
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier: lU0cDIXLmVhfldevMMAODkYxevfqa7ZVTARbmWFtGYY=
Subject key identifier: 16:C7:A0:33:66:C2:3C:E6:A0:CA:86:42:56:7A:5F:EB:C0:E3:DE:6E
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial: 03F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number: 03EC
Signing time: Thu 23 Jul 2026 01:24:26 +0000
Manifest this update: Thu 23 Jul 2026 01:24:26 +0000
Manifest next update: Thu 30 Jul 2026 01:24:26 +0000
Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: rGh92Z9To4Q9BNtcIUODf1SEdsziUuF597iIsrn9Ydo=)
2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: hAQl9H75BpKmN7Muu51VVyZ+oy7nwK9cCULcraz4/lY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1012 (0x3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Validity
Not Before: Jul 23 01:24:26 2026 GMT
Not After : Jul 30 01:24:26 2026 GMT
Subject: CN=6a616d4a-af46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:d2:77:51:da:f7:61:5c:b8:f9:e9:57:7d:
81:be:01:fb:9a:a0:44:aa:bd:72:87:36:a1:04:c3:
53:c6:51:91:77:32:12:5b:8f:71:c3:ae:64:77:25:
bc:3f:0a:64:f2:67:fe:96:4f:a2:77:ea:b0:a9:ee:
4f:c2:96:83:74:3b:2e:c9:c0:91:5d:76:fe:44:26:
80:6e:7f:44:17:ca:bf:53:1f:fe:bd:07:73:58:32:
6a:f0:2e:6b:01:4e:0a:44:89:bf:82:55:6d:38:12:
85:2e:68:bb:12:fd:85:24:fa:1f:4b:11:b1:84:cb:
2b:26:b4:84:d4:74:b6:ad:21:9c:db:47:a9:a7:63:
ea:62:30:23:2b:b1:89:66:fd:40:a2:3e:f3:03:57:
c7:98:32:97:20:e1:3d:7f:94:28:6d:71:76:9c:2f:
aa:ee:82:e4:2b:44:77:a1:e3:bc:aa:9b:80:60:c4:
f2:0d:d1:d5:76:74:1b:46:d0:50:d2:91:de:07:17:
17:49:70:72:48:67:2d:e7:c1:4f:6d:4c:1a:f0:9e:
5c:42:a5:2d:89:4b:e9:b1:a2:ee:94:0a:79:b0:1c:
f7:fa:fc:fd:66:ea:13:3f:49:27:e1:0c:9b:df:4b:
9f:5b:c1:b6:9e:22:e5:4d:b0:a9:01:df:ed:52:e2:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:A0:33:66:C2:3C:E6:A0:CA:86:42:56:7A:5F:EB:C0:E3:DE:6E
X509v3 Authority Key Identifier:
keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:e1:5c:94:8d:9a:b3:a2:9f:5d:7b:6d:c3:ad:53:4f:43:
49:1e:58:73:f3:dc:22:d0:42:30:3f:61:a8:09:17:f8:d2:57:
31:20:e2:3a:fb:1c:6e:e6:67:c8:5c:40:0b:3b:28:72:f1:cc:
44:48:92:de:21:ea:ab:cc:a6:6e:0d:a8:23:4a:73:d8:3e:e2:
4f:c5:fd:c0:28:cd:63:e6:80:e5:b8:89:7d:28:9b:c3:7b:c2:
66:d4:f0:e6:fc:af:f8:06:bc:dd:85:0d:dd:7b:6b:b2:b5:6e:
89:1d:35:9c:9a:be:eb:2a:d1:75:c7:24:7b:ca:40:6f:43:fa:
8e:37:14:31:e1:c6:c8:02:5c:f1:37:42:f7:62:1f:71:45:8b:
15:d4:b8:ed:9f:41:a5:e1:65:aa:0d:fe:6e:ee:ae:8f:0d:f1:
64:69:e4:c5:fa:a8:ff:26:71:32:c2:d6:a3:4c:7d:17:46:de:
a1:e6:05:61:bd:5f:04:e0:4f:aa:96:74:c5:32:99:c2:71:66:
5a:b5:78:a4:8b:fc:e0:9e:3e:0b:4d:76:99:df:71:bc:a1:74:
81:ba:1e:04:fc:38:98:fb:86:97:0f:a3:3e:45:9b:1a:a4:e7:
00:43:c4:72:70:8c:53:fa:81:44:58:a7:be:c4:10:d5:c8:79:
9b:dc:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:49 2026 by rpki-client