
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier: dN7YV8Z91qNpPecDYg+h+T0oXA6mzuTIoSH1FGe6NXQ=
Subject key identifier: 96:E3:02:C7:AA:92:CD:57:3E:CA:62:DD:24:A4:F2:EB:B0:8D:BB:9E
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number: 01AA
Signing time: Sun 05 Jul 2026 05:31:01 +0000
Manifest this update: Sun 05 Jul 2026 05:31:00 +0000
Manifest next update: Sun 12 Jul 2026 05:31:00 +0000
Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: GD9vNRP1uuGo9mgY/DFoKWpzof/orTV3ZpPFWg8HuEI=)
2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 05:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Validity
Not Before: Jul 5 05:31:00 2026 GMT
Not After : Jul 12 05:31:00 2026 GMT
Subject: CN=6a49ec14-76c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:19:9c:51:08:4c:10:50:a6:1c:06:d0:89:
60:d3:26:94:07:99:df:76:13:13:b5:d2:96:d3:9f:
87:3c:86:26:92:bc:8a:d1:cb:15:01:5e:ed:44:14:
51:10:bd:f6:0d:53:d2:f6:c8:5a:1d:02:29:39:02:
f1:c6:22:53:3e:d7:c4:0e:9f:0e:10:6d:5e:a5:31:
a5:cd:d6:86:84:e6:e3:8f:68:2f:d6:04:31:6b:f5:
f0:ad:a4:a2:23:66:d9:f3:b8:b3:ce:d8:58:6d:40:
5b:01:2c:a5:53:ec:fe:34:d5:59:0b:66:2e:7d:b9:
fc:e7:6a:64:9e:00:14:60:40:5f:93:6f:17:81:76:
65:35:2f:71:78:97:19:1d:30:9e:4f:5f:d6:f3:c2:
38:a4:9d:87:7f:04:54:7b:39:4a:a3:5e:00:5d:b6:
6a:77:55:01:57:c2:b8:d4:5e:60:62:a6:af:72:83:
25:41:2b:bc:44:85:ee:44:dc:a6:00:05:06:a1:92:
00:3c:45:87:86:92:91:c7:ee:4a:5c:2a:90:3e:b2:
61:09:a8:28:6c:01:a7:16:19:d0:19:02:67:ec:10:
b0:d5:2c:0d:19:dd:a9:62:af:bf:23:22:fe:a8:24:
8d:25:0e:a7:ec:f0:c0:71:af:b1:8b:0f:4d:68:33:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E3:02:C7:AA:92:CD:57:3E:CA:62:DD:24:A4:F2:EB:B0:8D:BB:9E
X509v3 Authority Key Identifier:
keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:07:ad:70:c8:c2:de:9a:1f:c2:48:18:71:d0:43:3d:22:ec:
d0:66:1a:56:c9:31:cb:bb:d1:6a:51:7a:12:89:71:2f:7f:28:
dc:0a:e1:44:46:9c:09:e8:81:f2:10:18:1f:22:6e:6a:ec:77:
bc:b3:8b:6b:9a:5f:b2:02:ca:65:cc:ee:dc:e4:57:e0:b3:0f:
f5:0e:6c:dc:16:68:5a:b0:13:02:8f:3a:cc:a9:e2:a7:81:37:
0c:84:3c:d2:7b:20:d6:b7:4d:77:00:83:59:61:07:da:0b:d0:
ef:fd:bb:ec:68:86:71:3b:85:fc:a8:5d:71:4f:f5:76:de:97:
5b:2a:27:98:6f:fe:65:1d:95:b8:5b:c6:6e:29:ec:85:eb:70:
53:6b:6f:3d:57:ce:5f:ba:9d:3e:c8:3c:74:37:7c:29:bc:88:
af:0b:c9:15:60:55:cc:bb:6d:bd:7c:2c:0e:2f:05:67:75:d2:
13:f6:b0:f0:59:cd:30:ed:09:7a:e9:9e:47:30:95:5b:fd:84:
c2:78:b0:39:bf:87:1d:74:31:23:8d:9e:b1:2f:5b:39:24:de:
bb:b4:83:6b:06:8e:e5:27:d5:fd:7d:40:1d:36:3f:f7:5e:8d:
2b:6c:4b:25:6c:3f:51:ce:6f:09:92:9b:43:bc:6e:a8:a2:26:
b9:77:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:39 2026 by rpki-client