
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json)
Hash identifier: cLa3/E1JD3Vohg3sSoFra1l4E3tjfRYYDvPz5WKtnjA=
Subject key identifier: D5:26:B5:AE:73:CA:3C:9A:D3:95:72:04:D9:AC:44:B5:09:07:BF:C0
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
Manifest number: 02F9
Signing time: Sat 03 Oct 2026 02:01:29 +0000
Manifest this update: Sat 03 Oct 2026 02:01:28 +0000
Manifest next update: Sat 10 Oct 2026 02:01:28 +0000
Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: gtWGW0IkEE1T/p2sK9xGfyLlfGcU3jgM+mlBBinQXp4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Validity
Not Before: Oct 3 02:01:28 2026 GMT
Not After : Oct 10 02:01:28 2026 GMT
Subject: CN=6ac061f9-3990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:b1:03:a8:9c:fd:b4:0c:c1:5d:b5:68:35:
8b:60:79:45:84:85:04:9b:55:1f:a7:38:7c:f2:af:
85:e4:13:31:76:25:ba:6c:de:3b:7b:db:c6:7f:c1:
2d:d4:f6:22:30:c3:d9:0e:79:f8:e2:a2:7e:38:bb:
42:dc:0f:45:b3:d6:b5:b7:b1:b5:9a:45:39:ac:20:
d3:f4:01:23:15:8e:74:24:8f:e0:69:4f:74:c0:5a:
96:61:47:92:4d:47:45:c2:4f:86:e4:35:be:33:23:
03:f6:f0:7c:6b:48:f9:e3:b6:69:56:0f:01:bd:ec:
46:0d:dc:2d:a7:43:f2:2e:ba:a4:80:96:70:40:a8:
b5:c0:c9:92:b6:68:ff:0e:42:49:8e:3c:fd:af:e5:
eb:27:9e:5f:62:a5:5e:d6:4b:38:af:26:8b:40:19:
d2:b7:da:5e:89:34:6e:4f:3c:80:8d:be:4d:bc:50:
dd:16:d8:ed:53:23:56:51:ff:37:71:8d:cb:37:08:
89:c5:39:91:b8:23:4c:2b:20:e1:f7:19:f4:8d:56:
e7:ad:76:d6:3f:ec:c3:52:a0:47:4a:a0:b0:7d:15:
37:dc:ed:12:20:2f:27:2b:02:b8:42:2a:c4:30:e7:
22:33:35:1b:30:82:28:68:71:49:fd:25:24:37:dd:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:B5:AE:73:CA:3C:9A:D3:95:72:04:D9:AC:44:B5:09:07:BF:C0
X509v3 Authority Key Identifier:
keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:18:8f:2f:f8:b8:87:ae:a3:69:34:ca:da:09:15:61:f0:
0c:82:5d:59:6a:d0:76:71:32:64:c4:61:28:a9:6b:cc:40:e8:
32:78:fc:1d:2b:87:f1:34:2b:63:ef:2e:f6:e7:4e:1d:03:f3:
8a:0c:51:b8:1c:da:12:b8:b1:e8:f3:d6:7a:1e:19:f8:49:b4:
1f:64:e4:46:0f:02:33:fd:76:f7:63:2d:71:23:f3:47:3e:b5:
28:75:95:ba:c9:d3:a3:d9:4c:d8:80:f8:0d:8c:73:6a:49:ed:
84:3f:96:dd:d1:f2:52:bd:be:1e:0b:ff:7e:f9:b9:5d:fd:56:
fb:fc:c7:89:52:41:e6:61:28:0e:91:5c:fb:be:1c:8e:76:a1:
e3:bc:30:25:8a:dd:a8:1a:d9:1c:44:f7:aa:5f:ea:98:8a:2f:
82:36:d9:14:b5:f4:99:ae:b5:fd:ac:65:6b:cb:11:d4:46:3e:
1d:93:f5:5c:ec:e6:e3:fc:69:7c:a1:cf:9e:cb:7c:8e:c7:77:
e0:5e:2f:1b:be:6e:90:e8:d5:81:89:24:29:6f:e4:f2:82:da:
e7:f4:1d:03:1f:48:7f:c2:36:6e:89:b1:b4:8d:ef:7c:f3:99:
b7:4f:8d:4c:ec:f1:61:aa:be:20:29:5b:67:68:85:03:5c:9d:
e8:b2:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:25:16 2026 by rpki-client