
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json)
Hash identifier: NH+0IvEPt5DbV57oKjzS+sK8CKQRnJ7unyY8TE112Uo=
Subject key identifier: A9:06:32:AB:3A:A4:9A:62:71:BF:E4:60:79:B3:B6:6C:B3:4F:96:CD
Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
Manifest number: 0165
Signing time: Sat 17 Oct 2026 05:40:04 +0000
Manifest this update: Sat 17 Oct 2026 05:40:03 +0000
Manifest next update: Sat 24 Oct 2026 05:40:03 +0000
Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: 5Q5fBAtthm5c+SKle8QMR8/HlFIB8IAJCgWngDpNTO8=)
2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: R8HXpTKiYzOK8eX9NLZRgUVX35WrC+0ru/2MFWBu2jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl
rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Validity
Not Before: Oct 17 05:40:03 2026 GMT
Not After : Oct 24 05:40:03 2026 GMT
Subject: CN=6ad30a33-3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:64:56:25:9b:a5:dc:fc:c8:fc:6a:11:45:
8e:cb:4f:ac:92:a9:de:e2:8e:9f:8c:3e:fa:18:79:
76:56:43:b8:b4:fb:72:e3:2a:9e:dd:8f:20:8d:80:
17:10:cb:b0:f0:9c:5e:de:91:d3:87:a9:9d:c4:87:
7f:78:9e:44:56:47:75:f0:f9:99:d1:f0:14:04:41:
cf:5d:53:72:92:a3:44:dc:ae:74:c3:b4:6a:76:d8:
bc:f3:0b:21:00:d7:fd:22:cf:70:9f:cf:df:be:0a:
b3:12:a3:5e:b4:69:dd:b3:f9:e3:b1:39:b3:11:8c:
9f:e4:72:e4:9f:c8:0d:24:0a:da:6e:45:5a:df:65:
53:bc:53:d9:43:1a:bc:6a:7d:4f:fa:72:5d:0b:c1:
a7:37:84:34:aa:16:85:37:b1:0e:5a:b3:97:a2:cb:
38:30:d9:25:11:80:0c:99:c7:53:bc:63:dc:12:b6:
07:f1:71:4d:fd:12:4d:81:2b:fe:7e:86:9d:11:41:
62:49:99:29:c5:dc:b4:74:38:1c:17:43:28:49:74:
47:08:3a:57:ed:5c:21:8e:ae:46:36:cf:2b:67:86:
cf:5c:33:42:d5:fa:38:02:2a:17:2a:2c:43:d4:6f:
2c:34:24:ce:65:02:98:7b:16:f4:93:17:4c:f7:d1:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:32:AB:3A:A4:9A:62:71:BF:E4:60:79:B3:B6:6C:B3:4F:96:CD
X509v3 Authority Key Identifier:
keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:58:7d:28:90:0a:fe:08:aa:32:79:72:cf:80:d1:43:00:
92:c8:f4:6f:34:84:4b:5c:ef:47:a4:8e:08:1d:23:77:87:08:
21:ef:07:40:8d:c1:d8:44:69:13:3b:de:32:61:e6:56:1d:7e:
ba:5b:9c:ed:2e:3a:59:f6:63:fe:ab:14:77:6b:c8:82:0c:5a:
a9:0d:63:bf:77:c8:17:b4:50:95:81:8b:86:a5:1f:8d:57:59:
87:aa:9d:86:0a:88:60:a9:d1:30:14:93:8b:d2:1f:6d:a3:ee:
ac:bb:22:f0:64:f7:15:40:dd:d5:d8:d0:c6:fb:66:a7:fe:56:
d7:4a:e9:9c:e3:9e:94:e9:c9:3c:8e:06:34:ce:d4:79:d1:dc:
cf:49:e2:21:27:f2:aa:7a:ca:41:20:5f:20:28:00:01:aa:3e:
21:01:e2:86:2d:b0:95:1a:67:2e:47:ed:57:a5:40:79:c5:d6:
2b:fe:ff:0f:97:18:df:16:af:bc:d3:5b:ff:07:c7:78:17:89:
5b:c1:d0:62:51:be:27:42:ab:3d:d8:bf:3e:31:50:94:b4:1e:
0f:14:6d:6a:34:80:4e:9f:20:4b:5f:aa:08:6f:a0:5d:94:41:
ee:5a:54:a3:83:51:9f:df:ab:16:91:8a:41:c9:fe:84:b7:e3:
77:79:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:25:18 2026 by rpki-client