
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File: xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier: IIDsC65aI+C81SDVKYQjIYDItVgieurzBceKOYNfzkE=
Subject key identifier: 28:74:37:AC:55:97:B9:BF:F9:7B:90:DB:21:F4:AE:1F:FF:6B:85:A9
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial: 0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number: 0480
Signing time: Sat 13 Jun 2026 00:05:41 +0000
Manifest this update: Sat 13 Jun 2026 00:05:40 +0000
Manifest next update: Sat 20 Jun 2026 00:05:40 +0000
Files and hashes: 1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: /yqbDcMnY5dJrPy7MzMI7aN4iuuqrbE00f9M4lxMBcE=)
2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Validity
Not Before: Jun 13 00:05:40 2026 GMT
Not After : Jun 20 00:05:40 2026 GMT
Subject: CN=6a2c9ed5-975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:55:7d:68:a1:c2:22:a3:6e:70:4c:f1:49:
cc:77:8d:41:46:be:5e:2b:45:d3:c7:0d:fd:d1:5e:
b8:96:72:77:fe:0c:d5:90:ec:7e:a5:bf:09:4e:c1:
4d:45:a2:78:20:45:dd:e7:99:6d:28:ed:3c:09:8a:
43:0d:b4:df:6d:79:50:eb:14:d8:f0:73:f9:bb:b8:
01:d8:06:eb:a1:b2:a5:74:b4:d3:6b:9d:bf:27:9e:
d2:42:0e:8b:5c:88:c3:ad:14:2b:32:1f:78:23:4d:
6c:eb:fb:be:4c:fe:77:f9:89:3b:70:64:a7:f1:9f:
6e:19:82:4c:0b:b5:45:53:17:f5:44:62:15:c4:76:
b2:8f:b5:1f:b4:76:6a:ff:08:63:e3:a8:d2:26:48:
2b:5d:6d:1f:42:21:67:06:b2:d4:6c:78:a4:5c:20:
4d:8d:46:9c:0b:0c:39:0b:0f:98:df:cf:c9:85:65:
dd:53:5f:8e:7b:a9:5a:fe:52:45:00:94:43:d4:81:
bb:4c:7a:1c:0a:b9:29:cd:79:fc:f8:20:f1:90:9b:
36:f8:68:3f:5a:df:82:87:84:50:d4:88:94:63:62:
dc:2e:34:23:0b:e9:80:d5:62:19:35:df:f8:10:78:
0e:9a:e0:88:bd:b8:96:0f:de:29:48:86:7a:28:74:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:37:AC:55:97:B9:BF:F9:7B:90:DB:21:F4:AE:1F:FF:6B:85:A9
X509v3 Authority Key Identifier:
keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ab:a8:44:7f:64:a5:dd:92:8c:2c:1d:a7:68:a0:19:e0:40:
46:7b:de:7d:26:a9:93:7f:09:81:f9:51:39:49:eb:0a:1e:09:
79:9a:4c:33:35:33:d4:6a:8d:ae:c4:0f:27:f4:3b:d8:81:79:
eb:c5:aa:d1:fb:54:0c:df:ca:22:bf:0b:6a:20:b9:a1:5d:1e:
1b:44:c1:22:7b:e7:4d:1c:c6:50:1a:cd:ea:6e:01:bc:50:69:
08:cc:f6:60:b2:bd:66:61:f5:e0:ef:44:16:e6:fe:90:d5:26:
40:3a:85:72:56:7f:1c:fa:97:d0:1c:da:e0:8b:a4:07:08:d0:
26:f4:a3:3f:c9:ff:49:c7:1e:4d:6a:91:34:5d:43:d6:8f:28:
da:9c:f3:e1:2e:d6:7f:b3:bc:50:a0:29:68:67:70:a8:8d:b5:
83:a0:23:22:dd:ae:c6:26:d0:23:08:d2:dc:e4:37:9c:f0:4d:
89:49:71:b4:b6:f2:ef:20:06:b3:85:d5:21:c2:90:1b:65:67:
82:63:9a:90:39:58:7f:b3:bf:2e:75:0c:cb:3c:71:18:1e:ea:
35:0b:7a:ae:85:85:f7:0c:84:b4:8a:3a:ba:31:0b:f9:e9:07:
77:ba:c0:92:97:58:f8:d7:ce:2f:0f:04:c0:54:6c:13:0f:2b:
2c:34:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:21 2026 by rpki-client