
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: 5tu4+wcFxgPEtYNTPKkAmg+yoywANtRmshgFqkD72Bw=
Subject key identifier: EA:F1:F4:4B:DC:4A:3A:8C:42:EC:13:9D:E1:45:50:41:A9:DD:BC:81
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 05AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 05AC
Signing time: Mon 28 Sep 2026 23:15:53 +0000
Manifest this update: Mon 28 Sep 2026 23:15:52 +0000
Manifest next update: Mon 05 Oct 2026 23:15:52 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: 4kBX9qWS8nyx0wsR7pVqeYciHhzin7FIhlK4hKyquQQ=)
2: 026757CA3E2A11F19724AD26B6833773.roa (hash: yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Validity
Not Before: Sep 28 23:15:52 2026 GMT
Not After : Oct 5 23:15:52 2026 GMT
Subject: CN=6abaf529-85bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:74:03:7a:21:e0:38:d9:46:20:c2:ef:bf:
ad:c2:25:cb:d8:32:5d:60:47:54:ba:b0:ff:ae:0c:
80:12:50:bb:7e:0d:bd:5e:33:38:6a:87:0d:f1:21:
16:94:91:20:f5:76:80:60:b7:69:bc:4b:ca:08:29:
7c:ef:be:85:b0:ec:73:fd:b0:df:3b:25:14:1e:c5:
d7:3f:c1:a8:6d:45:74:64:ec:5c:60:9d:a5:1b:ff:
ec:33:52:c4:81:d9:37:0c:c5:57:ab:5f:fc:2c:9b:
4d:0b:cd:52:98:a2:51:43:62:1e:ab:37:b2:2b:d5:
11:fc:db:e3:ae:2d:6c:32:d9:b1:23:6a:50:58:45:
b7:b2:11:cd:7b:8f:23:0a:3b:b0:0b:44:fe:eb:28:
dc:7d:36:7a:d7:91:60:bf:b9:bd:53:fd:fc:8c:21:
f3:4c:0b:a2:a7:18:15:09:06:ad:77:8b:5c:6c:66:
eb:03:ad:d4:7d:eb:b2:5e:cd:8e:b7:4f:fe:f1:df:
ed:42:46:e8:d4:95:96:0a:0d:eb:fe:3c:69:ce:bf:
76:04:f1:f7:1a:b4:7a:9d:49:6e:ab:d0:6a:47:7a:
cb:2e:48:ee:c6:4b:86:9c:17:98:36:91:53:c8:a3:
25:ac:72:ca:fc:90:d1:2c:f7:ec:d8:de:14:22:f9:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:F4:4B:DC:4A:3A:8C:42:EC:13:9D:E1:45:50:41:A9:DD:BC:81
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:20:c7:2e:2f:52:d0:de:41:de:66:9c:9a:3a:2e:bf:66:
8f:20:87:02:da:fa:29:c4:97:17:51:e6:d4:bb:b8:b8:b4:81:
e1:db:90:3d:42:65:c7:5b:f4:e0:2b:50:8d:ea:d2:f2:c6:d7:
f2:bd:aa:14:eb:09:86:90:67:4f:b7:35:9d:8c:61:b6:80:63:
e2:47:62:ef:cf:94:bb:3e:20:8b:7a:34:91:ee:e3:a9:16:5c:
10:c3:a8:98:32:0d:ad:04:59:d6:82:4a:be:8c:2b:e8:df:0c:
86:64:73:c2:fa:ba:ec:6f:8b:4a:2e:9b:de:c2:1c:fa:6a:1a:
19:c4:dc:a1:2c:05:de:c6:08:4a:c1:86:cc:57:f2:43:ec:3d:
53:ee:80:17:8e:4b:93:f3:99:f7:6b:95:26:d5:72:c3:81:ae:
9c:2a:0d:86:31:9e:cd:d2:43:7b:32:be:27:c8:8b:03:d0:5b:
e6:14:24:92:1b:a3:bb:ae:c5:af:64:68:4f:82:0c:77:b3:76:
6f:83:c9:19:52:98:3e:fd:59:79:10:fb:5d:dd:3e:aa:51:0f:
0c:8e:fd:26:9d:38:ab:30:cc:0f:cc:c6:a6:7a:80:99:31:4c:
2c:9c:82:06:d6:69:51:7a:c9:c1:36:07:22:ff:34:12:97:c3:
0f:93:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:58:37 2026 by rpki-client