
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier: CVgsbbcX5qJU5Gni+dJ8nlhXs4UoJD4DUwFDYxRSUbM=
Subject key identifier: 8F:98:91:96:BA:5B:8B:2E:2E:7A:4B:4F:06:E4:CE:57:54:D9:C1:83
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number: 07C9
Signing time: Tue 28 Jul 2026 23:50:17 +0000
Manifest this update: Tue 28 Jul 2026 23:50:16 +0000
Manifest next update: Tue 04 Aug 2026 23:50:16 +0000
Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: xH7Zs776rxLlWBiB9vzM+Qe5bLy7Nii+IfClr16ZhV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Validity
Not Before: Jul 28 23:50:16 2026 GMT
Not After : Aug 4 23:50:16 2026 GMT
Subject: CN=6a694038-f06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3d:a4:5b:a5:2d:be:ec:b6:47:8a:30:6e:3c:
ea:02:45:90:4d:f1:e1:b3:48:ed:a3:e9:9d:1f:50:
4f:72:73:7c:05:eb:ae:86:f9:7b:22:c2:bf:70:c7:
58:f8:8e:96:5a:3a:6a:ee:2d:68:f1:43:fd:70:1a:
aa:be:e6:b7:f5:d3:26:cc:43:2b:a7:61:77:2e:f3:
17:c1:19:88:42:2d:8f:d8:61:b8:c3:d3:7d:31:64:
ae:37:3a:0e:46:b1:5a:03:38:f2:51:ab:2d:6c:bc:
7e:ce:74:3c:89:4a:cf:0b:07:3d:f6:3e:b4:bc:c3:
61:47:10:b9:e5:e6:e1:91:7b:f0:b2:a7:c0:2c:d0:
58:d2:cd:70:7f:1a:a7:f4:24:80:e0:60:ba:e9:c7:
bf:49:56:f8:8b:74:e0:ca:14:df:20:c2:e9:66:a0:
6b:72:50:95:0e:cb:52:78:9a:0c:8a:25:92:98:f4:
a8:a5:48:c3:1b:8c:a6:40:77:23:ac:d4:93:ca:c9:
c8:b5:6c:d5:91:48:ac:f5:c0:c5:7d:7d:d1:bc:29:
a2:85:f4:0c:c4:cd:6d:60:dc:e3:34:f1:3f:ca:ca:
fa:4e:2d:c1:f2:06:ef:8d:f2:84:bf:33:4b:cf:2f:
8b:cd:7e:9a:d3:94:95:8e:b9:0b:80:72:03:07:2d:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:91:96:BA:5B:8B:2E:2E:7A:4B:4F:06:E4:CE:57:54:D9:C1:83
X509v3 Authority Key Identifier:
keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:1b:94:7a:dc:88:75:05:ee:4a:45:8b:43:83:ef:ef:7d:
9c:b4:67:89:3a:61:b6:38:9a:4f:a0:ad:d9:bd:a9:64:d0:b5:
26:17:4d:68:84:dd:9a:b7:8a:64:60:12:90:66:c8:ba:61:19:
a4:b6:d2:ad:84:4b:04:de:4a:22:6a:f1:4d:31:61:93:83:a5:
d8:68:8d:f8:d9:94:1d:21:50:6c:a9:c4:55:9c:ad:cf:30:4e:
e0:5d:2a:b0:61:05:c8:62:cc:74:2b:59:cc:c3:8d:83:02:d1:
d4:41:27:1f:07:57:11:07:2a:f1:ae:a7:68:3e:e4:08:00:47:
86:12:5a:b5:3d:50:63:50:2f:c0:4b:c4:2e:7d:2c:7f:0f:f3:
0a:17:4c:88:66:8f:b2:87:19:89:73:8a:8d:23:72:3e:75:00:
ef:6e:e5:10:ba:f9:45:d1:b7:4b:cc:cf:dc:27:cc:38:c3:55:
85:28:48:8b:91:5a:a7:c2:4f:64:a3:15:ea:ae:dc:b8:8e:7a:
02:e9:d2:60:2c:45:62:83:73:90:53:ef:2a:5c:9d:03:d1:2c:
3a:63:9f:ed:da:d9:99:27:4a:61:6d:ab:07:ba:db:98:e1:19:
f5:32:02:ab:2e:e1:c0:ee:e7:84:e6:54:2d:ef:5f:c6:27:04:
d6:7b:58:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF
MUIyM0JDMjcwHhcNMjYwNzI4MjM1MDE2WhcNMjYwODA0MjM1MDE2WjAYMRYwFAYD
VQQDEw02YTY5NDAzOC1mMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7j2kW6Utvuy2R4owbjzqAkWQTfHhs0jto+mdH1BPcnN8Beuuhvl7IsK/cMdY
+I6WWjpq7i1o8UP9cBqqvua39dMmzEMrp2F3LvMXwRmIQi2P2GG4w9N9MWSuNzoO
RrFaAzjyUastbLx+znQ8iUrPCwc99j60vMNhRxC55ebhkXvwsqfALNBY0s1wfxqn
9CSA4GC66ce/SVb4i3TgyhTfIMLpZqBrclCVDstSeJoMiiWSmPSopUjDG4ymQHcj
rNSTysnItWzVkUis9cDFfX3RvCmihfQMxM1tYNzjNPE/ysr6Ti3B8gbvjfKEvzNL
zy+LzX6a05SVjrkLgHIDBy3XWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+YkZa6
W4suLnpLTwbkzldU2cGDMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2
NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC1MblHrciHUF7kpFi0OD7+99nLRniTphtjiaT6Ct2b2pZNC1JhdNaITdmreK
ZGASkGbIumEZpLbSrYRLBN5KImrxTTFhk4Ol2GiN+NmUHSFQbKnEVZytzzBO4F0q
sGEFyGLMdCtZzMONgwLR1EEnHwdXEQcq8a6naD7kCABHhhJatT1QY1AvwEvELn0s
fw/zChdMiGaPsocZiXOKjSNyPnUA727lELr5RdG3S8zP3CfMOMNVhShIi5Fap8JP
ZKMV6q7cuI56AunSYCxFYoNzkFPvKlydA9EsOmOf7drZmSdKYW2rB7rbmOEZ9TIC
qy7hwO7nhOZULe9fxicE1ntY6g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:18 2026 by rpki-client