
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier: w1uH5IT9smqjNP26tgssndDs40dOf19DIYUFFjss8kA=
Subject key identifier: 6C:BC:E1:6C:AF:68:C4:50:52:78:EB:79:BE:09:7D:ED:18:97:F7:68
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial: 0729
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number: 0718
Signing time: Fri 12 Jun 2026 22:01:41 +0000
Manifest this update: Fri 12 Jun 2026 22:01:40 +0000
Manifest next update: Fri 19 Jun 2026 22:01:40 +0000
Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: 4hdoYrAGGyc5v2qyKBU2MQID+Hvxb0PmqOYnB8Z7beI=)
2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=)
3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Validity
Not Before: Jun 12 22:01:40 2026 GMT
Not After : Jun 19 22:01:40 2026 GMT
Subject: CN=6a2c81c4-a6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:8d:50:4d:3c:4c:b9:47:37:c4:dd:b7:34:
be:8c:32:37:a5:92:60:fc:64:06:d3:87:2c:6f:71:
4d:39:86:7c:ac:97:ae:6a:47:85:b6:a1:78:58:99:
08:fb:f5:46:fc:6b:b2:e7:16:cc:3a:05:73:74:96:
5d:fc:61:b7:c6:dd:41:b8:7b:3e:2c:a3:2c:c3:d0:
60:33:fe:89:3c:9f:05:45:80:ec:3c:f5:f0:15:65:
32:74:5a:e5:81:b2:3a:17:e9:81:06:67:56:77:bf:
1e:c6:40:f5:2d:29:5b:20:43:83:df:00:85:8a:c7:
24:ca:c7:65:05:3d:c5:40:bd:e9:00:b8:7b:c4:6d:
3e:6b:cf:b1:56:11:cd:c1:f5:7c:26:dc:f6:4a:d4:
78:d3:57:1f:a9:24:a3:21:76:96:6f:4e:d5:2b:eb:
90:ef:dd:74:11:62:cd:f6:d5:60:3c:8d:cd:e2:c7:
75:91:78:59:e7:46:80:41:9f:74:25:18:92:e6:45:
64:7e:47:9d:bb:ba:2c:43:95:dd:d7:27:bc:aa:d7:
94:fa:69:6d:ae:e0:e5:f7:2d:32:4b:35:fa:a4:cf:
3f:ed:0a:86:1b:6e:29:64:cc:7b:18:be:56:e7:d3:
d6:61:a0:c5:52:99:31:1d:04:e2:3f:f1:ea:54:db:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:E1:6C:AF:68:C4:50:52:78:EB:79:BE:09:7D:ED:18:97:F7:68
X509v3 Authority Key Identifier:
keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:51:2b:85:1e:96:57:f7:9e:dc:7d:95:f2:7c:31:5c:0b:
fc:f4:12:7f:0a:7f:d8:48:0d:b4:1f:a4:21:b2:df:05:f2:48:
f7:03:c0:d4:72:1c:0b:a3:e1:95:de:dc:90:61:ad:f1:99:82:
2f:33:1d:c4:d6:f8:6b:dc:1a:aa:39:1e:08:b9:82:00:91:ac:
f8:87:db:95:8f:80:c6:4b:39:58:60:f8:f6:fb:34:44:b0:6e:
99:38:5f:ff:19:80:a3:fb:0e:fa:6f:de:00:ef:5d:88:91:6e:
c7:6f:c4:ec:18:24:0f:4e:dd:47:85:56:d7:99:cd:77:b0:57:
4d:53:65:19:7e:38:23:f1:79:d6:bf:ef:2f:c8:5a:e7:65:f2:
a5:af:bc:f4:f3:f8:48:e6:13:2c:9a:80:72:73:c9:b5:bc:d1:
36:4a:98:1f:3d:73:9c:fe:87:23:e9:3c:06:49:5d:ae:9b:e7:
c2:19:d1:bd:2c:78:f0:5d:9c:24:1d:0b:4d:58:48:a6:ff:90:
7d:61:ef:63:6f:8f:6d:21:f2:8a:f6:aa:b6:b1:dd:80:d6:cc:
f7:f1:68:67:bf:26:44:1d:8e:28:f6:38:2f:8a:4e:b9:d4:0e:
51:b9:e9:7d:9f:ce:b8:14:75:1f:56:f7:6c:b9:35:83:1f:73:
8a:dc:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:58 2026 by rpki-client