
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: IdzL4Wqqr7sJwcriysmxPXzgEEZUFQVMQhYvML+4TcE=
Subject key identifier: 45:62:F5:51:E5:A0:D6:6E:38:B4:EE:85:30:D1:63:E5:51:63:5A:9D
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 0776
Signing time: Sat 10 Oct 2026 21:42:29 +0000
Manifest this update: Sat 10 Oct 2026 21:42:28 +0000
Manifest next update: Sat 17 Oct 2026 21:42:28 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: bYeg1ukiJfDrRHEcUZSeOR3tJGYR4BLnbS0rIWAUH8E=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QIvXNw4SfpNnIslRP4MG8z3E8JePtXN3iNiIRQ5vklk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Oct 10 21:42:28 2026 GMT
Not After : Oct 17 21:42:28 2026 GMT
Subject: CN=6acab145-fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:f7:f1:0b:31:eb:30:74:51:97:1f:b1:d4:
1b:4c:24:4c:9b:09:c9:49:11:be:8b:80:e9:fc:af:
74:24:6d:15:72:be:3c:d2:08:0d:15:81:f7:a9:c5:
ab:eb:d0:5d:8e:79:24:30:a8:43:80:0c:d1:a9:1d:
d4:2b:13:4f:12:52:a8:7c:79:8a:8c:53:f5:71:dd:
ae:63:ea:32:69:5d:91:e9:15:77:10:ef:44:ec:78:
0a:2c:b4:90:e2:11:24:9b:fe:d1:33:36:0f:e4:75:
11:ca:e3:7d:7d:47:5a:98:32:b9:1a:29:c5:4b:6e:
32:97:06:b5:2b:08:27:9b:a2:03:18:0b:cf:40:0c:
ae:be:dd:0e:da:18:56:19:15:0a:96:d3:f6:4c:00:
be:dd:64:a3:39:a3:12:87:be:8b:00:64:71:87:58:
6b:c0:43:be:c4:2c:5f:43:05:19:e2:75:f7:98:f0:
56:b9:f8:ff:10:4c:22:75:5e:e2:5d:aa:ef:22:63:
d8:1c:61:56:aa:a8:37:87:a6:09:cc:ca:1d:78:a8:
14:53:a1:db:8b:d4:25:f7:2d:05:8b:fd:eb:f6:db:
30:d8:5a:64:38:97:81:c1:cc:14:0f:37:85:4f:8c:
77:f2:9e:b0:5b:c0:34:0f:d4:b8:ce:13:6b:da:5d:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:F5:51:E5:A0:D6:6E:38:B4:EE:85:30:D1:63:E5:51:63:5A:9D
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4b:5c:04:cf:fa:e2:fe:f4:17:7e:e7:8b:84:df:a9:72:ec:
26:e8:72:08:da:4a:9d:ec:7e:0c:24:9e:ee:d3:cb:fc:08:1a:
ad:50:d7:31:3d:4c:bb:91:e2:fd:68:4a:32:cc:82:7a:a2:8b:
2b:cc:bc:25:c6:71:42:ca:25:f8:45:49:61:35:76:f5:ac:b1:
c5:39:52:32:0b:fe:1c:c0:ca:ef:36:5b:2c:8f:95:ab:9c:26:
de:b1:3d:58:de:e5:84:22:0a:30:48:5b:73:0e:68:20:14:bc:
29:35:e1:17:06:6f:ae:03:7f:ef:5d:0e:4d:aa:a4:9c:12:7a:
c3:1f:76:91:1f:5a:07:a9:5f:17:08:71:5a:20:83:d1:06:4a:
0b:b0:e9:bd:d3:ed:6b:12:ce:f4:e9:10:e1:40:27:b6:26:41:
bf:bb:d3:0e:e3:24:3e:ac:02:42:61:a3:48:71:b3:65:99:35:
89:9f:b6:6a:70:cd:56:6c:6d:bb:85:e9:04:87:70:b1:b7:9c:
a7:22:dc:48:0f:1c:46:0c:2a:84:be:b5:b2:e6:d0:c9:f4:22:
43:a9:14:e5:7a:a9:f6:e2:ef:fb:bc:a8:d5:98:0e:94:c4:3d:
eb:70:7f:ba:1f:16:43:e5:c1:02:db:42:ce:2d:32:81:43:27:
2e:01:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:16:00 2026 by rpki-client