
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: 8RR9U3TNjOqYuQwpWsbRZ+GeP1TJlphcqiyNvJN2Dlo=
Subject key identifier: 6C:41:37:E8:EE:9C:6E:0A:80:DB:A3:80:DC:6F:DF:D1:35:A9:42:1A
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 071A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 0712
Signing time: Tue 28 Jul 2026 22:37:38 +0000
Manifest this update: Tue 28 Jul 2026 22:37:38 +0000
Manifest next update: Tue 04 Aug 2026 22:37:38 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: zOLuuBA9tAxhTJNSp5Pylq2252AsAbOpPG9M92GWcpI=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Jul 28 22:37:38 2026 GMT
Not After : Aug 4 22:37:38 2026 GMT
Subject: CN=6a692f32-bbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:26:61:aa:0e:d0:7e:61:86:5c:96:39:0b:
30:64:22:e1:9d:26:4f:2b:db:47:bb:01:76:59:94:
04:7a:10:36:bc:5d:f3:22:ab:32:57:96:97:ab:43:
df:30:0c:0c:91:1e:ff:5e:2d:e9:10:5c:25:a6:ff:
bf:e0:51:e4:3f:d0:72:5e:6b:f0:7a:b2:3b:9d:5d:
17:36:28:e7:54:21:d4:19:64:2f:3d:0a:0e:14:31:
ae:99:2d:ce:5e:73:39:00:58:17:69:eb:53:ac:a8:
41:59:7f:66:52:70:d3:71:9f:3e:7c:07:da:3a:73:
71:42:da:5e:f6:fc:ea:53:7a:ed:85:ed:27:04:ba:
70:04:af:1e:14:41:7b:19:35:56:ae:43:ee:fa:05:
0d:f4:b8:4b:3d:0d:ea:f2:4b:6d:10:d5:dd:77:af:
d9:75:2f:29:69:b0:50:bd:19:e7:f0:b4:6e:24:41:
50:33:d8:34:48:3d:68:b9:03:c3:20:d6:b9:69:03:
53:21:83:96:1d:60:36:87:76:07:bb:03:60:49:70:
8c:5d:e8:34:af:33:ec:07:16:4b:ff:bb:45:45:5f:
c3:61:70:48:49:19:d9:fa:68:50:2a:b9:0f:a5:11:
c3:44:66:7b:ee:a6:51:79:fd:db:a5:99:d8:af:65:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:41:37:E8:EE:9C:6E:0A:80:DB:A3:80:DC:6F:DF:D1:35:A9:42:1A
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:4d:40:b2:ae:e5:3e:b3:4c:0e:57:58:54:82:7e:c4:7c:
4b:87:59:b1:6e:da:83:d6:f7:6f:fc:9b:78:4c:4b:2a:50:65:
61:c4:33:be:1a:27:eb:73:f4:50:b5:e5:86:88:32:f3:4b:87:
84:f9:7e:f7:9b:25:6b:3d:3a:ed:e1:98:a2:ce:e8:bd:43:25:
9d:0c:8c:82:82:13:b2:9a:c3:d7:29:50:f4:4a:b8:8a:33:d5:
d5:55:96:aa:85:27:9f:d1:76:9d:89:a2:b8:3f:35:68:81:4e:
0f:80:9c:3e:f1:a9:c7:a7:2d:10:48:39:18:af:df:4d:e8:fc:
19:43:a2:a2:14:83:9c:3e:db:2a:28:c4:7a:c8:39:31:fd:9f:
a5:14:4c:50:76:65:76:3c:62:49:92:aa:a5:13:68:d0:65:43:
c2:34:2c:ca:9f:ad:03:da:46:30:63:b4:60:06:62:cb:5f:60:
45:6d:b1:ae:14:df:44:3a:d6:f6:bc:3b:c4:a7:cb:30:08:93:
95:4f:62:e0:93:93:de:87:60:5a:c2:63:35:48:d8:f1:be:08:
ff:99:be:9c:71:fa:8b:a5:68:8e:17:21:f5:b3:2c:e1:ef:c0:
fc:77:87:17:16:69:02:52:4f:95:05:f0:0b:b8:52:a7:36:05:
40:ee:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:18 2026 by rpki-client