
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier: 5dHJ/f3Ek/4+m29BBN75g4VotWdZpVECjbR4rs392ws=
Subject key identifier: 98:3A:B1:E1:03:2E:50:F7:81:85:9B:01:D7:43:A4:EF:73:35:67:5A
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number: 0861
Signing time: Thu 16 Jul 2026 21:12:03 +0000
Manifest this update: Thu 16 Jul 2026 21:12:03 +0000
Manifest next update: Thu 23 Jul 2026 21:12:03 +0000
Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: FnUIExmL9xuJAaXHMhnV1DADahGJVA4RC8+Wu9VFYxM=)
2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=)
3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Validity
Not Before: Jul 16 21:12:03 2026 GMT
Not After : Jul 23 21:12:03 2026 GMT
Subject: CN=6a594923-f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:b7:ee:32:94:58:b8:07:3a:44:4a:e9:69:
ac:81:ad:aa:07:38:49:dd:5c:07:69:78:a3:89:30:
a5:da:51:75:a0:eb:70:98:f6:3b:4b:93:87:2a:c9:
b9:76:8e:43:f6:fa:94:76:25:52:de:8d:b8:ab:64:
4f:88:af:0c:c5:e4:2f:1c:b6:0e:c3:0e:56:1f:e5:
54:c7:ef:e8:e5:dc:ff:fb:45:2f:39:af:e4:94:a5:
65:5a:8c:0e:0a:04:7f:90:99:b9:c7:91:22:8a:80:
c7:61:41:06:4e:df:81:76:0d:6a:f8:25:b0:5f:99:
ff:da:ad:9b:33:47:49:6e:3d:c7:62:61:fc:c4:dd:
63:4b:3a:44:dd:af:39:6c:7e:06:31:d2:5e:88:c0:
13:5f:c3:c2:0c:fd:07:4b:ef:58:08:0c:b7:1f:a7:
81:ac:03:41:33:23:6e:32:99:30:6b:46:a5:d6:cb:
f5:07:8e:1b:7f:75:d3:4f:73:c8:db:1c:23:d6:93:
4c:0a:4e:b0:55:0b:9c:02:23:f5:e4:43:6d:ec:4b:
9d:60:80:a7:d4:56:7f:89:1e:fd:fb:bc:d5:8b:db:
38:df:88:22:6c:46:ee:f2:5c:38:5c:72:9c:07:0f:
fa:07:2a:9d:3e:cd:59:8e:9d:c1:86:48:95:78:2d:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:B1:E1:03:2E:50:F7:81:85:9B:01:D7:43:A4:EF:73:35:67:5A
X509v3 Authority Key Identifier:
keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:a4:0e:98:77:24:1c:d3:0e:53:03:a9:e5:e5:ab:97:66:
c8:1a:d7:00:6f:42:3c:c2:3c:29:9a:0d:82:25:b3:10:9c:52:
9f:13:32:62:8f:2f:86:4f:27:41:24:84:c7:78:6c:7f:77:b6:
92:e9:72:fa:9f:fe:fe:7b:d9:fb:94:59:f6:aa:34:e7:ff:f7:
c3:53:40:cb:d2:84:3c:cb:bb:d2:0c:eb:a6:95:78:90:a2:fa:
d9:d1:21:68:da:bd:06:fa:3d:74:9d:9b:c5:43:22:fa:cf:f1:
2b:9a:25:d7:b7:6a:3b:d7:b5:78:1a:74:9e:5d:09:78:a5:19:
8d:e1:ca:53:73:8f:e1:0f:d9:f8:69:0a:2b:a7:8e:2f:29:f1:
5c:07:f9:71:e9:45:00:f9:42:de:6f:53:b4:b9:88:8e:a6:ed:
f9:0f:13:0c:95:97:45:38:4e:f3:4e:1f:4e:18:19:04:fc:b6:
44:41:0b:f7:08:84:8a:8b:d7:48:ff:48:98:97:5a:20:66:7e:
1e:c5:6e:65:78:a5:c6:44:7f:3c:4b:b9:b7:6e:ee:6c:05:71:
ef:24:fa:e7:03:ef:fa:54:be:c6:e1:98:ed:d1:f0:79:86:f3:
21:ae:bb:92:d9:82:f8:e5:9c:17:a3:f2:bd:90:2b:8c:fa:b1:
6b:85:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:54 2026 by rpki-client