
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier: 6j48cnmn4NUT/TCa1GfalIuKkF/3A1BRhl2zWjmyEGk=
Subject key identifier: D5:41:00:CE:E8:81:71:9C:1A:FA:1D:82:AE:33:E1:7C:78:9E:96:8D
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial: 02D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number: 02CB
Signing time: Mon 21 Sep 2026 01:19:20 +0000
Manifest this update: Mon 21 Sep 2026 01:19:19 +0000
Manifest next update: Mon 28 Sep 2026 01:19:19 +0000
Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: wZoQ56iSAV4YeTkrTESzaWD4LXPynuyRmw2FkDrgHB0=)
2: 69349714157D11F0876A4D62C4F9AE02.roa (hash: oYbFnj0zT39rqmZi1wLTMzBUy8GKiMXQ3BORFFXqKM8=)
3: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: QKMAj5oVDcVogqlTrx41/NbrU6v80sS6Oreeo4WKGNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Validity
Not Before: Sep 21 01:19:19 2026 GMT
Not After : Sep 28 01:19:19 2026 GMT
Subject: CN=6ab08618-6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:2d:0a:d5:4c:60:b3:2f:2c:5d:08:3d:fd:
7a:7e:26:ac:32:c0:02:40:de:06:b2:b9:f1:6b:3e:
e0:21:01:18:c5:bc:f9:e6:50:80:55:bc:ef:eb:6a:
12:82:34:68:8b:53:1f:e3:30:5a:a1:c5:3b:6c:f6:
a5:98:52:43:6a:5a:d0:32:8e:bc:c3:26:4e:c8:be:
e0:5a:d1:50:b7:2e:dd:4e:d1:30:c6:ff:7b:30:e1:
f9:fe:d1:e5:5c:49:75:64:81:b8:ba:c6:53:13:49:
98:8d:82:4e:11:88:1d:89:fb:a0:0e:29:0a:7d:9c:
ff:65:ee:c6:53:e4:13:85:fd:77:b1:d0:02:2b:45:
5c:38:fa:66:4c:a4:58:f4:f1:4b:80:38:65:f1:e4:
94:20:8a:3c:f6:73:ae:0d:fe:5f:cb:70:17:dc:52:
27:f5:92:8f:ac:02:6b:5c:5e:14:f1:70:ad:2b:c7:
9f:e5:14:56:c7:4d:b4:a3:e5:ae:28:77:5f:6c:0c:
dd:bf:33:67:d4:3a:50:5e:50:24:80:3a:70:3c:46:
52:50:a5:bd:7d:4a:1b:1a:07:e0:29:ae:de:c9:88:
eb:35:92:f7:4d:8d:be:05:06:62:51:95:d5:67:6e:
b9:09:b0:68:f2:73:ae:a4:ae:bf:a7:f1:81:cd:86:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:00:CE:E8:81:71:9C:1A:FA:1D:82:AE:33:E1:7C:78:9E:96:8D
X509v3 Authority Key Identifier:
keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:3c:fa:01:8c:b8:8d:c5:c8:8a:84:26:1f:3a:f7:a4:66:
46:e0:1d:11:81:66:fb:51:f1:c9:05:52:0a:e8:c4:05:21:86:
b1:e9:95:2c:eb:16:be:2f:34:33:a7:0a:d6:b7:3e:f1:48:7b:
7e:e1:be:01:11:3b:cd:4a:14:bd:c1:f2:fe:77:17:a4:99:df:
0f:0a:71:0c:ed:08:de:a8:bf:4c:48:2d:09:95:28:7f:4e:1a:
74:f6:af:ac:65:bf:2f:88:1f:ff:93:5e:16:8e:ec:14:6c:81:
86:8b:13:69:8e:4c:c8:80:16:20:75:c1:d4:c8:ce:61:a1:9b:
d8:8b:c0:81:3e:85:9c:e8:1c:8f:65:6b:f8:33:1f:91:77:40:
84:fd:32:2e:15:89:cc:cc:1d:92:58:ce:50:a7:f0:4f:00:1f:
61:cd:28:05:f5:02:e7:98:8f:51:ec:f7:be:98:58:bd:e6:eb:
f9:a1:48:1e:45:53:f9:a1:2a:45:31:f2:6a:c1:07:f0:b5:4a:
ed:65:c1:10:7a:8d:93:2d:e8:ba:f8:b4:03:f3:13:d6:55:e9:
b6:7c:5f:ce:d2:8b:25:36:b0:be:16:05:96:c6:87:d8:ff:bc:
32:2c:ad:97:d2:30:7a:ad:d7:1c:c9:a4:fd:c3:27:04:dc:88:
8c:c5:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:58:07 2026 by rpki-client