
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier: VqPvNEeJrWi0ufK6FQ/Yjtk0jBJIRt8yg8q/ETa9khY=
Subject key identifier: 85:FF:CE:6F:2B:CA:27:4E:A9:6B:85:8B:A6:83:5E:1C:EE:FA:C4:69
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial: 2422
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number: 2402
Signing time: Fri 12 Jun 2026 15:46:55 +0000
Manifest this update: Fri 12 Jun 2026 15:46:54 +0000
Manifest next update: Fri 19 Jun 2026 15:46:54 +0000
Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: rC6QqUCZYU4OwowdmDpysOa8AyEdJyLw0rqcv8pSPzM=)
2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=)
3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9250 (0x2422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Validity
Not Before: Jun 12 15:46:54 2026 GMT
Not After : Jun 19 15:46:54 2026 GMT
Subject: CN=6a2c29ee-bce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:a8:dc:b3:34:cf:07:f6:e3:8e:d0:55:cb:
9b:c8:7a:09:20:65:e3:b0:2d:a4:12:cb:0c:ea:05:
d9:35:69:43:3c:7e:ca:b0:32:4b:b6:16:54:a1:32:
9a:ee:c9:6b:18:57:bd:55:8b:f4:8b:6c:3d:c9:5f:
a6:6e:d8:20:e6:0c:11:39:3a:35:d4:68:43:6c:7c:
3f:3f:35:83:9f:10:07:d6:ff:8e:7d:71:b0:48:4f:
2e:e6:58:4c:54:5e:91:fb:bb:10:65:ad:c3:8d:62:
f4:dd:72:51:e9:52:3e:34:0c:4b:57:87:e2:19:11:
73:05:68:62:cd:1e:5a:42:3e:4b:f2:53:12:50:85:
2a:b5:17:87:7e:5f:00:59:c6:a4:cc:96:29:bb:b3:
4c:01:c6:c5:6b:cc:07:ba:4f:bc:70:85:28:15:f1:
06:be:a5:de:20:a2:d5:c8:53:f0:f0:fd:4a:6b:0c:
cc:d2:f9:b1:27:b4:9d:9d:a2:23:85:fc:f4:dd:7c:
5c:15:23:5c:b2:6c:e9:11:3c:69:65:82:7d:21:99:
ca:83:56:7c:60:36:7b:79:cc:1f:b9:ec:75:50:2a:
a5:44:1d:82:e2:bd:7a:e0:3e:24:4c:6a:d0:68:df:
64:4b:38:04:b9:54:46:ff:13:e7:96:9c:46:ca:83:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:CE:6F:2B:CA:27:4E:A9:6B:85:8B:A6:83:5E:1C:EE:FA:C4:69
X509v3 Authority Key Identifier:
keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:c4:22:ff:bc:59:d1:fd:7d:c4:9a:7c:a8:49:d2:28:3e:a6:
7a:d4:28:3d:b4:eb:16:39:5a:78:72:c2:cd:c6:ef:7c:9f:47:
dc:11:c2:72:25:9b:a3:a3:aa:50:4e:10:a7:d4:9b:23:cb:b6:
07:b2:6b:5e:2c:a9:eb:1f:42:cc:7a:75:d6:c0:f0:2b:60:80:
4e:a4:a4:cc:9c:1b:2c:38:57:57:f3:25:6a:c3:61:40:ed:59:
87:81:f0:0f:c3:3a:56:f8:1e:cd:35:62:9a:6d:dd:a5:c9:79:
39:82:ab:52:0a:f9:f0:de:91:8d:fd:86:a2:2b:2b:0b:cb:92:
09:06:11:4b:fb:ba:9b:93:42:1d:04:d8:58:20:dd:62:0d:a6:
6e:3b:ec:0b:72:55:60:77:fe:7c:f4:bc:18:5a:0e:73:1e:3e:
28:1b:d0:14:dc:db:f2:02:ce:6a:c6:5f:a7:12:7b:a2:40:85:
7c:d1:72:32:21:ff:7d:be:50:6e:b4:58:b2:72:76:95:50:c4:
60:a8:56:29:e1:c7:79:50:db:00:60:22:7d:de:ea:4b:81:ce:
fe:1c:eb:dc:83:45:1f:c5:21:36:66:08:c3:c0:e4:66:9f:99:
1c:12:4a:66:89:b3:ea:5d:ba:82:30:90:7b:00:26:20:ad:e5:
ca:a1:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:27 2026 by rpki-client