
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier: KTclcTr06ve0dPthUzjdfJVfco6tXZ26If4sLmlhFOo=
Subject key identifier: C2:AB:66:09:A6:D7:59:56:29:99:6E:32:84:87:47:43:31:E6:75:B3
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number: 0892
Signing time: Tue 20 Oct 2026 20:51:41 +0000
Manifest this update: Tue 20 Oct 2026 20:51:41 +0000
Manifest next update: Tue 27 Oct 2026 20:51:41 +0000
Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: 6DaNghrti+Wg+IF/Xkhj/10xUdGsNIH49WAN08DN3fw=)
2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=)
3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 20:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Validity
Not Before: Oct 20 20:51:41 2026 GMT
Not After : Oct 27 20:51:41 2026 GMT
Subject: CN=6ad7d45d-c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:0e:7c:57:2d:f3:5c:73:71:04:e4:34:8e:
7e:d4:0d:0b:d6:41:8c:82:df:a3:4b:ff:d2:b7:00:
d0:0f:f7:50:6e:a8:40:bd:c5:d4:62:19:f1:4c:95:
20:d9:d3:0f:84:47:46:92:47:e5:07:ec:b9:b5:ec:
9d:f6:d5:87:cd:00:05:e5:d9:ce:d8:34:4c:d0:9e:
82:1b:08:46:e3:b7:6e:e7:a4:d5:dd:59:6e:5a:94:
1c:aa:e0:f3:fe:43:89:71:f5:54:df:5c:57:82:58:
96:44:f9:63:80:e5:53:67:ef:f5:82:ff:e6:55:88:
70:f9:04:14:23:df:0a:9c:90:b5:d1:70:34:cc:1c:
31:ba:1a:8d:ae:3b:20:64:49:e9:93:a2:27:5c:dd:
fc:19:bf:ef:96:5b:77:18:a7:67:95:dc:53:03:46:
c2:97:d1:5a:fd:45:d6:18:e9:fd:0d:6c:c8:bc:88:
d2:ee:b0:cc:0d:66:58:81:db:10:4c:58:03:d9:6f:
20:08:5e:35:21:8e:c9:7f:59:4c:75:c9:fe:23:22:
f9:c3:d9:92:31:23:be:b0:cf:9c:c9:8e:72:19:28:
62:17:a9:25:12:65:c6:a0:1e:09:03:85:1d:ea:ca:
9e:71:94:5a:f2:51:64:c1:71:a1:ac:82:43:db:96:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:66:09:A6:D7:59:56:29:99:6E:32:84:87:47:43:31:E6:75:B3
X509v3 Authority Key Identifier:
keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2e:3b:bb:89:cc:9f:10:91:93:f9:73:36:2e:e7:6f:cc:32:
0a:6f:b4:43:61:c7:93:22:d4:46:be:29:49:23:a2:3d:f0:0b:
e5:62:d3:49:7d:8c:9b:ce:95:52:97:25:5e:c0:67:1b:9d:a6:
1c:8c:70:75:79:3c:0f:a6:cc:7f:71:ad:19:ad:5e:d8:d3:6d:
21:52:f6:02:be:f9:97:1d:c3:75:3b:5c:aa:cf:d4:ce:a9:17:
0d:7d:05:70:0f:9f:ff:81:48:dd:ae:10:af:73:3f:c9:53:fb:
ed:db:e8:df:0f:12:58:56:10:a4:b1:29:f2:44:97:1c:9f:cb:
01:6e:11:f4:10:17:1a:f3:ed:e2:89:db:79:11:dc:15:f1:01:
4f:28:7a:ef:03:c0:ee:c9:fd:d1:64:04:d9:83:0a:48:39:0b:
ae:02:cc:66:9d:81:7e:5b:e2:38:f3:66:38:fd:c4:65:c0:60:
5b:6d:cf:a8:fa:91:cc:8c:3c:38:76:a8:15:b2:aa:56:2d:a6:
cb:bc:43:bf:9e:f5:59:07:ab:91:ce:1f:ac:4b:3a:72:74:e3:
d1:cd:d6:6f:e1:9f:21:fa:12:21:5a:de:15:31:2a:58:1d:fe:
f9:c9:d4:3d:29:b6:1b:c4:53:36:43:bb:62:fb:35:f1:6f:c1:
bd:6f:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:39:24 2026 by rpki-client