
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File: xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier: Nx29xphRTJvuaXD5kXfX1xK0Uk9TmygST74hjp3tiLA=
Subject key identifier: 9F:7C:A9:6F:0B:9D:3D:2E:47:08:89:08:4A:7F:74:48:F9:94:70:38
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number: 0727
Signing time: Sun 31 May 2026 22:27:22 +0000
Manifest this update: Sun 31 May 2026 22:27:22 +0000
Manifest next update: Sun 07 Jun 2026 22:27:22 +0000
Files and hashes: 1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: nfxzJDctnyBoM+D9ErzOhVkX6M2A55nmwba0UvwsJXc=)
2: 485D694A454911EEB8718378C4F9AE02.roa (hash: Y8iJThI3UQs6h5LHq/2D1bpcHDn8+qLI7yAh/AJOyS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 22:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Validity
Not Before: May 31 22:27:22 2026 GMT
Not After : Jun 7 22:27:22 2026 GMT
Subject: CN=6a1cb5ca-c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:a6:4b:8e:d6:b4:cc:9d:b1:6f:14:1e:51:
9b:18:4a:16:7f:73:71:63:43:a0:80:cd:fd:f6:af:
9a:44:56:42:76:31:67:49:9d:4d:23:3d:d0:be:e2:
36:5a:db:bd:01:4e:64:09:55:57:fc:5c:57:87:92:
c6:77:a9:5d:b0:d9:d4:b8:f7:88:51:81:84:60:f1:
68:d8:59:54:84:a7:16:da:9a:bd:c1:bb:66:c0:1f:
d7:70:bd:a0:01:da:60:cb:1a:5f:09:70:92:08:84:
f4:15:d0:47:0d:3a:a1:6c:5b:21:8c:e6:1a:73:0b:
bc:73:2a:c4:46:24:1f:e2:47:66:ec:37:58:fe:f5:
44:75:17:f2:39:6a:b8:52:df:d3:02:0f:0e:3c:d4:
89:c5:08:c9:aa:9b:74:5c:95:0c:94:d1:a9:2a:84:
e7:15:9c:dc:1f:8c:95:51:ec:6a:56:cd:97:b7:53:
d4:0c:68:4b:39:26:3a:c1:11:87:7a:79:83:98:a0:
6a:46:21:79:2f:f5:29:50:72:ee:c3:7e:99:3f:79:
e3:02:28:3a:5a:9d:76:cb:66:4d:89:88:99:da:82:
9f:d6:f7:23:2d:a0:8e:eb:42:5d:17:11:26:03:c7:
31:07:88:48:03:ad:0d:27:89:fa:69:93:01:44:c2:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:A9:6F:0B:9D:3D:2E:47:08:89:08:4A:7F:74:48:F9:94:70:38
X509v3 Authority Key Identifier:
keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:95:57:91:82:00:63:92:18:e7:6d:61:bb:41:08:6e:45:
d0:5a:0f:ec:c0:a1:cd:3b:b1:07:72:b9:5d:31:e0:30:1f:3f:
4c:db:90:15:7c:d5:43:9c:e4:9d:78:35:b2:8d:8c:4f:ce:77:
44:f4:e3:d4:c3:d3:b8:5b:fe:7d:e3:61:2f:73:d6:65:87:c9:
f9:79:be:35:47:a4:24:f5:62:2e:e3:1a:1f:ed:b9:aa:d8:ef:
4f:b2:53:62:a6:63:5b:fb:ff:be:19:30:f1:97:b3:ae:77:22:
c7:6c:cf:2b:cf:50:52:77:e7:48:fa:b3:13:fb:62:9b:3c:c1:
d1:87:ca:b3:a1:44:2e:ca:49:53:21:55:20:38:6b:7d:64:7b:
c8:f8:51:b7:f2:ae:15:fe:ff:0b:71:cc:54:3c:21:7d:de:2e:
d3:1a:25:44:97:49:29:90:83:20:98:e7:ae:79:05:6a:7c:28:
f0:70:db:57:2e:06:b0:f8:75:4f:31:2f:ee:be:49:99:04:7e:
53:66:de:cc:96:6b:d0:e8:86:e6:ce:de:a1:be:48:cb:1f:3e:
c6:d9:60:81:f0:e1:9a:0f:ce:78:c3:e4:be:f7:50:d6:68:1d:
c0:e0:58:9b:b2:31:1e:6f:c5:73:5a:87:87:45:aa:c1:17:3e:
e8:7c:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:22 2026 by rpki-client