
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: DYPGvQPOwu5qixdT/qcKWDbeKNCEcKAsfV0UTZ9MEG8=
Subject key identifier: C0:A6:9B:AC:1E:DE:FA:78:05:23:7C:9E:D8:14:60:02:CA:14:00:2C
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 0776
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 076F
Signing time: Sat 26 Sep 2026 21:44:18 +0000
Manifest this update: Sat 26 Sep 2026 21:44:17 +0000
Manifest next update: Sat 03 Oct 2026 21:44:17 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: ICEDYivYl3WNMTBSs0cfEudV1PxChTY+xP6CYXRHZL8=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QIvXNw4SfpNnIslRP4MG8z3E8JePtXN3iNiIRQ5vklk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Sep 26 21:44:17 2026 GMT
Not After : Oct 3 21:44:17 2026 GMT
Subject: CN=6ab83cb2-95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:87:14:bf:4a:4f:8e:6c:81:73:3b:a5:a0:
13:af:f9:5c:4b:b5:be:1e:e7:ee:c0:50:8a:18:6c:
bc:2e:33:64:9b:2e:66:4c:4d:58:c4:20:d3:cd:c6:
96:d1:d4:7e:56:36:82:89:4f:f7:35:8b:d9:72:55:
9e:59:8e:e3:98:2c:3c:c7:6e:c8:78:d5:bd:85:33:
df:0d:71:39:63:7a:98:5b:90:a5:c7:0d:5c:90:71:
2d:ef:17:c4:13:60:2e:d9:24:9a:5a:d7:52:77:45:
52:5f:29:9a:5d:cb:0c:b5:ca:65:02:e3:9f:57:b5:
4d:93:3c:11:d4:78:c8:7c:9f:04:41:10:f3:29:60:
b2:e1:b7:b2:57:32:86:e0:b6:5f:1a:6e:21:3d:ce:
41:ad:af:aa:41:d5:8a:8f:88:d8:23:3e:50:d2:6c:
98:d3:45:61:bc:54:7c:a4:b1:2a:c2:0e:a1:bc:4c:
bd:12:af:0f:1e:62:21:9b:2f:0f:f7:04:36:a5:3a:
a0:d5:fb:62:90:45:b3:f4:9f:5f:6c:d9:59:51:b0:
a6:ad:cc:79:06:ab:d7:2f:91:71:9b:ed:84:9b:41:
6e:d4:4d:46:a8:9e:4c:ea:de:83:df:27:85:16:77:
cf:b5:4c:31:93:a6:d2:c6:9a:c8:29:42:bf:95:7c:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A6:9B:AC:1E:DE:FA:78:05:23:7C:9E:D8:14:60:02:CA:14:00:2C
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:21:43:3a:e7:11:39:6e:7b:e5:fe:93:31:df:1c:0b:49:
77:c8:95:e3:cf:aa:80:ec:aa:2f:23:d9:06:ed:ec:6f:44:95:
88:29:e0:d9:0a:94:e7:cc:b4:13:95:e6:66:63:b1:8a:ac:a3:
1c:05:40:21:a8:a7:9a:97:8d:fd:d9:af:e4:96:20:78:fe:52:
e5:e6:10:11:e9:e4:fd:26:19:4a:c2:38:ab:71:be:9f:ea:0d:
64:fc:ad:ee:27:03:f9:b9:cc:6d:1b:aa:7a:1f:4b:cf:cc:8d:
16:db:ba:15:e7:77:41:07:dc:6c:92:95:86:87:02:ad:9d:0a:
a9:49:3d:76:40:5d:01:b7:c8:8b:f8:8b:74:4b:f1:1c:ed:5e:
06:3d:f6:a2:ff:9b:72:54:81:31:3e:d6:64:3d:09:2e:7a:3a:
57:c4:a6:9d:f8:a0:73:30:d0:1d:d5:dc:5d:d7:a8:70:ec:55:
5e:eb:f8:34:23:94:a5:8a:1b:dc:e6:8b:60:ca:c6:5d:61:d9:
eb:4a:9b:b9:39:25:be:dc:23:63:d3:a3:b6:f4:90:ab:77:2f:
a0:ba:89:a0:f4:ae:2a:ac:86:11:a4:13:74:79:e4:d8:c1:02:
33:40:dd:b3:e9:f2:53:2a:c9:7b:12:3a:15:bf:a3:db:b5:46:
fc:aa:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:11:31 2026 by rpki-client