
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json)
Hash identifier: cjkCZNfE+E0EvyaKHzw+rwEoA24cYn3yBWS1iwAwlIQ=
Subject key identifier: C4:51:3B:68:D6:D4:B9:6D:79:71:0A:65:C3:72:04:65:BF:D0:C5:9E
Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
Manifest number: 06CB
Signing time: Tue 20 Oct 2026 22:27:08 +0000
Manifest this update: Tue 20 Oct 2026 22:27:07 +0000
Manifest next update: Tue 27 Oct 2026 22:27:07 +0000
Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: wLgt4AamLCD0dZvmqNIJ9qQv4DISQvfl4C3WH1oudog=)
2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: 5NPwjGLnfzyS4v9CY8BfwcjN4RI/Bjk1Spnk+XfA3ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 22:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9
Validity
Not Before: Oct 20 22:27:07 2026 GMT
Not After : Oct 27 22:27:07 2026 GMT
Subject: CN=6ad7eabc-d420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:de:f9:6f:44:d9:71:9e:6d:8a:21:98:74:
7a:f2:34:62:1d:0b:9c:ff:f1:09:8d:94:de:07:01:
05:5f:71:15:a5:8b:21:9a:39:b8:24:59:24:77:3c:
d0:64:e7:dd:ac:35:63:a0:08:82:72:e4:8b:e3:d9:
68:21:26:fe:37:3d:7c:20:af:d0:28:9d:01:0b:7f:
7b:6e:00:a9:b2:a0:e6:7a:61:8b:20:3d:ca:29:c3:
4d:28:fe:7e:ea:52:be:67:bb:0c:04:22:63:5a:3d:
77:7b:2d:61:22:05:d3:90:20:8e:27:8c:7a:d1:56:
67:ec:2b:88:92:61:ae:a7:57:18:05:23:c2:f1:ac:
5f:d3:c6:ff:ac:bc:89:4b:4a:40:84:50:25:d6:24:
71:cc:35:91:3e:01:6b:63:20:0b:91:9f:5b:eb:02:
7c:f1:81:70:37:01:32:1c:42:d5:20:9f:c5:5a:8c:
c5:0b:d6:43:14:78:0a:75:87:1b:3d:2d:2c:0e:ee:
b6:9a:72:ac:02:f6:38:50:ba:a5:08:3d:cf:e9:5b:
ca:1c:dc:27:ab:3f:de:5e:71:fd:21:1d:ba:77:fd:
f0:13:df:32:87:69:3f:85:c4:6e:79:b8:6b:03:66:
8f:fd:d1:a5:39:37:18:43:8b:b6:29:6a:f9:db:f3:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:3B:68:D6:D4:B9:6D:79:71:0A:65:C3:72:04:65:BF:D0:C5:9E
X509v3 Authority Key Identifier:
keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:48:18:b8:9f:b1:81:dc:3a:82:2f:79:f0:e3:85:66:a3:ae:
7e:e0:51:e7:ed:ba:56:bf:3f:4e:fe:ff:a9:8e:51:83:08:e9:
27:ad:d3:89:88:ad:3e:72:93:03:0b:52:b6:87:fb:de:8f:f5:
6b:e1:d2:07:e8:f9:ab:24:d5:c0:8d:bc:ca:1c:39:b8:64:9f:
f3:dd:6b:12:9b:da:7c:72:1e:11:f4:31:b6:6e:cd:e8:ef:0a:
eb:14:76:f4:37:b0:c2:c6:78:ab:1a:1c:0a:5c:55:c7:2b:63:
4f:46:97:21:6b:60:bd:d8:7b:b0:66:66:1f:2b:38:81:3b:5f:
0b:e3:46:f7:b4:62:49:35:3a:fb:e9:6c:5f:dd:8b:5c:91:ac:
4a:5f:92:f1:42:45:87:29:54:1a:2f:97:bf:61:d7:f4:71:45:
ed:74:14:4d:3d:f9:26:b1:92:e1:db:8b:85:e9:22:b1:da:59:
75:6a:8c:88:4f:a9:94:4c:0f:cc:23:49:50:00:e7:d1:1a:98:
45:eb:f6:68:19:91:58:6d:1e:23:28:c2:d3:3b:77:1b:22:e2:
4e:f7:a6:3b:0c:68:25:3b:96:7e:56:e6:c6:2e:25:a5:77:5e:
58:57:65:4a:ed:a5:13:92:d3:c8:53:ca:a8:36:f8:4f:b4:c6:
e0:28:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:41:59 2026 by rpki-client