
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier: /nVTUXkGTXs7GeUHTQmQkXq9zDOMAIHKxEDuuP6rnxQ=
Subject key identifier: CD:A1:60:C2:CF:37:46:98:DD:AB:E8:AE:81:29:56:5C:16:F2:37:14
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial: 0F18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number: 0F0D
Signing time: Wed 22 Jul 2026 17:47:04 +0000
Manifest this update: Wed 22 Jul 2026 17:47:03 +0000
Manifest next update: Wed 29 Jul 2026 17:47:03 +0000
Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: qZHL8rAX1rHGODNTvItHj+qffdVcdqQA3F9TQDmLzwo=)
2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Validity
Not Before: Jul 22 17:47:03 2026 GMT
Not After : Jul 29 17:47:03 2026 GMT
Subject: CN=6a610218-67f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:cc:0e:9e:fc:79:2a:4d:08:e2:1c:6e:a4:
d5:06:b0:b7:89:2b:02:24:bc:78:30:9f:6f:9c:ff:
47:58:b5:78:bb:15:28:e8:d0:dd:0c:c0:ff:1a:a8:
f7:bb:82:5e:55:bf:07:d9:e5:62:f7:f0:10:2b:74:
74:12:6f:e5:e7:ff:97:f4:d2:2e:f7:ce:b6:22:97:
18:82:13:1a:28:6e:3b:4b:8c:85:57:9d:33:09:8a:
f3:a2:e5:cb:f5:de:21:65:78:3a:f6:6c:c4:42:83:
93:b4:43:a2:cd:ce:c7:42:82:6a:c0:ec:c7:49:38:
97:db:02:e5:44:d8:53:d6:62:bb:cb:64:f6:bc:15:
2a:a5:a7:72:86:0b:7c:d2:35:7d:59:a8:7d:86:73:
02:56:72:f0:a3:0d:cf:dd:1f:31:16:2c:34:64:ae:
2a:f5:84:ed:e2:9c:8d:c5:04:8c:62:b0:55:e4:d4:
e8:89:01:e3:b7:a3:14:e2:5b:d1:93:77:8b:73:8b:
72:d0:2a:e8:78:a0:c2:ec:8a:70:6a:f3:17:42:83:
eb:14:ae:f5:04:74:2a:31:3f:e9:b2:bf:ba:c6:f0:
1c:9a:0b:ce:99:72:32:33:16:b1:ae:05:5a:80:69:
d6:78:c0:28:9e:6c:bb:cf:ca:78:52:21:19:eb:5d:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:60:C2:CF:37:46:98:DD:AB:E8:AE:81:29:56:5C:16:F2:37:14
X509v3 Authority Key Identifier:
keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:75:7f:30:f4:1b:02:0f:10:c8:66:20:d2:cc:14:ba:a4:f3:
a5:99:39:c1:1c:14:91:80:fa:d9:d3:ed:1e:f8:31:8b:fc:f0:
d4:cc:d1:2d:b7:a8:3f:b3:8e:21:0a:fc:58:e7:5d:42:f0:7d:
fa:0a:8e:10:a6:f6:3d:43:2b:1b:78:39:ef:30:20:00:c7:49:
e3:98:97:40:ee:2e:17:43:e4:1f:8d:6e:c7:f5:85:d7:53:ff:
99:3b:97:75:aa:33:0f:bb:d0:41:36:71:7e:c0:97:40:90:4c:
b9:98:2d:c6:dd:88:7f:e8:44:61:69:9d:f9:b9:bb:76:3b:11:
6e:8e:0d:51:11:43:fd:61:97:75:21:d4:dd:6b:83:64:24:5c:
f0:50:55:e8:21:ff:62:b6:13:e0:d8:bb:66:74:db:7e:ba:f0:
67:cd:c2:32:9d:e5:2f:fd:21:7b:1a:fa:51:6f:13:79:44:bc:
9d:55:98:14:ae:88:69:c2:21:b5:98:81:2c:bc:d6:03:23:0e:
c6:6a:08:a2:d0:53:33:88:93:a1:67:89:ef:47:77:14:e1:bb:
31:1c:64:9f:f6:96:9d:32:a6:6d:03:fd:10:df:1d:ab:28:80:
2b:da:c2:93:62:a2:c8:a7:18:ab:01:ac:e1:8e:a7:be:30:87:
4e:2c:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:09 2026 by rpki-client