
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier: fiD8W7BkT46jS2swL3YgVUm0bEbfWCubKw88uP2Vmt0=
Subject key identifier: 68:A9:F6:6D:30:12:8D:14:8A:F4:C3:B0:99:D5:19:A1:D3:1E:EC:3E
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number: 023C
Signing time: Sat 13 Jun 2026 02:32:11 +0000
Manifest this update: Sat 13 Jun 2026 02:32:10 +0000
Manifest next update: Sat 20 Jun 2026 02:32:10 +0000
Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: Aca0+8iOv3y7sG9IemDh/xz19QnRxUi8cMIxgt8dWSQ=)
2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Validity
Not Before: Jun 13 02:32:10 2026 GMT
Not After : Jun 20 02:32:10 2026 GMT
Subject: CN=6a2cc12a-65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:0f:96:e5:dd:7f:68:e0:7c:17:68:b4:0c:
e9:d8:e2:e9:11:00:83:92:ba:f5:ff:40:21:5b:8d:
12:04:ae:5e:63:75:0d:7f:40:37:7f:23:99:87:82:
71:d6:04:9a:65:30:78:95:e4:7a:b7:1e:3e:a8:df:
22:bc:82:8b:bf:21:53:33:fd:b4:41:de:4b:50:2d:
cf:c0:71:b4:a5:d5:ec:5c:80:a2:12:2e:af:a4:66:
3f:c0:f5:90:4d:1e:97:65:cc:fb:f5:5b:d4:f2:ac:
45:18:f2:02:17:2d:55:01:ba:3d:00:1c:13:07:80:
2b:aa:ac:3b:15:34:ca:eb:e3:18:77:96:08:37:63:
39:7a:81:41:7b:d5:28:83:4d:18:6d:51:a4:7a:36:
26:c6:c7:6a:f2:1e:49:96:aa:b4:0a:95:0a:40:70:
99:54:0d:77:fc:49:e4:ab:22:60:06:4f:b0:eb:dc:
cc:49:9a:51:e6:e5:fa:de:08:f7:09:b6:5d:14:2a:
ea:91:4c:2d:07:92:71:68:b4:9e:67:60:6f:69:4a:
10:c6:84:4c:8c:7d:61:54:a7:05:f7:a0:b8:d2:6c:
12:df:78:f6:23:4d:69:39:92:0a:98:98:38:52:ea:
f2:7b:25:4d:8c:ce:b4:5a:80:f5:a7:93:dd:8b:00:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:F6:6D:30:12:8D:14:8A:F4:C3:B0:99:D5:19:A1:D3:1E:EC:3E
X509v3 Authority Key Identifier:
keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:86:a4:f4:aa:6f:c4:64:37:47:90:16:f5:02:9b:8d:4d:eb:
0d:65:b0:a0:18:ff:5a:45:3c:6b:78:ae:3a:23:f3:18:d5:f4:
2f:06:9c:a0:50:75:5a:1c:16:0d:90:14:bb:5c:d1:a3:d3:2c:
04:4f:ae:8f:8b:3e:e0:60:14:a6:d4:21:f7:29:d0:1d:03:86:
f8:af:38:f6:a1:75:8c:17:d1:2d:e7:32:24:e7:a5:a0:17:85:
4b:28:ae:71:d7:f9:79:68:64:0e:0a:77:98:d1:d2:11:47:94:
a8:99:dd:dd:b7:89:5e:a1:f9:82:17:5b:fc:cb:3b:57:16:7d:
5e:4f:0d:b9:66:d3:8f:08:7e:3c:7b:6a:de:64:82:eb:ec:7c:
53:b6:b4:d1:71:12:40:f3:77:59:e0:6a:e7:0a:57:47:bd:17:
54:97:33:5d:69:ff:8b:28:65:06:0a:d8:ba:15:0b:2d:cf:ed:
23:c1:c8:92:34:f3:cf:b0:f7:38:87:f2:a4:9e:bc:97:94:60:
7c:a4:37:d5:c4:7d:20:d7:8e:d6:7d:26:e9:08:15:2e:59:c0:
c1:ef:ed:bb:66:5d:be:38:1a:be:61:9b:3f:00:6b:e1:f8:2a:
43:f9:7d:8c:50:e1:b3:27:4b:b6:5d:c1:0b:89:c1:f7:98:11:
9e:10:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:10 2026 by rpki-client