
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json)
Hash identifier: XsCvdIm3irdGo7lNIEWW8ide5Wm6CkJHWknaW5fsgXY=
Subject key identifier: 61:94:97:B5:5B:4B:4F:88:8A:F3:F4:86:00:FC:C7:90:3D:6C:38:BD
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial: 0902
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
Manifest number: 08F6
Signing time: Tue 18 Aug 2026 20:37:12 +0000
Manifest this update: Tue 18 Aug 2026 20:37:12 +0000
Manifest next update: Tue 25 Aug 2026 20:37:12 +0000
Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: RvLw+TRvUDB1xvi8tbJ5Fn4GNyJhFxI23tx0RC1f9Bc=)
2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: zBlokYSAqztcyso1tQzNpvjPasNfqNMnXVvr4E7ZFzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Validity
Not Before: Aug 18 20:37:12 2026 GMT
Not After : Aug 25 20:37:12 2026 GMT
Subject: CN=6a84c278-cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:82:1a:22:23:06:39:22:8f:fe:65:27:cf:
c7:be:26:ce:40:ab:55:a8:5a:b8:9b:73:28:23:a8:
4b:cf:f5:e0:b3:09:a3:9b:d5:d3:4c:26:58:db:9a:
b2:41:24:fe:ee:dc:9d:e8:20:ec:4e:07:98:c5:f2:
c7:cd:05:72:36:dc:9a:82:9f:7e:bc:5d:76:36:40:
8a:85:e1:f9:b3:d8:d0:31:ce:b0:00:76:ff:b4:2d:
69:40:47:14:3a:88:3e:38:a9:ee:21:18:6b:64:38:
03:25:3f:90:3a:25:c2:b2:eb:6b:ce:a9:30:29:26:
a4:61:b9:98:5e:66:7c:40:51:3b:3f:3d:c9:76:1a:
50:6e:8b:22:b6:9b:b8:1f:0c:c1:00:44:e2:9d:37:
60:38:16:ce:39:7c:bd:4e:d1:b5:c7:96:f1:cd:80:
85:f5:91:5e:9c:77:bd:f2:e8:0a:bf:5f:a4:4b:ff:
63:d6:4c:2d:aa:17:3e:5d:4d:c0:03:12:03:5c:8a:
21:e0:4e:1d:88:70:5b:e2:65:8d:26:d5:97:06:d4:
89:af:6c:1f:22:81:b1:57:91:07:9a:b2:b3:2c:5b:
ea:ef:12:2d:a3:bd:2d:ba:a9:3e:46:99:d7:e1:a4:
f9:a6:44:a7:68:ac:8e:68:15:1f:d1:cf:fd:f4:53:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:97:B5:5B:4B:4F:88:8A:F3:F4:86:00:FC:C7:90:3D:6C:38:BD
X509v3 Authority Key Identifier:
keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:78:42:6f:5e:ac:83:98:16:39:19:53:8a:2e:9f:92:37:0a:
df:67:ed:43:93:d1:31:60:87:9f:e2:d3:2c:c8:51:e3:71:ec:
0d:b0:70:b6:27:50:25:69:1a:fe:19:93:4e:f5:62:a4:ef:75:
f3:3d:de:ef:53:96:90:e9:43:54:d5:fb:35:03:f0:3e:9f:16:
b5:47:33:0a:4b:2d:05:37:56:b0:e3:75:6e:8e:c3:31:86:e4:
c3:46:6d:5c:82:82:32:a0:a8:cb:ea:2d:21:1b:19:b9:50:58:
ad:3d:c6:ed:9d:91:24:e1:b5:85:0e:c5:10:31:47:0c:75:8a:
63:32:21:6d:39:1f:d5:87:4c:14:8a:9b:9c:63:45:b0:06:d9:
ac:2a:a3:77:ad:85:bf:1d:a4:19:f5:90:6a:c7:e3:f9:a7:20:
35:89:c9:52:4d:ac:93:6e:b2:03:98:5c:75:12:68:a4:7a:a0:
c9:94:45:0a:94:75:f8:33:fa:e3:26:c5:ab:d3:8b:b3:64:4c:
19:29:fb:8c:fa:78:e1:fe:96:1e:ec:8d:15:85:39:66:46:a8:
63:ca:22:1f:85:07:db:49:cd:52:35:d6:17:05:9f:47:4f:3d:
0b:dc:cd:3b:68:ec:50:7e:6f:2f:f6:be:84:86:84:e0:f4:50:
fa:2b:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:59 2026 by rpki-client