
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: R4s9PGh6Ja1GcJjRZcPqe8oHBam8TKTuN4PIIBTbX5M=
Subject key identifier: 85:6C:E9:DE:29:03:E9:2C:55:AF:6B:A9:EA:F8:00:92:67:7F:E4:2A
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 032D
Signing time: Tue 23 Jun 2026 01:10:50 +0000
Manifest this update: Tue 23 Jun 2026 01:10:49 +0000
Manifest next update: Tue 30 Jun 2026 01:10:49 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: h7lKEKrcap1c55K/yq3KLdZHlwMwUxR0+goiXfz/BjE=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Jun 23 01:10:49 2026 GMT
Not After : Jun 30 01:10:49 2026 GMT
Subject: CN=6a39dd19-a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:bf:0c:f3:0a:b0:5f:b0:65:bf:05:72:f6:
71:12:da:82:03:a1:25:74:5c:08:dc:dc:7e:f2:9e:
3f:ed:af:14:53:b2:84:4c:a7:8f:6c:98:69:fa:3b:
1d:c9:5b:ed:6f:3f:f8:71:a8:5c:df:5a:68:11:8a:
df:0b:03:a2:fb:62:f7:1a:60:56:7d:41:28:5a:66:
e7:b7:7f:b0:6e:aa:cb:57:40:d8:86:44:3c:73:93:
36:1d:77:61:14:22:7c:1c:7f:20:40:eb:df:ab:29:
9d:fe:ee:cc:72:a6:81:c2:b5:ae:80:80:41:77:2b:
67:b8:da:73:08:4a:28:46:e0:92:d4:67:ef:32:f2:
62:22:e6:56:5e:a4:8a:cb:c4:7a:66:d6:64:bd:35:
94:31:e5:88:aa:5f:50:8a:aa:9b:5c:3b:30:99:3e:
f4:ab:bc:96:71:98:c3:27:66:cb:b4:d7:ea:9d:e8:
08:c9:69:8d:ae:69:fa:05:68:58:8e:75:f8:b0:23:
2e:14:bd:d0:15:7b:57:96:4a:12:1d:9c:c2:76:7c:
7a:d4:99:12:57:48:56:d2:45:84:16:ad:ec:32:5b:
b7:4f:3e:36:23:fb:64:d6:9f:12:5c:23:1b:ea:74:
0c:b3:da:52:31:03:47:7b:a4:c2:5e:67:34:00:f4:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:E9:DE:29:03:E9:2C:55:AF:6B:A9:EA:F8:00:92:67:7F:E4:2A
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:56:03:bd:a5:ef:0d:3d:01:46:41:52:50:8c:c3:86:cb:8d:
8d:22:2d:32:03:00:ac:b3:f9:03:6f:da:06:a2:2a:eb:6b:a3:
94:9e:c6:2c:76:11:e8:e1:4f:4e:e9:72:ad:c4:d7:11:fb:aa:
00:f9:04:38:47:a7:6b:b5:ef:3c:57:65:50:fa:3c:f7:41:a7:
4c:49:77:1e:de:d0:65:08:d5:14:69:d7:35:d7:e3:21:0f:65:
fd:6d:aa:2f:80:7a:91:00:f3:b8:67:08:df:6b:d6:3e:b7:64:
b6:2b:1d:1b:b4:07:fd:76:79:2f:c6:e4:92:80:9c:39:41:ae:
3d:8b:73:6c:08:84:5e:99:d6:17:70:52:49:06:77:b2:14:37:
22:e1:f0:f6:ca:15:78:ae:f5:8d:3a:7f:5b:c0:68:f2:7f:27:
7c:f1:1f:91:66:6a:72:71:a2:55:56:3e:29:86:25:10:5d:f1:
5a:3e:44:59:89:56:8d:e8:22:0c:f3:78:3e:f8:19:ed:2e:a6:
1a:51:51:3f:35:27:e8:39:68:43:65:eb:8d:43:45:be:1c:97:
b2:ad:65:92:4b:23:0c:1e:c1:fd:d1:4e:1c:ba:57:9b:f9:86:
82:f3:de:09:fa:94:64:94:96:8a:ac:d2:b5:eb:78:3a:1e:28:
12:85:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:32:49 2026 by rpki-client