
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json)
Hash identifier: 7fMqSd4/b9d9dNGr6YtQlG3kZA4ClVSLkjASxTBgnq8=
Subject key identifier: 04:CE:B3:2E:84:4D:A9:7E:81:50:B5:24:A0:D0:C1:C0:A5:C1:E2:02
Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
Manifest number: 0305
Signing time: Sun 05 Apr 2026 00:59:03 +0000
Manifest this update: Sun 05 Apr 2026 00:59:03 +0000
Manifest next update: Sun 12 Apr 2026 00:59:03 +0000
Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: W2aEHr5IRRt7rmiROzIEqkB4W55+qJSWyHhy0/1QVuU=)
2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: TySZorzlUffDWiVydytqIF+kF8CT3lkkirsLcfRGKOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451
Validity
Not Before: Apr 5 00:59:03 2026 GMT
Not After : Apr 12 00:59:03 2026 GMT
Subject: CN=69d1b3d7-74c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:8b:d0:e7:c3:f4:7a:42:77:00:d1:44:93:
8f:c3:81:74:ee:82:85:b5:d6:a6:54:7b:19:d3:b6:
10:62:1c:df:01:b0:51:79:51:61:71:23:e2:01:7d:
df:fe:a7:b1:c6:54:9f:f9:f3:55:79:78:66:7d:9f:
5a:62:c5:cc:b7:14:d0:66:8f:be:b3:fb:2f:7d:47:
dc:55:e1:bb:fa:db:e6:42:4d:11:20:c9:90:f7:1c:
2f:30:da:e6:90:38:28:28:70:e6:49:c3:8a:22:9d:
d9:94:e9:f2:dd:7f:d9:dc:02:bf:ec:fd:78:a3:d6:
8f:0d:db:f1:2c:65:f3:2c:c7:75:d8:fd:fd:49:60:
1b:e8:cc:79:4f:d5:e4:fe:c9:ae:c6:4e:4d:1c:c1:
b2:2e:37:02:44:b6:6c:3f:01:f9:72:79:d8:c6:ef:
34:12:84:77:4d:9a:46:74:5f:61:1d:83:0c:1c:40:
af:0b:64:64:1c:57:c8:31:a8:af:29:1d:9f:af:18:
0b:55:95:0b:7d:05:a2:6d:76:11:c4:1a:24:88:d6:
d5:34:f6:bf:63:18:d6:15:3c:79:db:1f:97:40:ad:
00:93:7b:03:31:25:e2:10:97:62:3e:26:9b:6a:b0:
b3:f8:7f:cd:a8:9a:6c:fa:ad:51:74:80:47:60:52:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:B3:2E:84:4D:A9:7E:81:50:B5:24:A0:D0:C1:C0:A5:C1:E2:02
X509v3 Authority Key Identifier:
keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:fa:17:2a:f0:3e:fa:68:c3:95:6b:c9:ce:58:ca:91:7f:
3d:c8:25:49:6f:e1:79:98:6d:eb:25:4c:5b:76:c7:f2:83:53:
fa:0e:89:55:4b:79:c8:8e:b3:4c:0a:e6:1f:db:17:7b:66:ae:
6e:79:0d:80:8e:57:bf:82:85:92:ba:bf:85:b3:f4:d5:0e:55:
b9:0e:ba:59:c3:f0:d4:12:89:50:a2:dc:01:0b:72:f4:ac:37:
7e:6b:38:0c:b6:d0:f5:3e:99:f7:36:57:48:1e:5a:6b:e2:ad:
13:5d:6a:7b:5d:2c:82:19:c9:f3:b1:82:ff:ee:e0:0e:a5:69:
09:55:32:25:18:64:38:1b:3b:a8:1f:5d:40:b8:c0:70:93:e1:
cc:11:ee:5f:28:c5:9a:42:07:93:3b:db:a4:81:e9:42:26:25:
7c:70:5d:39:9c:dd:d9:71:1a:c1:d9:04:71:27:cc:6b:bb:0d:
c5:9d:04:68:7d:54:8c:2a:45:8a:ba:f4:02:60:80:02:7a:77:
fb:21:96:68:54:ea:86:12:63:aa:0b:7e:d3:db:4e:77:ef:0a:
dd:af:f5:c1:2a:5a:d5:3c:8a:0e:e2:da:17:9f:39:41:8d:c6:
94:a5:d0:87:01:ce:a8:5a:62:a1:04:35:c8:94:6a:b7:ca:da:
a1:c5:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:35 2026 by rpki-client