
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier: ELpfichTMTLe8cIEZ27PqaTaXHC6IJfg7ClVxHazWSs=
Subject key identifier: 01:2A:1C:A1:5C:F9:DA:D6:28:50:C3:7F:D2:75:61:8F:89:4E:6C:3F
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number: 01FE
Signing time: Fri 04 Sep 2026 22:36:48 +0000
Manifest this update: Fri 04 Sep 2026 22:36:47 +0000
Manifest next update: Fri 11 Sep 2026 22:36:47 +0000
Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: B0CbBuGxvgSiBvyfLl7J8bOaCGzJBsXX9Nm8AbU34RI=)
2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: CK9QQVOiiB542PQgUfZIdXYNAnS5iyZdXbxdEf+gFCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Validity
Not Before: Sep 4 22:36:47 2026 GMT
Not After : Sep 11 22:36:47 2026 GMT
Subject: CN=6a9b4800-1e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:57:68:02:62:80:24:9c:61:6a:04:b5:e5:
b6:16:88:d6:75:6e:82:eb:65:11:63:93:ff:84:df:
40:53:19:22:a8:89:55:1a:0f:98:9e:fd:de:b7:49:
bf:32:17:83:bb:82:d6:77:5f:1f:a0:96:2d:d1:3e:
bb:b5:35:ff:84:fc:76:22:e5:b6:5c:a9:86:18:97:
d0:c5:b4:c9:08:6c:2c:b8:b3:3e:12:15:a8:8b:75:
2b:53:5e:86:2d:85:a1:77:34:55:27:73:d0:45:27:
7d:ed:dd:f5:37:00:a9:4e:a6:3a:c6:2c:7c:d7:93:
a1:bf:9a:5b:19:d7:bd:16:03:89:a4:60:b8:b3:15:
19:6f:20:ec:0c:fe:f2:38:d9:9c:93:7e:e4:79:3e:
77:c8:4c:da:dd:bf:d1:81:d2:ba:81:72:dc:5f:84:
8c:00:fb:eb:88:70:07:20:f3:47:ab:a4:61:4e:85:
79:fa:88:cd:98:8d:0d:ce:72:c9:26:00:6e:fc:33:
8e:41:64:c7:40:16:02:04:73:91:b9:85:d4:07:1b:
0a:64:29:2f:1a:36:33:6b:75:5f:7c:1a:97:f9:9e:
84:15:ea:2b:62:3f:91:51:91:6d:d5:84:48:eb:81:
92:62:55:71:16:52:10:1e:46:25:1d:42:18:7a:74:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:1C:A1:5C:F9:DA:D6:28:50:C3:7F:D2:75:61:8F:89:4E:6C:3F
X509v3 Authority Key Identifier:
keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:04:5c:09:b4:71:ae:0f:bb:53:f6:3c:cc:61:94:01:a7:
e9:ab:f9:82:c1:c1:57:28:a8:d1:4d:25:9e:2c:65:00:0b:10:
05:99:31:eb:1f:e3:3a:fb:e8:b9:62:6a:cc:c3:8a:1f:5c:15:
f6:62:72:49:f1:c4:eb:20:91:ba:75:26:5f:7a:30:24:e6:48:
74:09:2e:24:7c:f4:7a:d9:f2:d0:69:0b:78:37:8c:ad:0d:67:
c9:e5:e9:46:d1:84:3e:20:a4:85:56:9c:22:25:b2:f1:22:aa:
e0:0b:7e:9a:fb:f8:4d:55:8f:cc:92:cd:06:5d:b7:f5:1c:75:
3e:e6:5a:20:df:4c:c7:c0:05:dc:59:c3:b8:a2:9e:47:28:61:
48:88:a6:8f:d3:75:2c:e0:56:a2:4c:9e:09:4a:7f:41:75:45:
fe:62:ce:cf:3d:bd:a9:75:c4:28:9c:2c:7d:2b:70:38:9e:fb:
ef:d6:81:1d:8a:1a:99:63:f2:09:0d:26:4b:67:c7:02:89:95:
fd:71:e0:64:df:3f:73:7d:b2:0e:3e:3b:09:2b:3e:9b:23:74:
7f:df:9e:1f:f0:77:75:be:d1:d6:5e:d2:49:8d:bd:15:eb:cf:
32:e5:80:9e:81:f5:a1:2e:de:68:b9:83:3a:1d:53:a8:bf:5c:
60:9d:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:20:24 2026 by rpki-client