
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json)
Hash identifier: iuGmtdJ4PZOzcVWbGyVMNR+HcHI2+TsCDy8C+49Q2Bk=
Subject key identifier: AF:C4:F0:94:30:CA:22:62:5B:16:DF:F0:2D:40:DD:D1:1B:D7:BE:02
Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Certificate serial: 0762
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
Manifest number: 071A
Signing time: Thu 06 Aug 2026 22:04:34 +0000
Manifest this update: Thu 06 Aug 2026 22:04:34 +0000
Manifest next update: Thu 13 Aug 2026 22:04:34 +0000
Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: 7bkYutOuQeRazOVAL3wFySfwD9LjNBEZos2zAuX3a7U=)
2: E1201A0422D611EFAE700044C4F9AE02.roa (hash: VfZcIRpYWsXv2sQHMltNI7KlcM5kOmrXtKUtk3vzF9g=)
3: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: AReViyH8qYJmKjUIQ8QrviAg/eKIeslm79IJrfhFTIA=)
4: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: sM6Ff5Btr2H1Za3+xr7nTyk868AOvBu9Fccxr6yah7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 22:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890 (0x762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF
Validity
Not Before: Aug 6 22:04:34 2026 GMT
Not After : Aug 13 22:04:34 2026 GMT
Subject: CN=6a7504f2-210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:d4:c7:c5:75:d6:db:9c:2c:fd:2f:6b:80:
8a:6e:66:dc:be:73:6d:1e:46:df:14:2e:f0:c4:7a:
94:7e:23:a0:64:81:db:dc:4d:9a:b6:fc:c0:3f:83:
2c:73:95:f4:d0:9e:29:96:d5:47:d8:c6:92:cf:f3:
29:b2:b5:eb:12:5a:d9:bf:31:42:06:33:39:8c:0b:
e6:99:f0:96:5b:36:bc:bb:c5:1c:1e:e9:3a:c8:b5:
b4:7c:bf:52:3b:2d:a2:43:39:de:49:12:95:1c:20:
ad:c8:3f:bb:76:ea:de:6c:0d:1c:37:a7:24:02:d4:
60:1a:62:74:d4:64:9f:23:65:dc:ec:ae:9d:fe:c1:
a4:89:b2:4c:12:49:04:c6:da:07:c7:7b:62:cc:64:
e9:9c:5b:b9:5a:6d:66:7d:0f:4c:00:83:11:ad:18:
51:3f:e5:45:2f:f0:a9:c3:9b:64:9c:7e:d8:56:74:
7f:65:42:8b:8d:20:4c:25:95:ed:29:46:89:91:c5:
8d:1b:ed:f4:15:71:56:4e:95:e0:f0:6e:3c:f3:53:
9e:a5:13:65:b4:7f:66:1c:a7:be:84:49:ef:3d:cb:
d3:bf:84:22:52:89:7c:94:67:48:3f:b4:42:95:dd:
8c:79:7f:41:82:20:42:4e:f5:97:6c:91:45:88:b4:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:F0:94:30:CA:22:62:5B:16:DF:F0:2D:40:DD:D1:1B:D7:BE:02
X509v3 Authority Key Identifier:
keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:dc:fe:8f:9f:b2:21:27:70:d9:33:c0:8a:7e:6f:a6:62:f8:
4f:e1:7d:8b:7f:0f:7a:99:e2:aa:1a:81:53:7c:2e:d9:1d:f8:
e1:7e:ea:bf:0d:07:6f:5f:c3:9e:8a:59:b9:d3:cb:a0:03:ff:
3b:32:ff:1e:25:8e:d4:c1:9a:1e:a0:1e:d4:34:97:68:a1:c2:
47:b9:aa:33:ba:13:58:2f:9f:5a:23:e0:9f:19:6d:ae:20:1b:
28:a6:89:62:10:2f:c6:42:72:07:91:68:95:d4:18:32:ee:57:
f6:76:15:08:c2:ea:63:66:3d:39:ee:f7:77:33:c6:d6:77:4b:
60:60:54:ff:61:90:60:ff:a8:46:4f:33:75:3f:f8:67:59:0d:
78:3e:49:f9:ec:96:4d:56:26:d7:1e:38:13:1d:af:4c:83:de:
f8:07:5d:38:c5:e7:b1:51:98:36:61:81:81:b8:82:d0:b1:ae:
0d:5d:0d:2e:f4:d5:51:f6:c1:f9:06:18:73:95:b0:9b:22:3d:
af:54:9d:9f:21:56:57:58:51:b1:86:82:e7:a0:42:90:ba:1a:
25:31:f2:f4:f9:ab:58:a7:d1:fd:84:50:11:38:7a:ac:fb:16:
06:c8:7e:07:eb:d4:77:9a:d9:fa:d0:a6:ea:99:ba:0e:a6:61:
39:23:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:52:06 2026 by rpki-client