
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier: 2kMByNsvUNYowf/5wOlDe8suQwfJWHz3a/VKsMgEZbo=
Subject key identifier: 8B:08:BA:EE:4B:FC:2D:BB:67:D2:4F:F1:58:81:D2:7E:9B:8B:67:87
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1F2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number: 1F0E
Signing time: Fri 02 Oct 2026 16:09:11 +0000
Manifest this update: Fri 02 Oct 2026 16:09:10 +0000
Manifest next update: Fri 09 Oct 2026 16:09:10 +0000
Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: 1281zLeV+cCM4US4g7MImHKDgLMvXIllyXZH5e9OH/8=)
2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7983 (0x1f2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: Oct 2 16:09:10 2026 GMT
Not After : Oct 9 16:09:10 2026 GMT
Subject: CN=6abfd726-64ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:0e:f5:6e:dc:8f:40:be:91:64:5e:43:27:
26:b1:93:3b:53:d1:88:3c:9c:ec:9e:1e:5d:f5:85:
71:4c:46:70:da:8c:ad:47:1b:04:73:7b:59:c5:96:
9d:50:d9:9a:94:53:42:01:15:c8:db:9c:69:f5:ff:
75:24:71:20:30:28:a9:51:bb:4c:90:c4:54:b5:44:
b4:57:55:d2:d8:87:3c:cf:ed:c6:aa:34:9f:03:26:
17:39:bb:f7:32:cc:54:41:50:96:84:fa:1b:9d:92:
d7:7b:b6:4b:ea:9b:b5:d0:cc:f0:ae:de:1c:e9:39:
9e:a1:35:53:04:f8:dc:03:b1:04:af:7a:31:d0:04:
40:13:0f:1e:19:73:81:72:a8:d6:7b:08:09:01:29:
a5:ff:66:a8:e3:5a:83:1f:e0:0d:cf:55:b8:09:90:
3a:22:ef:2a:05:1a:64:9f:f2:b7:b5:ae:37:cd:ed:
55:ff:c3:a5:9b:23:c6:7b:3b:86:75:45:72:00:31:
5d:e7:72:95:cf:5a:1e:29:3e:1f:83:f5:b9:ca:1b:
0a:d5:aa:c8:56:bb:16:eb:6d:9d:71:d5:9e:90:33:
38:e0:f7:e4:70:2b:18:7a:d8:8a:3b:85:3e:cf:89:
60:0a:25:b4:a9:3c:b8:8f:54:54:d9:01:71:44:7d:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:BA:EE:4B:FC:2D:BB:67:D2:4F:F1:58:81:D2:7E:9B:8B:67:87
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:8c:ca:28:80:dc:5b:d8:2f:8d:81:1f:d7:64:1e:22:b1:
d5:b7:b3:18:24:0d:36:88:5d:5f:22:f8:af:30:08:76:14:08:
a8:32:b0:35:ee:ea:a4:d1:8f:75:6e:1d:27:52:ee:05:d3:7a:
ee:45:53:d0:b9:52:9a:be:ea:2e:30:9f:c9:d3:0a:6e:0a:f6:
89:4b:4e:80:6d:95:bd:58:44:af:e4:4a:96:bb:54:33:b2:45:
4a:48:71:0e:3f:5d:19:78:4b:21:81:9b:c9:52:21:88:be:31:
a7:91:89:87:ff:99:2d:de:d9:08:66:f6:ea:0c:f9:ed:fa:21:
cf:8f:6e:8d:1d:9d:50:0c:df:90:4e:a3:b7:fa:2d:1c:d5:7f:
39:52:c1:22:f8:a0:8c:47:c9:0e:b1:48:23:1c:1b:ff:d9:52:
f3:ad:39:19:07:6f:c3:88:47:c4:27:12:f7:b7:35:83:40:14:
d8:77:80:84:05:53:68:06:28:5c:a9:4b:6d:b5:8a:00:33:07:
3f:30:9f:0a:b2:9f:8a:0d:ce:b0:c6:43:6c:98:60:42:b8:df:
4c:ea:89:1f:36:01:a4:9d:33:47:71:da:43:4a:78:14:15:4f:
b2:e9:64:5e:38:0e:e0:96:69:3b:b8:a6:3c:b2:3a:bc:fd:4e:
78:ba:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:55 2026 by rpki-client