
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json)
Hash identifier: Nr1qUlAOuMvaq/xVBGQDbUzQSI2mAkqbym7nKPCLV9Q=
Subject key identifier: E5:9E:4C:52:32:C6:E6:F1:AB:81:F1:E4:2A:FC:A4:37:C4:4A:3F:DA
Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
Manifest number: 0652
Signing time: Sat 28 Feb 2026 23:11:30 +0000
Manifest this update: Sat 28 Feb 2026 23:11:29 +0000
Manifest next update: Sat 07 Mar 2026 23:11:29 +0000
Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: dHQjrfct+N843P7XGssGwc9LhD7NGUJ0VRylTGMPoF4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8
Validity
Not Before: Feb 28 23:11:29 2026 GMT
Not After : Mar 7 23:11:29 2026 GMT
Subject: CN=69a37622-a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:ea:49:a9:ba:d3:17:a6:7a:20:33:07:6a:
80:4b:84:cb:ef:99:f9:63:32:19:39:dd:bf:8e:27:
48:92:e7:25:b6:ea:b6:ac:ac:91:be:d2:3c:7c:ab:
76:de:b4:5c:2a:d7:dd:49:74:d5:aa:49:e3:ae:7c:
91:80:98:fe:a3:a2:76:40:b7:7f:cd:a7:fc:cb:79:
47:e1:e6:71:06:b8:df:9d:6e:43:e3:05:68:04:d1:
86:76:54:27:45:32:2b:46:39:e2:cb:94:3f:f1:0d:
48:88:98:ad:93:90:fd:19:b4:bf:28:31:85:d5:dc:
cf:7f:03:6e:15:27:43:69:02:42:d5:38:36:78:c6:
82:e6:2e:ca:9d:9a:87:0a:90:10:6c:b7:d4:e4:0c:
ff:d5:66:b8:4f:f1:e8:18:e4:71:a5:b0:b9:4b:8a:
1a:9e:9a:02:f6:b1:f2:19:c2:1f:1a:c5:e8:67:b3:
58:5b:2e:c3:20:05:9a:b1:c4:f6:d1:a9:0f:c2:d9:
5e:46:83:02:a2:96:7b:7b:cd:09:a2:ed:21:76:ba:
1b:05:89:36:25:1f:5d:62:26:dd:70:f1:06:75:a8:
d9:75:f3:d8:9c:1d:1b:40:a3:d7:81:f5:c5:54:05:
d6:92:f7:15:30:3b:90:90:43:07:47:d0:d4:63:47:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9E:4C:52:32:C6:E6:F1:AB:81:F1:E4:2A:FC:A4:37:C4:4A:3F:DA
X509v3 Authority Key Identifier:
keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e7:58:98:73:fc:c7:5b:a3:33:3e:2f:19:97:37:04:35:d2:
f4:84:9f:a2:6c:d2:d4:67:02:7d:c4:c3:03:0a:0c:58:e8:7f:
ce:43:e5:54:2d:de:86:d5:4c:58:75:52:2d:e7:14:2a:32:e7:
cc:7d:84:a7:a6:1c:da:1c:63:34:45:48:cd:cc:dd:14:59:8a:
0f:d8:30:37:d8:95:98:df:86:e8:fb:ec:34:64:3b:89:ea:5d:
33:44:4c:ed:49:1c:3a:bb:ef:95:44:11:3e:f2:47:38:01:f9:
38:a0:ac:7a:fd:12:47:97:50:d1:c7:07:58:55:db:59:7b:5b:
9d:66:93:79:01:e8:71:16:8d:16:dd:7e:97:cb:e5:e7:01:d1:
27:f8:ff:7a:7c:6c:59:98:a8:16:db:16:19:3f:5b:9e:b2:36:
f1:cb:4a:aa:35:1f:e5:64:50:7f:2b:36:38:29:66:5c:9f:be:
8d:6a:43:3f:c8:14:72:27:87:68:54:2c:be:cc:91:76:f1:15:
ed:84:89:64:32:ba:22:19:6c:89:db:63:2d:9b:78:97:cf:17:
3f:98:c5:3a:f4:a9:50:c1:7e:1c:16:79:94:28:23:e0:e0:21:
c2:0b:4e:10:79:0b:7c:0b:2d:c7:06:58:69:85:31:ba:72:fe:
62:b1:74:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx
RkQxRENFQTgwHhcNMjYwMjI4MjMxMTI5WhcNMjYwMzA3MjMxMTI5WjAYMRYwFAYD
VQQDEw02OWEzNzYyMi1hMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3nqSam60xemeiAzB2qAS4TL75n5YzIZOd2/jidIkucltuq2rKyRvtI8fKt2
3rRcKtfdSXTVqknjrnyRgJj+o6J2QLd/zaf8y3lH4eZxBrjfnW5D4wVoBNGGdlQn
RTIrRjniy5Q/8Q1IiJitk5D9GbS/KDGF1dzPfwNuFSdDaQJC1Tg2eMaC5i7KnZqH
CpAQbLfU5Az/1Wa4T/HoGORxpbC5S4oanpoC9rHyGcIfGsXoZ7NYWy7DIAWascT2
0akPwtleRoMCopZ7e80Jou0hdrobBYk2JR9dYibdcPEGdajZdfPYnB0bQKPXgfXF
VAXWkvcVMDuQkEMHR9DUY0e7TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWeTFIy
xubxq4Hx5Cr8pDfESj/aMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG
NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi
cnlTMnVRVnFlN01mMGR6cWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt+dYmHP8x1ujMz4vGZc3BDXS9ISfomzS1GcCfcTDAwoMWOh/zkPlVC3ehtVM
WHVSLecUKjLnzH2Ep6Yc2hxjNEVIzczdFFmKD9gwN9iVmN+G6PvsNGQ7iepdM0RM
7UkcOrvvlUQRPvJHOAH5OKCsev0SR5dQ0ccHWFXbWXtbnWaTeQHocRaNFt1+l8vl
5wHRJ/j/enxsWZioFtsWGT9bnrI28ctKqjUf5WRQfys2OClmXJ++jWpDP8gUcieH
aFQsvsyRdvEV7YSJZDK6IhlsidtjLZt4l88XP5jFOvSpUMF+HBZ5lCgj4OAhwgtO
EHkLfAstxwZYaYUxunL+YrF0jw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:03 2026 by rpki-client