
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: ULJNG7Lx79LYBJSHyfBpUgbcDspXToE0aMVOgEWcUX0=
Subject key identifier: CE:60:AC:2B:8F:38:65:4A:71:7A:3A:73:5E:BA:EF:9D:FD:80:6C:8D
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 0229
Signing time: Fri 25 Sep 2026 02:49:18 +0000
Manifest this update: Fri 25 Sep 2026 02:49:18 +0000
Manifest next update: Fri 02 Oct 2026 02:49:18 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: 8Ak4N78XQQG6NLYK5bXqv8fUQdYa5rxz6fFMpOo1WsQ=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Sep 25 02:49:18 2026 GMT
Not After : Oct 2 02:49:18 2026 GMT
Subject: CN=6ab5e12e-5514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:dc:16:98:e5:1c:76:5b:1b:4f:fb:33:e6:
84:12:2c:49:d6:c4:05:0a:3f:34:2b:7d:63:3a:91:
bc:c8:06:91:f0:ab:9a:46:2f:e6:74:42:ef:89:4f:
4d:36:ef:54:69:d6:bd:eb:ed:5c:0d:bb:ed:04:c3:
29:8c:28:a4:91:ad:89:a2:38:d6:67:6c:cd:61:5c:
79:2f:f5:7a:69:0e:e0:b3:ab:08:1f:b7:5d:ec:d6:
e2:da:30:cb:2c:e7:5c:7f:8a:82:49:42:9c:91:20:
6d:10:78:92:d5:3f:5a:b3:97:da:21:00:9b:ff:ea:
c0:d6:07:18:16:76:5b:de:42:2a:d5:83:96:f2:f9:
08:f2:eb:04:be:7a:a5:bf:55:0d:5a:19:41:f6:62:
31:49:f4:df:b4:ce:72:4b:33:3f:1f:66:70:b8:1a:
37:1e:ca:4d:30:3f:08:d7:86:75:9e:a0:4c:69:52:
63:a7:6a:f0:31:4e:78:e5:9c:5f:89:63:9f:01:92:
97:5b:c1:a1:c4:7b:1c:ad:3b:ad:b6:82:89:90:c8:
0c:26:97:f7:1f:a1:a7:17:a2:72:56:27:15:9d:94:
04:61:52:dd:81:6c:d2:3a:a1:0e:0b:ff:13:e2:c5:
dd:35:dc:25:7b:e5:ff:2a:1a:65:91:53:e6:13:96:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:60:AC:2B:8F:38:65:4A:71:7A:3A:73:5E:BA:EF:9D:FD:80:6C:8D
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:df:63:24:bb:bb:66:db:d3:78:af:45:28:99:ad:e7:55:
67:0e:a4:ae:1f:45:48:5f:d4:f2:44:65:d3:9d:cf:fc:bf:e3:
6d:05:61:ad:24:17:0b:21:ab:ad:c8:9f:d1:f3:1a:b4:45:bb:
b3:2c:02:3e:27:3e:07:d1:d4:7c:ba:73:3d:cc:2a:9c:c5:13:
22:7d:1f:e7:42:05:aa:61:3f:c5:a5:99:9f:57:74:49:02:a1:
a6:0b:41:4c:ac:b5:75:2e:4c:17:d4:68:2c:6c:f0:b9:18:f4:
c4:90:32:15:46:5e:b8:c1:84:85:ac:3e:3d:1e:fa:5f:10:96:
52:97:f0:f6:54:76:04:6f:5f:ae:55:3f:b0:d1:96:bc:aa:19:
ed:d7:d5:17:b2:82:fd:86:f1:67:bc:40:2e:34:bb:d9:dc:bc:
fb:a0:c4:83:1f:ae:60:b5:1f:2f:c4:08:03:15:ad:7b:6d:ea:
e1:4d:18:7b:fc:13:cd:36:6a:7c:40:d2:6f:4f:8c:c0:d7:47:
cc:d6:b4:51:4c:16:dc:63:8f:8d:c9:84:85:dc:06:d0:cc:20:
b9:88:be:0b:e8:8e:36:06:b0:de:ad:ee:80:c9:57:1c:15:61:
7c:23:a8:e0:84:13:47:ef:89:a5:ba:9d:14:45:fb:43:87:5f:
b9:37:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:43:38 2026 by rpki-client