
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: 6S6qS8SnfhBe9M6DTPVS8RadIV8ZIFZBHOvd3glldoU=
Subject key identifier: 84:1A:AE:B7:63:AD:D8:A4:DD:86:DC:55:25:C4:F6:A7:7B:8B:2E:6A
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 076F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 074D
Signing time: Sun 20 Sep 2026 21:48:32 +0000
Manifest this update: Sun 20 Sep 2026 21:48:32 +0000
Manifest next update: Sun 27 Sep 2026 21:48:32 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: OxYiUfmC8hiEm/U3uw6LoHz5T4pdn9e9R5B4svwQfZU=)
2: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: bNYRWc+xdCHr6Dqm6E4JXdO5OdveJW1Evylh8xk+joU=)
3: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: N+hh0IsbREkCIUI5w/ClySR4LrvvV4rJ4CFoF8qj+kg=)
4: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: 0FJPWWCgs74V2qR0+srXlHP3r9bzqp0VjgYjnq505c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Sep 20 21:48:32 2026 GMT
Not After : Sep 27 21:48:32 2026 GMT
Subject: CN=6ab054b0-ff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:fa:7d:6e:7c:ff:07:72:e9:f3:ce:10:a8:
75:8d:d9:cf:fd:70:bd:94:6b:b6:3a:5f:99:41:1a:
ed:fb:e3:66:0a:0f:8e:44:0d:f4:ed:9b:3c:c9:f1:
10:a5:0b:c7:83:e0:e1:a8:82:3d:82:32:65:0e:70:
32:15:58:44:a8:8b:fc:4d:4d:2b:58:54:58:6f:34:
92:dd:cd:c6:4a:fa:e8:03:dd:b6:34:7a:6b:53:65:
7f:a4:a0:71:18:e5:4f:3a:8a:06:b7:41:6a:3c:c5:
fc:3b:cc:1d:d7:15:b3:f1:07:5c:e4:2e:ac:98:2c:
d2:ea:53:65:1e:a8:71:d3:f5:7a:0b:ba:2b:73:66:
8d:13:82:8c:c2:3a:7d:17:e8:11:6c:59:cb:95:fe:
a0:73:a9:58:68:52:fd:fb:95:dd:c3:c2:1a:3e:f6:
94:1e:51:e1:8f:0d:03:eb:af:74:1a:f8:68:ad:d5:
fb:b9:e2:7a:71:0d:91:41:f2:4d:8e:2b:fc:51:ac:
a4:e2:34:ba:94:be:80:11:56:4e:1c:bd:26:39:37:
46:91:0c:da:7f:52:57:75:94:9d:ff:d1:4d:37:a0:
83:35:4e:4c:19:fc:8f:5f:d1:1c:5d:07:0a:96:20:
99:03:7d:93:7c:50:ce:0b:19:55:41:e7:11:a0:ec:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:AE:B7:63:AD:D8:A4:DD:86:DC:55:25:C4:F6:A7:7B:8B:2E:6A
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b9:6b:0b:b4:69:67:51:a9:93:f7:5a:4b:a3:f5:08:fa:27:
1d:52:e5:2d:fa:42:7b:24:13:f6:80:09:89:6d:7c:19:8e:69:
ee:81:d3:67:98:4b:a0:a1:e7:d8:15:a2:d7:e5:9d:41:db:be:
1f:33:b7:aa:94:53:49:48:14:14:99:78:14:4e:81:60:04:2d:
58:69:d3:00:41:41:b0:d5:9d:d2:78:c7:b5:7e:ca:9d:86:b9:
fa:94:a2:52:33:00:dc:b2:85:a1:82:9f:83:f9:7e:00:90:ce:
4c:e7:9a:8d:00:64:4c:d3:c4:d7:90:c0:a1:7d:a2:78:12:ef:
80:ef:0d:d7:62:84:4b:27:cc:c9:d3:2c:e9:f7:4b:02:fd:ce:
ce:c9:98:4a:a2:ac:4f:a0:c1:5d:06:15:1c:38:77:f4:f8:33:
15:8a:b0:8b:65:60:e6:df:1d:45:cc:a5:16:2b:0b:9e:3f:43:
f2:32:ba:82:30:5d:51:e9:f3:a6:14:11:c3:02:f5:3e:30:70:
41:da:36:e1:68:03:d6:1c:fe:19:87:69:19:24:63:a3:f4:b3:
6c:c1:c4:d1:e2:f5:a9:7c:25:94:45:69:c3:28:49:89:d3:d8:
01:30:c3:e6:8f:67:bf:27:34:dd:77:43:db:20:55:4d:d8:3b:
b4:78:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:29:04 2026 by rpki-client