
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier: Jp6HK9vllJEX70v9/f0zzyUydY0FFL98XQj3CMG2UDM=
Subject key identifier: 35:E3:75:15:26:77:F1:34:46:80:43:16:52:A7:64:BD:6C:D4:47:65
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number: CB
Signing time: Thu 03 Sep 2026 07:01:50 +0000
Manifest this update: Thu 03 Sep 2026 07:01:49 +0000
Manifest next update: Thu 10 Sep 2026 07:01:49 +0000
Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: SV/HkvFi/3O1SztOWlk22u6WlFFDLlPaCMQAF7NtaUs=)
2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Validity
Not Before: Sep 3 07:01:49 2026 GMT
Not After : Sep 10 07:01:49 2026 GMT
Subject: CN=6a991b5e-f001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:36:81:6d:a5:a1:0a:b9:ce:22:94:fd:fe:
82:34:d4:5b:f0:43:f1:a5:db:b9:4f:d6:4b:f9:37:
21:52:51:23:2e:2a:a7:e9:ea:70:ce:90:97:7e:88:
ec:5d:74:24:ae:24:87:bd:cf:ac:9c:98:3d:f7:f3:
0e:76:ca:59:32:0f:1b:95:c4:d1:ef:a6:fa:d6:bc:
4f:45:5b:2a:ed:90:7f:5c:c6:a1:90:c8:4d:cb:b3:
0e:47:bd:85:d9:46:bf:e9:93:e8:85:e4:b6:41:9a:
9d:80:8e:18:5d:cc:c3:92:0a:22:59:d2:30:7d:60:
5a:a6:aa:ef:6a:bb:3e:59:52:f1:75:90:b5:91:89:
cd:8a:5e:de:39:da:d2:a7:54:f4:0b:bd:0d:17:57:
96:91:7f:13:bc:4f:f3:d6:09:00:1b:d3:d6:5f:e7:
2e:a9:41:5b:37:3f:6d:e8:9a:31:e6:f3:0f:9d:6b:
75:f9:14:0b:e5:24:c9:9e:06:c1:1d:e7:a3:0d:64:
53:a9:5e:f5:45:9b:05:d5:8b:6f:0b:24:15:1d:04:
8e:da:bc:33:7f:a0:03:9b:8f:a9:75:ba:5d:d9:85:
89:06:f4:d8:df:3c:a5:52:f5:69:05:30:53:38:96:
4c:b4:e2:e6:1c:6c:18:3c:86:d3:20:8e:4a:d1:ad:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E3:75:15:26:77:F1:34:46:80:43:16:52:A7:64:BD:6C:D4:47:65
X509v3 Authority Key Identifier:
keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:26:5b:64:89:ef:68:c8:86:fa:1e:25:fd:49:2f:c0:68:
08:0a:bc:08:8a:39:f3:6b:17:94:1e:ff:f3:f4:bf:7b:ff:67:
de:23:79:f3:5b:cc:52:00:77:58:cf:b9:f2:af:85:8b:a8:67:
62:61:3f:bc:48:67:2b:e2:2a:07:d7:a5:6b:50:63:74:94:15:
29:89:a7:e7:4a:4b:9b:df:7b:ac:da:b9:f2:fd:a3:fd:62:9a:
a0:6c:54:c4:5f:a9:68:ec:67:86:9c:24:0e:dc:2b:4a:50:5d:
86:7b:eb:50:2f:78:42:ca:41:63:ee:4c:b6:fa:4c:55:5e:bf:
49:17:1c:a2:80:d2:90:ac:8a:44:35:f9:e8:99:8d:a7:94:bd:
21:ed:cc:56:e6:62:7f:34:eb:e6:31:e8:63:93:d0:2c:d3:19:
6c:69:75:3a:7d:94:38:7f:dd:e1:57:9f:20:cf:5c:ff:4d:5e:
58:7b:f7:77:9f:f6:a4:cc:2f:d0:a3:6f:3a:b1:fa:be:61:59:
ef:e6:1c:04:31:25:94:ec:b0:96:61:bb:9a:ac:a9:21:bf:0e:
bc:68:94:dc:09:0e:b4:88:99:8e:73:35:88:1c:07:98:07:d2:
62:8d:fb:9f:75:3d:1a:30:c5:72:d9:30:a5:fd:52:b0:1a:18:
df:29:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:59:07 2026 by rpki-client