
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File: xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier: KDJy55Ddpr8JXHteq+fwZBLeIeGmn7B4PkebNeim8Nw=
Subject key identifier: 2D:C8:C5:B4:A4:29:30:07:21:B1:A7:48:21:62:C9:37:23:56:FF:6F
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial: 04C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number: 04BB
Signing time: Tue 06 Oct 2026 23:59:16 +0000
Manifest this update: Tue 06 Oct 2026 23:59:15 +0000
Manifest next update: Tue 13 Oct 2026 23:59:15 +0000
Files and hashes: 1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: dP+GQ7QZF09o0HpeCeJfH4ot3LAWnM+EklSc2gl2fLo=)
2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Validity
Not Before: Oct 6 23:59:15 2026 GMT
Not After : Oct 13 23:59:15 2026 GMT
Subject: CN=6ac58b54-6b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:59:06:bc:4c:4f:30:49:4d:44:72:95:b3:
d4:dd:7b:f3:cb:3e:42:04:13:11:87:c2:de:1b:e8:
5e:ae:ef:47:7f:a1:32:cc:18:79:8c:b4:c1:2a:04:
c5:09:1c:6c:58:23:b5:27:67:c5:55:3b:53:92:67:
c8:b7:21:ac:11:2f:e7:3a:81:db:6a:d2:2c:24:31:
15:62:87:4f:9d:a8:b2:9f:2e:17:c2:1d:cc:69:02:
76:92:f2:8b:77:b5:bf:ef:3c:1c:26:a8:c3:9d:7c:
be:63:90:a0:83:e0:83:e2:64:66:4a:70:52:48:7d:
4b:c6:59:94:da:a8:f7:65:fa:f2:ae:8f:ab:a2:5d:
b0:23:fc:7d:17:37:d6:fe:28:bf:30:ce:05:9e:3a:
e8:45:5c:9d:42:01:4d:8c:f6:90:4f:9c:a0:4a:6e:
c2:02:b9:84:16:ef:e4:da:59:e7:52:45:a2:5b:6b:
b4:0f:51:2f:c9:ed:10:97:e9:f6:9b:46:3b:66:0d:
0c:30:20:dd:90:a7:6a:8d:82:8d:07:f0:3e:55:08:
e4:cb:e9:a3:f0:3b:c1:a0:e4:a0:d1:a3:72:f1:13:
41:3f:b3:e0:49:23:ce:8a:27:66:7d:eb:47:1e:0f:
0e:eb:49:cd:c3:4f:46:6c:b3:e1:40:ad:2e:ef:d3:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:C5:B4:A4:29:30:07:21:B1:A7:48:21:62:C9:37:23:56:FF:6F
X509v3 Authority Key Identifier:
keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:d2:43:c5:4b:36:ce:24:d5:94:cf:74:15:ba:bf:df:2f:dd:
04:25:39:ba:a7:eb:e3:51:61:29:c6:54:22:47:ab:de:7b:2f:
05:bf:71:e3:28:c1:9c:8a:66:af:bd:c5:21:d7:ed:d6:49:50:
eb:28:41:cc:22:0d:54:7d:b4:f7:06:17:70:dc:10:bf:08:43:
7d:fd:d4:09:eb:84:5a:81:00:dc:37:b4:e3:d3:0c:ee:be:91:
b7:7f:d5:a1:c4:f7:32:60:07:78:76:e4:69:b8:4f:22:5f:3f:
20:d2:01:31:99:76:31:2d:d3:43:3e:ce:02:d7:2e:a8:50:29:
03:2f:97:2c:3c:cf:17:69:46:03:78:33:1f:00:2b:4b:18:7d:
99:33:60:6f:71:f8:ec:2f:c2:1b:81:f5:df:e2:cf:b4:b7:1b:
36:40:07:89:1d:92:6e:da:dc:b0:a5:db:82:d0:a9:21:df:4c:
7a:db:bc:13:12:db:d0:8d:7c:e9:33:aa:c6:4d:19:71:2b:2b:
e2:d6:31:0e:c0:09:69:bb:d5:d2:0e:11:69:0f:ce:49:13:49:
43:91:eb:a4:8f:cf:a0:18:22:f8:eb:d6:82:8f:fa:78:f9:8f:
98:a7:2f:af:2a:ea:e0:ca:40:d5:6b:41:f7:ea:8e:52:72:98:
04:fc:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:22:12 2026 by rpki-client