02.roa (hash: VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=)
4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: sM6Ff5Btr2H1Za3+xr7nTyk868AOvBu9Fccxr6yah7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Validity
Not Before: Oct 8 22:23:18 2026 GMT
Not After : Oct 15 22:23:18 2026 GMT
Subject: CN=6ac817d7-2ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:65:ca:9f:74:b1:2c:cf:46:ef:e3:ba:09:
62:e4:fb:97:01:09:a1:43:22:e5:60:18:62:dd:5b:
97:86:8e:33:b9:1e:86:69:80:5f:65:54:ee:bd:6c:
13:32:39:69:3f:95:e1:ba:95:aa:4a:30:c9:dc:df:
24:ee:fa:58:c6:22:da:2e:94:0f:f3:e6:3e:9e:4b:
e8:3b:cb:5d:d1:fe:5d:3c:8c:ab:4c:19:89:0c:1c:
e2:c7:04:3e:55:60:90:a8:b0:83:7f:6d:a1:21:7f:
73:eb:81:cc:9f:f5:33:da:04:e1:1d:59:fc:99:49:
c6:f7:b8:03:00:c4:48:f1:4e:d3:84:74:43:a6:ee:
5f:1b:12:3a:09:53:c7:f9:6b:4e:f1:13:9b:5c:1c:
c6:89:2c:57:f3:77:8d:8f:95:0c:ac:23:46:b0:fc:
45:fe:b5:69:fd:d0:75:ef:22:c0:a1:8e:8a:cf:6a:
b8:dc:cc:e5:e7:d4:4d:c6:df:d1:2f:d0:40:47:b4:
db:f3:33:2f:21:eb:38:ca:32:d1:c7:f2:7b:1e:00:
98:57:57:86:e0:a0:20:80:30:fd:7b:93:72:d7:a5:
6d:34:2d:3b:7a:a4:58:89:90:a0:64:68:29:79:25:
90:8d:23:50:cf:92:d5:a7:82:51:13:d3:5a:2d:0b:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:BD:FC:4E:DC:D5:6C:3F:58:50:50:1B:E7:6F:80:CA:2B:10:35
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ab:57:86:91:17:e9:9e:1b:ef:a6:d6:b8:17:41:6e:80:d1:
4d:22:c3:9e:f3:72:ea:bc:e6:17:11:ce:b5:f4:40:b5:b1:0f:
a6:a8:d8:1c:41:2b:0a:19:61:dd:10:75:a1:08:d9:c7:d6:87:
9c:d8:2e:68:c4:62:51:a3:43:4a:1f:38:d8:81:0d:d6:e1:7f:
6a:c7:44:d4:fe:61:b8:82:0a:f6:af:d0:5e:d5:5b:7e:46:c0:
33:66:d0:dc:78:63:1f:88:e4:84:09:71:51:48:f0:6f:4b:69:
63:34:67:d4:65:06:3d:50:97:95:f8:19:1c:3a:29:b7:ba:df:
f2:fa:41:5d:1e:d9:67:4c:fc:c8:15:c5:c5:7d:d4:34:a1:96:
cd:1f:0e:44:1a:91:99:ec:52:f7:0b:f9:96:91:7d:b7:36:85:
ce:09:89:c6:f3:50:c0:45:ee:b8:d6:b2:ad:ec:51:22:c3:b7:
a6:51:e8:bb:a6:ce:c3:ae:2f:08:10:f0:d1:df:d6:71:77:48:
8b:43:f4:af:05:c1:29:d2:a9:fb:9a:5f:7f:4a:76:da:cd:5c:
df:bc:18:6b:9b:b3:a0:f1:a9:9e:40:fb:05:ef:5e:6e:c8:00:
98:40:4a:c6:46:43:3d:97:6a:af:d1:92:55:a0:be:08:c1:ce:
8d:4e:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:55:20 2026 by rpki-client