
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
File: XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft (raw, json)
Hash identifier: erw96JheVgPEzRjDPrWWA+l1BJQtF8O1usFlY5ycZOA=
Subject key identifier: 2A:60:9B:51:9E:A2:55:DE:B3:D0:50:3A:61:DC:51:68:97:EC:21:DE
Authority key identifier: 5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94
Certificate issuer: /CN=A9136BEA/serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
Manifest number: 69
Signing time: Thu 15 Oct 2026 09:08:16 +0000
Manifest this update: Thu 15 Oct 2026 09:08:15 +0000
Manifest next update: Thu 22 Oct 2026 09:08:15 +0000
Files and hashes: 1: XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl (hash: J2ZHRcAwthTR5fT+qHanX2jCgseoRUbu0PxoJZI9hEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl
rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BEA, serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594
Validity
Not Before: Oct 15 09:08:15 2026 GMT
Not After : Oct 22 09:08:15 2026 GMT
Subject: CN=6ad09800-3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:06:44:64:e0:09:f9:c3:56:ba:72:1c:fa:
02:c6:27:5a:cc:61:4c:cd:82:67:10:3f:82:63:4b:
52:50:0a:8f:69:21:a3:b3:5e:74:60:af:1d:d6:69:
32:e9:22:fd:80:ca:c1:f5:b8:91:06:8d:d8:a4:17:
a4:dc:5e:b1:39:99:bd:df:6b:10:11:18:bf:7b:54:
5b:45:a4:3e:7e:64:a0:2d:36:75:35:e8:b0:99:01:
dc:9b:b8:a2:fc:e7:f9:ca:71:db:c5:d4:2a:68:02:
d0:5e:18:fe:c4:da:42:a6:28:ed:af:52:1c:eb:7f:
b2:66:41:5d:94:07:93:9e:00:14:f3:73:9a:49:85:
1e:f4:0b:76:05:48:a9:47:d6:3a:7c:87:3b:14:a9:
ec:40:a4:b7:98:02:a8:67:6c:26:05:33:bb:f6:0f:
1e:52:5b:9e:cf:42:cf:18:5a:9f:ee:60:51:1a:51:
3f:99:9d:bb:8b:3d:04:26:e8:da:4e:d6:c1:20:4e:
e0:99:59:87:1c:07:d9:5c:78:15:0c:63:95:cb:59:
e0:66:08:f4:16:68:f0:3d:0a:0f:b8:30:04:22:39:
b0:b9:3f:8f:a2:6b:ec:5e:19:1a:9a:ec:a0:ad:6d:
ec:c9:ea:76:f3:d0:94:25:c0:1d:0e:33:89:1b:58:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:9B:51:9E:A2:55:DE:B3:D0:50:3A:61:DC:51:68:97:EC:21:DE
X509v3 Authority Key Identifier:
keyid:5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a5:13:d7:ee:6e:3e:da:2f:e7:0e:32:33:da:f6:8b:a8:10:
94:7a:bf:17:f2:ba:52:33:bb:1d:0a:cc:b2:af:78:a2:b9:93:
a6:bc:58:cb:ff:39:5d:72:d7:20:e3:be:69:f2:41:c1:8f:78:
ff:f6:e4:21:98:be:fd:89:68:29:02:6d:3c:ef:fd:34:5d:9b:
ae:a3:07:d9:1d:39:1a:fd:bb:13:18:a2:15:61:5f:ae:3c:51:
90:68:7e:6e:05:50:df:e6:98:0c:f0:e1:03:39:df:1e:44:3d:
6a:78:f5:89:61:03:c8:3b:3c:c3:4a:de:16:77:1c:cc:55:4f:
12:47:0f:8c:dd:9d:d7:78:af:19:e6:76:08:a3:d5:30:48:47:
87:0e:86:cc:1d:79:66:0e:7c:b2:1a:52:ff:83:e9:5b:05:5c:
23:7f:6b:c0:6e:75:b5:f1:c0:34:c9:d9:f1:cc:39:09:a2:06:
99:08:03:f8:c7:35:11:9d:aa:70:31:d1:1f:ca:3e:55:da:5d:
18:3e:e4:ee:f7:e6:9c:27:fb:e1:4f:1f:9e:f3:81:33:10:56:
b9:e8:86:dc:5d:b0:38:eb:34:c7:89:18:fb:84:a2:2e:ba:ae:
ae:74:a9:21:94:b3:7b:5f:3a:de:f4:bd:b9:1b:63:c6:35:2f:
8b:0c:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:36:30 2026 by rpki-client