
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json)
Hash identifier: /IUJYjLLfRqFJjLNHHF/BpaaZNiiPS8eLugGsPbsCyg=
Subject key identifier: 76:B8:E2:3E:CD:03:9F:60:81:51:18:B7:CA:06:31:36:E2:07:0B:FD
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
Manifest number: 023A
Signing time: Sat 03 Oct 2026 03:09:40 +0000
Manifest this update: Sat 03 Oct 2026 03:09:39 +0000
Manifest next update: Sat 10 Oct 2026 03:09:39 +0000
Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: YQZb2rjG1AM9lurYK5FZLpVas4vDyZtEVITBY6GUGkc=)
2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: O9lCjMQypdSGWG3ll22zLdodDNP/53eTRSGfWnDPLFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Validity
Not Before: Oct 3 03:09:39 2026 GMT
Not After : Oct 10 03:09:39 2026 GMT
Subject: CN=6ac071f4-c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:d8:f2:5f:07:cc:ba:61:33:03:4f:51:41:
c2:e9:02:ee:37:13:2c:fb:fd:82:d5:50:a4:d0:72:
09:3e:d1:a0:10:94:62:19:1f:de:ee:e3:fe:f0:89:
99:9c:6e:dd:b1:fa:21:4d:02:20:36:86:43:eb:c0:
e7:5c:ca:94:4c:89:55:a5:cc:d7:5f:e1:9a:9e:df:
7d:d7:b7:86:91:fa:ca:a8:24:ce:f9:55:92:6f:d0:
0a:fa:e1:0a:a3:91:18:c9:58:92:64:cf:42:be:9f:
f2:05:9b:e6:5d:47:c9:84:00:31:1a:eb:ce:96:4c:
a2:92:e4:9f:aa:5f:e9:26:c3:16:e7:da:45:4b:90:
b6:bd:8b:e1:34:f6:95:a7:31:ef:e6:6e:72:7c:3d:
c0:d7:18:70:9d:bf:9f:42:b0:b8:37:c9:8f:c4:da:
16:54:9a:17:fa:64:db:da:94:8f:be:2a:17:a2:f4:
99:d2:bc:1e:03:a4:43:85:35:17:b3:a4:b7:de:70:
68:31:34:61:33:45:df:1f:4e:91:89:7d:20:37:9e:
43:1b:f9:c4:05:a9:6b:32:3e:c8:d8:73:03:a6:6a:
fd:22:0d:8c:c3:c6:80:00:90:b7:2d:84:9b:0b:ed:
e6:88:17:08:62:3d:0c:0a:9b:9f:2a:49:91:69:74:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:E2:3E:CD:03:9F:60:81:51:18:B7:CA:06:31:36:E2:07:0B:FD
X509v3 Authority Key Identifier:
keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:53:d4:72:c6:de:23:74:c9:32:76:b8:5f:3c:0c:ae:72:c8:
81:ef:a8:fa:95:19:61:6e:ad:21:01:e6:05:af:80:b7:6d:b2:
7e:29:65:84:8a:87:1b:c8:28:c0:91:80:90:00:ce:b0:b6:89:
47:c5:15:12:88:a6:30:e2:28:43:d3:2e:fc:86:8c:32:e3:81:
f5:d5:47:6f:10:b8:77:7c:43:1b:b1:f4:98:da:33:94:b9:78:
c9:9e:2e:95:b9:fe:8d:01:ef:fe:a0:59:ff:46:1e:93:dd:95:
f5:c1:8b:f8:fb:96:b8:7c:80:85:a7:34:40:fe:f0:ef:fa:44:
29:96:f9:bb:60:da:9f:05:90:5a:eb:d4:45:2e:67:70:62:c9:
25:cd:85:ec:d2:d2:78:64:c2:19:36:aa:b1:62:b2:9f:f0:16:
43:7f:e2:7f:ac:a5:de:b1:4e:62:47:ee:d7:25:ff:75:4b:52:
d0:61:b8:b0:b5:a2:78:8b:3f:0f:21:37:86:6e:f7:b1:05:14:
d2:85:11:9b:f0:b4:b7:a4:b9:95:4e:bd:70:cf:77:91:56:31:
f9:92:6d:63:fc:fc:45:6e:ed:37:db:56:a7:70:e0:57:06:82:
7c:79:dc:e7:97:38:33:c3:45:2e:6b:74:14:c5:0a:89:b2:97:
4f:11:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:55 2026 by rpki-client