
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier: vu0OxbED/wbB2MBfjSAPMJlcCxyV4foHExD5yZF0opQ=
Subject key identifier: 3B:D7:16:BE:D9:EB:37:FB:04:9E:E6:15:FC:5F:36:F9:01:03:34:5B
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number: F3
Signing time: Thu 23 Jul 2026 08:03:55 +0000
Manifest this update: Thu 23 Jul 2026 08:03:54 +0000
Manifest next update: Thu 30 Jul 2026 08:03:54 +0000
Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: gsuLdt6DMhKM5rLFoo/9PTmZ5lQAzuREvuzbNODNDkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Validity
Not Before: Jul 23 08:03:54 2026 GMT
Not After : Jul 30 08:03:54 2026 GMT
Subject: CN=6a61caeb-ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:21:bb:37:fd:98:84:b2:f5:7b:24:e1:0e:
9f:c6:2a:41:02:6c:2e:48:82:8c:fa:59:f2:66:52:
fd:4a:d3:91:1e:75:1c:f8:5e:12:f3:4a:51:ed:2d:
03:57:0a:5b:38:2c:a2:0a:aa:9d:80:2e:51:12:91:
91:a5:63:01:b4:7d:5d:a1:2b:70:62:17:83:c7:cf:
cc:df:23:0d:03:f2:9c:e5:55:96:ed:63:94:b7:65:
98:45:48:50:8b:f0:c2:57:3f:a2:a6:7e:64:e9:dd:
24:d7:14:40:38:df:fb:a8:8e:d5:3e:d4:dd:08:2b:
88:51:c6:c5:7d:c3:7c:a2:20:9d:13:7a:f9:1a:77:
93:5c:9a:fe:24:d4:e0:73:43:f8:e0:15:8d:3f:ba:
e0:53:61:b1:96:b5:b3:99:b2:d2:9e:c1:72:87:8b:
0f:45:bf:93:82:62:e6:47:5d:7b:5e:d7:c8:38:e6:
02:e8:5c:1a:4a:5a:0c:ea:95:3c:e6:4f:38:57:6a:
1f:d3:af:b3:30:24:a5:17:d5:a6:bd:55:a3:a0:73:
ca:74:e1:21:e3:0b:19:90:51:6c:06:90:5e:ce:7e:
93:90:0f:f0:ca:9f:86:7b:7c:49:c4:32:31:14:13:
2e:a8:64:0b:b2:d4:7b:15:1f:09:e0:79:44:fa:1c:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:16:BE:D9:EB:37:FB:04:9E:E6:15:FC:5F:36:F9:01:03:34:5B
X509v3 Authority Key Identifier:
keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e1:7f:3f:ea:6e:3e:f4:c8:07:e0:b1:af:14:9c:27:b3:39:
39:be:22:c9:f0:76:fe:52:bc:58:09:8e:da:3d:da:ed:7c:ce:
fa:d3:d9:21:a9:79:4c:9c:86:22:fd:00:07:e5:a1:d2:6a:ad:
f5:e2:65:3f:54:74:b2:20:c1:16:c5:64:f7:76:3b:83:c5:71:
82:4d:81:08:8b:96:da:c6:5a:92:eb:06:ce:87:84:c0:46:b9:
55:6f:48:1c:09:14:91:3f:f1:e7:f0:63:32:c5:ab:c9:2d:ca:
39:fd:0d:bf:c7:35:b3:3f:f0:18:e1:dc:4d:7a:35:b7:73:b4:
90:40:36:f8:60:8d:6f:80:c5:09:0f:19:48:63:c2:4d:8a:e6:
88:d2:6e:1f:35:11:04:bb:26:72:a2:9b:0e:2c:10:73:fc:10:
f0:45:98:74:3e:ce:67:63:b1:04:49:44:77:e1:7a:55:a9:a3:
ee:88:96:3f:d1:16:fb:1e:d3:a0:38:28:ed:88:3e:1f:0e:2d:
bb:44:a6:7a:02:50:88:eb:b7:2b:eb:74:56:2f:fb:de:d2:64:
81:9a:96:c7:ad:e4:21:2a:a8:63:33:be:f9:62:5a:b5:92:47:
b0:ea:a6:01:90:f2:37:36:88:fc:e6:df:a0:3b:5d:1a:9c:3a:
32:76:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:37 2026 by rpki-client