
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier: 3NEfRR9dYonuadIEGyr3BVhuS41HchtQZimHaTxgVuI=
Subject key identifier: F4:5A:36:A5:49:59:9C:6E:6B:7F:2E:DF:16:A8:9F:FE:57:B4:5D:29
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number: E6
Signing time: Tue 27 Oct 2026 06:48:18 +0000
Manifest this update: Tue 27 Oct 2026 06:48:18 +0000
Manifest next update: Tue 03 Nov 2026 06:48:18 +0000
Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: Ai+5F3a+6Cdt17HRP+BjHfT2grJH5f6llG4saTjwwj4=)
2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Validity
Not Before: Oct 27 06:48:18 2026 GMT
Not After : Nov 3 06:48:18 2026 GMT
Subject: CN=6ae04932-af24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:9b:27:7d:05:63:ab:ab:d0:69:3a:ff:d4:
03:c4:6d:25:78:38:3b:93:4c:1d:8d:09:00:f6:79:
49:a9:c5:4c:54:99:d6:b7:d9:d4:cb:33:5d:5d:01:
b4:db:61:74:7f:c4:87:59:38:94:4a:ad:df:af:43:
4f:39:52:81:2b:9f:a6:af:ab:e3:38:24:c1:38:61:
98:dd:25:dd:6e:6c:e6:aa:4f:60:69:0f:60:f7:bb:
f3:ce:cd:b2:1b:a2:82:c7:b4:53:13:a3:90:9d:09:
b1:db:c0:71:33:a6:02:02:5d:6c:1b:49:b4:c8:98:
74:45:9f:cc:26:e8:82:b0:fd:11:ef:24:ee:4a:c4:
99:e4:3f:97:89:26:9a:4a:f0:ad:46:41:72:d0:df:
0f:3c:0d:39:19:2d:13:5a:10:26:fd:21:48:3a:9e:
71:5c:a5:99:d1:64:4d:de:cb:fe:99:a6:18:b4:9b:
d4:55:a5:a6:ab:a1:0a:24:6c:f1:f5:73:19:6d:6d:
b0:6c:b4:f5:c9:53:75:b2:31:3e:22:fc:cd:8f:89:
54:fd:66:e1:ae:5c:bb:71:21:3d:1f:8f:e4:d3:6b:
61:c0:8c:23:2e:f0:34:98:bb:84:1f:3b:05:bd:0d:
9c:db:f8:ba:a1:df:84:6e:5e:c2:9d:35:2e:9d:81:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:36:A5:49:59:9C:6E:6B:7F:2E:DF:16:A8:9F:FE:57:B4:5D:29
X509v3 Authority Key Identifier:
keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4f:51:e6:3c:37:90:d7:5c:1b:a4:05:41:67:06:91:3a:6f:
cb:07:68:eb:41:d2:78:81:f8:35:19:71:a4:01:a6:78:a4:dd:
c0:c9:5d:4b:6c:27:5a:29:9e:39:0e:74:f1:d9:7c:c7:86:28:
5f:7f:1f:55:a2:c6:69:da:f8:b7:8a:25:03:47:f0:73:87:c9:
6c:09:b0:e9:21:06:f3:1d:28:30:75:0b:2f:16:42:08:d3:b4:
cc:25:b4:a2:bf:a0:99:7e:5f:cb:a9:6a:3b:7f:04:ad:e8:dd:
e3:79:eb:ab:de:aa:b0:47:39:c3:1a:7e:99:d5:58:b3:02:18:
cf:d7:4b:b1:2f:73:c5:ca:9f:af:4f:bc:b4:1e:b4:17:c3:6d:
e7:1f:38:8e:9f:cd:64:d6:54:a6:ad:da:1d:cd:0d:c2:12:d7:
07:67:52:e4:3c:01:36:b2:bd:9f:f3:ff:2a:bd:47:83:3d:56:
ed:27:d3:cf:62:18:71:b5:97:c6:75:02:d0:cb:d8:b8:10:74:
c4:eb:20:a1:ca:c6:b3:31:58:6b:51:8d:5b:62:7d:78:c0:84:
5b:4a:32:2e:91:2a:ec:85:dd:5d:9c:5d:97:61:3f:4e:66:c3:
0f:4a:8e:a8:bd:d7:b8:f6:41:bb:b4:34:a0:13:ed:35:5d:37:
1f:01:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:23:48 2026 by rpki-client