
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier: cMi7DbSY3Sez2f2B784PZ8PdcnLbnqlSjXArlc/GxVE=
Subject key identifier: 1C:C8:57:C8:FC:28:69:E0:FA:4D:F3:8F:2C:3C:20:05:48:48:7E:56
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial: 2439
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number: 2419
Signing time: Tue 28 Jul 2026 15:53:39 +0000
Manifest this update: Tue 28 Jul 2026 15:53:38 +0000
Manifest next update: Tue 04 Aug 2026 15:53:38 +0000
Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: +A7ZPJ1xODnI8Knas40EY9ySUfvCHSae5ERF+ErICU8=)
2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=)
3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9273 (0x2439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Validity
Not Before: Jul 28 15:53:38 2026 GMT
Not After : Aug 4 15:53:38 2026 GMT
Subject: CN=6a68d083-2e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:83:36:49:e5:34:3c:00:71:fb:54:48:b7:
d4:05:d9:46:79:51:d2:64:ed:0a:76:69:26:ac:31:
f6:97:37:31:1f:f4:a8:15:6f:da:1c:fa:4a:11:83:
82:f2:35:d6:da:60:ef:de:51:77:20:28:15:61:6c:
cd:33:f5:1b:c0:7c:52:c8:38:09:39:4c:6a:af:82:
b7:9a:0a:d6:7d:b9:e6:87:69:ab:f2:7d:b2:21:28:
71:39:e1:3d:8c:a2:d5:17:1a:07:e7:6c:19:3e:47:
00:1d:e1:6d:c8:8f:a0:47:4c:96:ad:ff:cd:a3:0c:
78:b2:1e:f1:37:56:02:19:4e:5b:97:30:d3:05:45:
cb:8d:53:fd:f2:7a:c4:c9:a5:48:37:61:ef:96:ab:
4a:60:28:74:51:28:2f:84:c9:01:da:f9:5f:73:27:
f1:cc:cd:be:dc:63:8f:59:6d:f3:55:5c:37:af:f2:
aa:29:1b:1d:c0:cf:c9:9c:78:72:a1:54:a1:c8:34:
58:7d:28:f9:1d:a6:3f:96:98:00:6a:3d:6e:13:e5:
4d:bf:79:04:5a:be:f4:a7:7d:16:10:18:ca:dc:49:
5a:01:5d:6a:ee:e0:7a:f8:92:b8:c4:94:73:87:ff:
ca:fd:63:6d:46:a1:2f:d3:51:ec:73:5b:4c:2a:62:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:57:C8:FC:28:69:E0:FA:4D:F3:8F:2C:3C:20:05:48:48:7E:56
X509v3 Authority Key Identifier:
keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:f4:04:14:a4:57:2f:40:3f:d3:6f:6b:2a:4b:01:01:a9:d0:
d2:95:11:42:81:a2:7d:7a:3c:3c:3c:95:c0:10:2b:3c:a8:de:
c4:a8:08:4c:32:08:30:7d:5e:3c:eb:63:a4:53:f3:04:f5:2c:
11:63:cd:2d:72:34:aa:70:39:42:d5:ba:43:84:57:f6:70:04:
50:ec:ac:fc:13:96:88:00:bf:07:f1:0b:40:f0:29:58:97:cc:
5d:b6:fe:89:ca:ea:72:b0:45:cd:97:77:7e:04:c5:d3:1d:43:
a5:01:ee:11:ce:6c:b5:0c:90:c1:23:52:be:c4:42:8a:ba:2d:
b6:10:02:b1:d0:69:db:cc:79:4b:09:4d:d4:b0:29:11:5c:61:
fe:05:84:ea:d3:4b:24:4b:62:91:41:c3:72:33:b1:a8:a8:e7:
df:e4:e3:aa:e0:ca:79:69:fc:67:34:d3:21:93:42:32:22:e0:
a8:8b:8d:8f:be:16:f3:07:bf:14:c5:06:6f:76:d5:95:86:fa:
c9:16:d1:59:30:1c:91:6a:c4:f1:81:cd:cb:2f:3d:19:ac:3b:
4a:bb:74:05:27:b4:02:6e:80:38:4c:12:54:98:a6:dd:ac:2c:
94:cc:71:e6:31:21:11:ec:c4:da:47:83:81:f8:94:c5:53:ca:
50:f2:25:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0
ODE1RjEwQjcwHhcNMjYwNzI4MTU1MzM4WhcNMjYwODA0MTU1MzM4WjAYMRYwFAYD
VQQDEw02YTY4ZDA4My0yZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmK+DNknlNDwAcftUSLfUBdlGeVHSZO0KdmkmrDH2lzcxH/SoFW/aHPpKEYOC
8jXW2mDv3lF3ICgVYWzNM/UbwHxSyDgJOUxqr4K3mgrWfbnmh2mr8n2yIShxOeE9
jKLVFxoH52wZPkcAHeFtyI+gR0yWrf/Nowx4sh7xN1YCGU5blzDTBUXLjVP98nrE
yaVIN2HvlqtKYCh0USgvhMkB2vlfcyfxzM2+3GOPWW3zVVw3r/KqKRsdwM/JnHhy
oVShyDRYfSj5HaY/lpgAaj1uE+VNv3kEWr70p30WEBjK3ElaAV1q7uB6+JK4xJRz
h//K/WNtRqEv01Hsc1tMKmIuoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzIV8j8
KGng+k3zjyw8IAVISH5WMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3
QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44
elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4fQEFKRXL0A/029rKksBAanQ0pURQoGifXo8PDyVwBArPKjexKgITDIIMH1e
POtjpFPzBPUsEWPNLXI0qnA5QtW6Q4RX9nAEUOys/BOWiAC/B/ELQPApWJfMXbb+
icrqcrBFzZd3fgTF0x1DpQHuEc5stQyQwSNSvsRCirotthACsdBp28x5SwlN1LAp
EVxh/gWE6tNLJEtikUHDcjOxqKjn3+TjquDKeWn8ZzTTIZNCMiLgqIuNj74W8we/
FMUGb3bVlYb6yRbRWTAckWrE8YHNyy89Gaw7Srt0BSe0Am6AOEwSVJim3awslMxx
5jEhEezE2keDgfiUxVPKUPIl2g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:21 2026 by rpki-client