
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: dWfCh3mPY/N8IQ0kcRqH443VeIOdG2Y3ZUHmzhsn4qw=
Subject key identifier: EE:29:C5:20:A0:E2:C0:E1:4B:57:5E:90:E8:2A:5A:88:8B:5A:70:EB
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 0784
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 0762
Signing time: Sat 31 Oct 2026 22:21:46 +0000
Manifest this update: Sat 31 Oct 2026 22:21:45 +0000
Manifest next update: Sat 07 Nov 2026 22:21:45 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: vcYT+IvR5swPkOoBCRCqxjIGhDUMMBqvcmiNu/KKpTA=)
2: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: bNYRWc+xdCHr6Dqm6E4JXdO5OdveJW1Evylh8xk+joU=)
3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: 0FJPWWCgs74V2qR0+srXlHP3r9bzqp0VjgYjnq505c8=)
4: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: N+hh0IsbREkCIUI5w/ClySR4LrvvV4rJ4CFoF8qj+kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 22:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Oct 31 22:21:45 2026 GMT
Not After : Nov 7 22:21:45 2026 GMT
Subject: CN=6ae669fa-b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:e9:c3:7a:c6:86:b4:56:cf:76:d3:f6:ef:
bd:72:60:ca:c2:6b:1d:99:6a:cc:97:b1:e7:f4:e9:
4c:5b:82:56:7d:39:d7:80:e0:47:09:ad:a1:12:fe:
bb:f8:c6:4d:d2:97:1f:be:64:0d:76:25:7a:99:50:
b2:a1:a5:a8:20:dc:9d:71:4e:94:41:9a:66:9e:22:
3e:ab:6c:ea:40:f4:e5:7b:f0:63:0b:ff:d7:a7:29:
b1:07:f2:a4:59:a3:a5:1f:63:cd:07:38:47:d6:5c:
74:4f:1f:00:e0:2c:27:34:eb:17:2c:92:f6:1b:34:
6e:15:fc:f0:e2:41:40:ea:dd:03:50:fd:89:14:42:
c1:70:07:7a:33:24:50:37:d2:34:fe:aa:d4:5f:f7:
73:f0:40:16:42:3b:fb:8a:00:27:24:f7:e4:cc:b5:
95:61:23:fa:44:93:31:23:4d:e9:f5:0a:69:b8:d1:
a3:50:a5:a3:34:33:c7:b5:1a:a4:b0:96:8a:43:33:
34:28:cb:95:60:94:92:56:68:bc:90:a1:a1:ea:d1:
22:00:94:a5:8c:19:bf:c1:eb:b7:47:fb:0e:b3:f8:
b6:c4:54:92:19:63:00:13:fa:14:53:48:ec:64:6b:
19:12:a5:8e:76:32:5a:02:fa:3a:b9:47:ca:c6:03:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:C5:20:A0:E2:C0:E1:4B:57:5E:90:E8:2A:5A:88:8B:5A:70:EB
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:00:7b:a2:82:5b:24:0a:99:0b:72:9b:5a:db:1d:95:d2:
83:ef:36:4b:cf:fc:aa:51:7a:37:83:5e:0e:7b:bf:72:5e:86:
0b:7b:8a:0c:25:f6:e6:3f:cb:9e:6f:12:93:64:af:bb:b3:ba:
1f:1c:ba:00:f4:b4:fc:b4:f1:1c:e2:46:ff:e9:aa:4b:09:96:
52:04:03:65:a4:5b:ca:8e:16:6a:ce:91:92:03:87:92:57:ed:
28:b1:1d:4d:c9:68:ea:16:25:3f:95:48:ef:cf:d1:9c:43:c0:
18:7b:9c:6a:9c:44:37:da:52:60:69:b8:d9:87:bf:f8:33:29:
ca:92:73:1d:e2:65:33:9c:aa:a0:f1:a7:c3:34:20:90:84:e3:
11:33:c4:43:a9:01:e2:e4:3a:a8:37:09:7f:b9:15:7c:93:29:
b8:1d:29:18:4e:e7:37:75:e5:f0:00:1c:97:6c:2f:91:85:7a:
5e:7e:53:64:c1:68:21:23:3f:8e:da:ac:2f:1f:6a:96:34:e1:
73:1a:63:ee:d4:25:16:5a:24:6a:c2:3a:8f:40:6e:c4:ec:cc:
64:9b:11:09:06:04:81:9b:1a:c3:d4:c0:50:7f:77:a6:c8:40:
15:5e:d1:25:6e:0f:ca:b0:e9:09:c3:ca:7d:ce:41:9a:14:b0:
c1:d1:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:54 2026 by rpki-client