
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier: 0EbAxRerxv3V7OcWAKGjK5U/BQWgBhnKr+Gfcj4ej8k=
Subject key identifier: CE:04:EF:39:43:29:23:81:57:F3:49:A5:42:BE:BC:B8:FC:AC:02:97
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number: 02AF
Signing time: Wed 29 Jul 2026 02:31:25 +0000
Manifest this update: Wed 29 Jul 2026 02:31:25 +0000
Manifest next update: Wed 05 Aug 2026 02:31:25 +0000
Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: 4ksiSR8kkIugYD0wPczRb85PP6uWLLKjVa1y8dOCSLQ=)
2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: QKMAj5oVDcVogqlTrx41/NbrU6v80sS6Oreeo4WKGNg=)
3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: oYbFnj0zT39rqmZi1wLTMzBUy8GKiMXQ3BORFFXqKM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Validity
Not Before: Jul 29 02:31:25 2026 GMT
Not After : Aug 5 02:31:25 2026 GMT
Subject: CN=6a6965fd-b0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:b2:94:c8:f4:89:50:36:a8:80:fb:11:f1:
bf:60:cb:de:90:0e:b7:c2:68:ae:15:bb:74:89:56:
86:c5:bb:4d:cc:f2:79:ec:16:2c:b9:c7:96:6e:52:
d6:0a:34:4e:ce:2a:bc:8a:90:83:49:ed:d1:22:ec:
ef:a1:c2:ae:94:79:54:9f:81:cb:ef:20:95:a5:36:
8b:c6:c8:d5:60:76:f3:1f:bd:37:fc:58:c2:84:97:
57:27:70:ce:e7:60:4a:cc:70:5e:38:7a:ac:b2:5a:
21:b8:bc:ed:bf:93:6f:19:c2:33:92:c2:0a:5b:42:
2a:84:b9:6a:f6:4a:a8:97:18:c5:61:ee:ec:d7:f9:
73:be:db:62:9b:50:fc:77:bb:9f:b5:41:21:24:a0:
c4:f3:ae:0d:63:cf:92:09:51:2a:fa:e2:86:eb:23:
f8:a1:9d:78:e8:f2:80:76:90:03:83:9e:9e:f5:79:
a4:78:75:2c:4d:76:06:6f:e4:6e:26:91:8b:ad:b2:
18:61:a2:d6:2d:ac:e9:70:e3:ba:0a:48:18:12:f6:
c1:b8:7c:ad:21:e4:da:50:68:3e:2f:ff:e1:a2:a0:
89:93:b8:8d:c9:15:b4:05:c8:3a:bb:39:c5:0b:d1:
58:d3:ca:de:a3:84:e1:24:e3:38:2a:d0:f7:0a:2c:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:EF:39:43:29:23:81:57:F3:49:A5:42:BE:BC:B8:FC:AC:02:97
X509v3 Authority Key Identifier:
keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:1c:a6:a6:95:b2:94:cf:dd:61:50:3d:fb:d5:e1:9b:3b:
f6:01:df:83:6a:6e:fc:e1:1c:eb:81:93:cf:bd:14:88:aa:e6:
b0:e6:57:15:88:b0:1d:a3:0d:27:43:bb:98:d8:c6:98:f0:f7:
62:da:c7:67:87:e5:7c:68:c8:87:4f:ba:5f:1b:7f:9d:9e:c1:
8f:a2:a7:34:a8:2a:0a:b7:96:7b:e0:2c:fa:e1:a1:ac:3d:56:
19:ec:a6:9e:07:b9:dd:b3:62:e6:7f:49:e2:08:3b:92:77:2b:
b9:90:71:2b:4a:09:84:b2:43:d1:b3:73:30:6e:79:e7:af:5f:
4b:4e:71:f8:a8:66:3f:f6:a1:ef:29:92:bc:d0:1c:ba:f5:a2:
f8:1e:a2:c7:05:1d:81:ba:8c:c3:17:2e:5f:50:93:2f:6c:f6:
90:68:4f:83:63:a4:9f:a9:11:89:34:16:4c:bc:76:df:25:ec:
58:e3:0a:27:7f:77:fd:39:bf:1c:eb:49:7b:a6:12:a2:c9:42:
f7:7f:98:a2:11:fe:b3:57:5a:0c:c5:5c:b4:13:73:15:9e:29:
4a:ba:a5:e3:eb:12:d8:e1:08:1a:a4:8f:fe:e0:81:65:fb:27:
7b:0b:ad:a1:48:a5:74:bd:45:df:64:1f:9c:65:9f:33:f3:79:
82:3c:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:42 2026 by rpki-client