
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File: PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier: FfJYXsFh4U8BQ0MVZtgHfdYlnsyJCs0NpTLjrTjRcUc=
Subject key identifier: B5:96:4B:E3:C2:D9:2C:05:DC:E6:54:30:F1:A7:40:3E:97:81:55:18
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number: 23
Signing time: Fri 27 Mar 2026 17:49:36 +0000
Manifest this update: Fri 27 Mar 2026 17:49:35 +0000
Manifest next update: Fri 03 Apr 2026 17:49:35 +0000
Files and hashes: 1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: EVpuI9naXERS7o4t0trn424nycnDINI5qs8R0OMt2gc=)
2: 50DA994A29D411F1916B319D97833773.roa (hash: gmHEru1uu8y3YOU5nRC5sPjqCKvPX8MQZIxdZyPZ8m8=)
3: 040DC78829EB11F18E7F1692A0833773.roa (hash: z6xCqH756kkIX8f2AVzrhijdwDcnR/vVkM2dlCG3KSM=)
4: 31EC6B8229D211F1942EF99297833773.roa (hash: 23E29PzVg2WvOU9TXjshaZZFo5X/Z3KW9b5qNM8Z/x4=)
5: A194680629DA11F1A7234B1B9B833773.roa (hash: m+d8rKrNikI8my7pp1HxKiLAoYdPJmoBfyQi7R0kHN4=)
6: E7491B5C29D111F18231948697833773.roa (hash: BFFEi9ufTmCq18ajvoBLUoVzM2eGlPTiY5+08StrtsA=)
7: 3806439029D111F18571726A97833773.roa (hash: vJfFiKVcht0hhV43KX2YNwRRC3QJu1SPSzD28SejiPg=)
8: 47BFFFE029E711F18BEDC2D19E833773.roa (hash: AfMKB1U/fIo3GA9PjZ7vSGqHXA11goYnrsLqvY8NX+8=)
9: 805DF10C29D011F19183AF4C97833773.roa (hash: 6WyGc/D8mHPYUOUx4feYwfW6rBjHV7GI2eIistr7S5g=)
10: 77B9A22029EA11F19F51207DA0833773.roa (hash: 9jpl4GiJZA6/0LoSTIqmKoTnUrIpsak5Kk339CmquSQ=)
11: 37885C3229D111F18571726A97833773.roa (hash: P7JHdQ2pRj9e0fvIPzqhGuAfmL1SvK2GbF2hyiyOIJ0=)
12: 85750E9429B911F1A805AEF28F833773.roa (hash: auPSTIw5f+LjJofnwKeEm6Ok//XK0NnQHOUksBcly2I=)
13: 769A6D0C29EA11F19F51207DA0833773.roa (hash: IiKFwXdYswDt2vzHwotjHu8ALe+p+uMWjil/k9IBQIg=)
14: 9EDDEBC029D311F184F1669A97833773.roa (hash: ZwI19PPZAFVOy0THPHh7Bj9dofGXcFYZKYKf+dYn8Lk=)
15: 666C21CA29C011F1A3F09FCF91833773.roa (hash: R/g3k5D9oKLbcYrSfdUWVh7n1eRtnbw0+zncu1mfi20=)
16: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: bvLxVDCXvbLP68bPFEP8Bi+iW5eH1xSilo34BKnNRMs=)
17: 771BED3C29EA11F19F51207DA0833773.roa (hash: w/jJyAGgr3Tj7qFO+qb/DsPtYZW/iNhj8gsbe5eWoj0=)
18: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: XToOxO04S9QiG7w3VXjF3J9J7gTSi3hPlDUo9iDClx4=)
19: 2447645A29D711F19B6521AE99833773.roa (hash: bTkwjW+MQMWhkNVOvjMadZL5PfP34DVI/cxNUOw2IwM=)
20: 670FF7B429C011F1A3F09FCF91833773.roa (hash: xUP7XSpc4JFNaGqOv8kH1G9acfZb1iKUpLORTtA7Q6c=)
21: 2E2443CE29CF11F1ADED11F996833773.roa (hash: /YTo9EB/J0ugF2nbrB/ty07yqEgw/RHL5BSrl8zCBiQ=)
22: B2EA4BAA29EB11F1A56364AEA0833773.roa (hash: SFh1ah0wSEcelj/ZujwegnhnJcy7Jkl3pHyETC3qbPI=)
23: B378944629EB11F1A56364AEA0833773.roa (hash: FWRF2CGF/AE1Ig9kYHW81rC361IQXXVUx54ZpsddgpY=)
24: 3218652829E811F18CA8F3909F833773.roa (hash: nORgV5f8vbq/wvRFwsRo4Kfy6G6vV8hYtZS1XQwh+EI=)
25: 23C5258A29D711F19B6521AE99833773.roa (hash: vLiP86TmWiL86c6JxYkSHz4JTIIMh3/D2cE0XI4dGmI=)
26: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: XEZVL7Alh83OFsk2zI0eWKkX8Eqh/6+6slghZIlo1CU=)
27: 24DB124029D711F19B6521AE99833773.roa (hash: L9YX4gv3DsNtGEZMP/J2sxI8a+81Ov4a8RF/MY/5byg=)
28: 9F6611D029D311F184F1669A97833773.roa (hash: sU+syfRyHdx8cIMh/58Efro5AeJotud3a9u84LAj0Uo=)
29: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: m35r5GwPvKh9akKr8JCnjaTv1XElnieMLAOq4dk9R0Q=)
30: E6C0E7E629D111F18231948697833773.roa (hash: 2i2D4Yn4ye2PrDbqlGA5eFxQ6MY5YHkU4EJWvkgJNb8=)
31: 32A3B5E229E811F18CA8F3909F833773.roa (hash: oZR2FpzGAe6Sy8Hoz7BhQ2SDTppygN2h+ztgxLfV0mE=)
32: A03EA96629DB11F1BFD4871E9B833773.roa (hash: Xpl9lX2NW8aiIn124xTKQqzkWkQLBCN+lopCtcTEhrI=)
33: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: tAYt6F3jPR3H15N2TctWPUFlsi7FU0ZCEmkgEQbxSOs=)
34: 7843AE0229EA11F19F51207DA0833773.roa (hash: s0N7ocsVPT+wkbxRYsrIVJaKpSpOfD4ZijZOHIsz34o=)
35: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: 8UB55J5Yp3o/0cAB1VjFPqBR2V3U93dx8qOKBxRHp6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 17:49:35 2026 GMT
Not After : Apr 3 17:49:35 2026 GMT
Subject: CN=69c6c330-44e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:e9:d8:85:34:e0:da:a7:8e:54:71:ec:ea:
39:47:7a:b7:75:f9:4e:7e:94:e6:05:71:46:14:d5:
41:d7:6f:ba:cd:e2:4d:f3:10:cd:83:30:2d:c9:a1:
80:0a:af:78:1f:c8:1e:ed:1a:84:53:db:81:a4:d2:
a9:1b:f4:51:61:a9:e3:57:4c:b3:f0:30:33:f4:7c:
3e:81:2a:88:73:b4:fe:06:b1:ad:32:a6:32:95:a8:
6c:e6:53:b0:fc:d0:70:34:93:b7:ee:22:b9:4c:90:
7b:19:05:e2:97:27:26:2e:ba:fa:1d:c4:b9:4a:7f:
4e:33:b9:59:7c:a2:7d:23:8f:00:f1:d2:2b:5c:f5:
76:04:d1:37:73:e4:62:69:98:20:31:1d:78:3d:0b:
9f:48:99:a9:e1:5d:5d:38:a6:35:ae:df:70:46:a5:
7e:0c:be:65:2e:9d:e0:c7:06:ec:b8:67:c5:00:b1:
82:14:21:19:a7:71:82:db:b3:4c:20:b4:fa:63:d2:
b1:f1:7e:e9:a0:de:ff:99:4a:17:0e:53:ee:f1:66:
8d:0a:e0:00:cd:5b:6c:2d:d1:a4:e5:a9:75:f8:27:
27:e8:49:24:58:48:0b:99:03:a6:90:b2:7c:c7:93:
91:e7:c8:1f:ea:68:27:cd:5e:a9:3c:63:d1:20:0b:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:4B:E3:C2:D9:2C:05:DC:E6:54:30:F1:A7:40:3E:97:81:55:18
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:9c:3d:00:01:46:cd:7f:93:1a:1e:7a:b5:97:3c:7d:24:1b:
33:a3:87:28:0f:a2:21:07:ab:c3:a2:4c:18:55:3e:b1:14:c2:
c6:5b:67:c4:39:14:16:6c:a5:65:02:4a:1b:94:43:1d:6e:02:
e9:ee:3e:53:9a:ee:4b:a2:49:23:6a:8e:3e:df:57:ea:c1:70:
d0:eb:7e:33:db:af:e7:6d:56:d4:cb:42:08:b0:54:32:2f:d8:
05:0c:aa:a4:a7:22:77:da:d5:44:c1:9e:35:58:42:8a:a9:19:
2f:4d:6d:aa:36:b1:bd:a0:94:cd:25:aa:0e:b1:61:8c:96:ca:
ec:41:9e:c4:22:a5:00:7a:7d:da:14:aa:7b:fd:b6:7a:07:f6:
1d:3a:5b:8f:ee:8a:71:c9:0b:bc:2d:6f:c3:b0:ff:61:e3:d9:
5b:c8:a7:b5:33:46:d2:9f:d4:b3:6d:7e:27:b8:ba:b9:47:0a:
3c:56:9f:fb:cd:74:ef:c6:f3:5e:57:c5:6a:90:ab:dc:b4:2d:
c2:9f:16:fb:fd:72:2b:7b:b5:0a:e4:32:83:44:dd:90:63:b3:
4f:f5:fd:a0:de:7b:dc:59:42:31:4b:09:ca:8c:b5:8c:44:33:
c4:ed:77:31:e1:dc:2b:8f:c1:5f:f9:54:c6:ee:b9:e3:88:2d:
14:74:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:34:48 2026 by rpki-client