
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier: y2016aB5+iKaQWnSF66tVRjJeCuRTf3wVJrNVNFvbEA=
Subject key identifier: 80:2E:D9:E2:04:F0:54:FF:08:9F:EC:FF:DE:E8:04:A6:CB:33:BD:23
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1EE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number: 1EC5
Signing time: Tue 12 May 2026 16:03:52 +0000
Manifest this update: Tue 12 May 2026 16:03:51 +0000
Manifest next update: Tue 19 May 2026 16:03:51 +0000
Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: 03mUGdmN6++QyUqXsfct77wtXWlfBednXto5vp09kJo=)
2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7910 (0x1ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: May 12 16:03:51 2026 GMT
Not After : May 19 16:03:51 2026 GMT
Subject: CN=6a034f68-f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:45:b0:c1:bc:0f:b5:b9:f7:13:1c:0c:e4:
b4:84:5d:c0:21:be:68:b4:2c:50:e4:b1:2f:9b:03:
1a:17:19:16:25:f5:5b:66:09:12:e5:79:df:e1:96:
10:73:af:09:61:d1:57:37:a2:3c:ca:29:bc:40:b1:
f5:7f:d7:1f:2a:63:0e:cc:b7:1e:e9:28:07:64:e6:
cd:31:b2:f3:aa:2d:ee:a1:c6:d0:87:c7:2c:3c:11:
4a:2d:c2:9a:d4:43:39:aa:75:7c:9e:b0:69:26:2f:
52:ce:12:75:43:83:9a:19:f7:86:9b:64:b9:07:53:
66:29:36:f4:d8:d7:d5:85:2c:b5:73:b8:41:4e:a0:
24:75:4c:ae:9f:b5:5a:18:d4:2c:67:f0:73:50:39:
8f:1c:d8:df:a1:b2:b9:b8:fe:7b:42:cb:ef:ba:20:
95:20:9a:44:c4:bf:24:b5:d5:c4:8c:17:3a:69:a3:
f4:2d:b7:72:22:d8:aa:12:77:02:74:cb:ad:56:b4:
0b:a5:1b:ac:b0:52:43:95:16:e2:d9:be:52:47:7a:
f4:9d:46:b8:83:0f:89:99:e6:3c:69:3b:4a:5c:d7:
13:ec:71:fb:47:60:09:c2:72:92:b4:fa:d8:5a:7a:
36:21:db:a2:37:42:3d:61:23:3d:bc:aa:d6:01:f9:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:D9:E2:04:F0:54:FF:08:9F:EC:FF:DE:E8:04:A6:CB:33:BD:23
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:29:9c:d3:d0:6e:6e:a8:12:c0:2c:4f:99:07:f8:69:0f:
f3:ce:8f:2f:4c:ef:ed:0c:ac:3c:5f:75:e5:4f:d1:bd:ae:01:
45:4c:04:42:70:f4:60:28:65:34:68:67:7a:c4:7b:a4:e8:b9:
71:90:c9:ee:b2:5e:dc:1a:eb:54:3f:88:08:61:20:1c:55:7c:
a0:cc:9f:83:62:06:66:fa:28:d3:56:4d:8c:57:b2:5a:b9:63:
13:82:8f:5f:44:de:0b:74:d3:e8:cf:8d:6d:61:0b:1d:50:4b:
7c:7c:23:b0:20:f0:7c:5e:62:25:62:d3:11:3a:33:6a:74:c0:
80:38:79:c5:e2:e3:bc:11:92:95:5c:6e:f4:43:6a:f6:74:a8:
91:28:1a:a4:a6:62:25:a2:6e:a5:53:ba:c7:d2:59:3e:12:5d:
19:87:b1:e5:fc:ff:8c:ad:1d:22:98:50:59:a6:68:91:5f:dc:
bb:54:6b:60:af:5d:21:ed:77:49:88:c3:ec:85:12:4d:86:bd:
fa:f1:62:8d:43:59:57:ed:5c:bc:3f:50:fb:d8:53:97:61:7d:
34:d6:a9:22:8f:17:8c:99:cb:26:68:38:14:fe:06:ea:7a:72:
77:36:6a:17:f3:55:e5:2e:b2:6e:9c:c9:fd:20:37:49:a2:57:
6f:d7:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:58 2026 by rpki-client