
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier: gsahkXoYwG3DV65to+mUUiOwQZl/CIZdlv7hmWzz7gU=
Subject key identifier: D4:39:6A:23:B9:26:C9:16:DD:0B:79:9B:F3:F2:FA:9C:A8:33:44:D0
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial: 08F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number: 08E9
Signing time: Sun 04 Oct 2026 20:25:46 +0000
Manifest this update: Sun 04 Oct 2026 20:25:46 +0000
Manifest next update: Sun 11 Oct 2026 20:25:46 +0000
Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: jVb+bTDZqjM0vpm07Ewtrk8At5KhTtiqXqCbceloT3s=)
2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: NWq6rBlzl9ex6GIufRvovjoO12pZgzDILKLwtdCgUVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Validity
Not Before: Oct 4 20:25:46 2026 GMT
Not After : Oct 11 20:25:46 2026 GMT
Subject: CN=6ac2b64a-caf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:b8:b6:36:71:75:fc:95:d3:87:29:00:a7:
c5:da:96:e1:be:f1:6d:de:70:ab:09:f7:77:d8:2f:
49:99:e8:42:9f:63:14:54:c8:87:96:8b:de:95:cc:
84:dc:0b:9f:33:a8:75:ab:1e:e6:1e:c3:04:5e:24:
6e:b5:59:aa:af:2a:ec:a7:fe:63:c1:37:fc:b0:b3:
89:fc:56:54:f9:b2:13:50:ff:02:fc:32:68:11:6c:
82:fe:ea:00:81:c5:c4:e5:d0:64:38:01:90:e9:75:
80:99:65:b2:ce:1e:a9:c6:50:11:f9:6e:98:12:42:
b2:b1:b4:04:91:ee:98:de:66:8c:74:00:69:e5:3b:
53:8d:f4:ef:4f:a9:eb:17:40:47:4b:0d:d9:57:53:
ab:5d:63:f8:dd:67:8b:ca:2c:2b:cc:36:c5:96:5f:
63:20:ef:56:c3:92:e5:e2:ec:f7:78:d1:77:fb:37:
67:75:a4:cb:44:0c:76:e8:76:78:5d:94:fd:dd:39:
fa:e7:b6:a8:29:bf:00:e3:c5:3e:47:a6:3a:07:2e:
9f:9e:11:c6:b8:03:df:ba:2c:9a:74:1d:74:8e:28:
d2:d4:aa:65:70:3d:f4:28:77:48:b1:f7:29:f7:98:
86:aa:3a:80:23:2e:80:48:8d:de:22:63:be:ff:86:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:6A:23:B9:26:C9:16:DD:0B:79:9B:F3:F2:FA:9C:A8:33:44:D0
X509v3 Authority Key Identifier:
keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:a0:05:d8:df:fe:cd:dd:a7:ac:72:92:e7:a0:4e:bf:59:
3f:76:19:8c:e4:8a:3c:55:b8:db:06:c0:69:a3:1a:87:a2:81:
aa:8d:a4:bc:b0:00:6a:cb:07:fb:e5:da:9e:f1:4c:8e:ce:f9:
26:7f:a1:a8:a3:4a:3b:ee:91:4f:0d:a5:0d:fd:be:19:db:78:
cf:43:da:0f:83:cd:45:91:99:2f:b2:f1:c2:4f:b3:a0:84:8e:
98:75:44:fe:32:86:e3:f8:c3:54:f0:6b:fd:d0:f3:bf:52:76:
23:0d:a6:8b:2e:15:65:c6:63:44:7e:72:09:ae:5d:d6:88:ce:
a9:4c:9e:ed:09:8a:16:4e:e9:8b:7f:e9:0e:72:96:91:52:96:
72:17:75:6e:0a:85:4e:83:fb:57:d1:d9:24:e3:98:af:ca:aa:
3a:1c:08:cc:cb:9f:0c:1f:33:86:88:16:ff:f1:98:10:1d:6b:
4a:a4:6a:2a:48:03:bd:79:f7:57:a8:f8:88:08:88:55:60:b8:
25:0a:c5:be:c7:1e:c9:a9:a3:36:69:4c:c1:29:09:79:df:a2:
52:3c:4c:20:ed:0c:5a:aa:d5:4f:16:94:ea:36:7e:f8:98:7e:
0b:07:d6:77:0c:ba:7f:b9:64:6b:98:0c:6b:b3:c9:b1:f3:79:
88:57:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:43:52 2026 by rpki-client