
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json)
Hash identifier: C0wJbnUTNL/VfBJpcMI27sRGkI7Swm1atZxrBz3/lFU=
Subject key identifier: E9:F9:07:DE:13:71:3E:B9:79:18:98:CB:6D:FB:5D:64:3C:7A:ED:3B
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0D3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
Manifest number: 0D0C
Signing time: Tue 12 May 2026 18:23:20 +0000
Manifest this update: Tue 12 May 2026 18:23:20 +0000
Manifest next update: Tue 19 May 2026 18:23:20 +0000
Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: gOwUlhwfHe2ZR2jBlcezI7qDGFTyE6IV3dyFpZBBXRI=)
2: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=)
3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: May 12 18:23:20 2026 GMT
Not After : May 19 18:23:20 2026 GMT
Subject: CN=6a037018-93a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:12:0e:84:72:3a:d7:f4:32:31:9b:e8:1b:
55:20:e9:f2:75:b7:49:9a:29:92:16:2f:6f:fd:c9:
0e:be:63:8c:4b:3c:f6:33:9a:f0:cc:31:9c:13:54:
4c:1e:00:d7:9c:6d:90:54:9a:7f:11:18:81:7c:4b:
21:ad:ef:b8:70:ea:50:3a:cd:20:1b:9d:09:c2:4c:
fa:5f:a0:a1:9b:78:50:86:e8:14:95:fd:98:26:af:
bc:5f:ce:60:cc:52:31:e1:12:2a:2a:fb:07:e8:4e:
92:e2:f1:69:c6:22:53:02:38:47:dc:3e:70:89:dd:
a2:fe:20:71:31:03:9c:56:e0:5f:95:91:ce:26:d2:
9e:99:5f:de:c3:9c:24:bf:4e:56:51:ed:7d:db:3e:
da:dd:93:d3:ce:84:0f:4f:ef:21:57:e3:e2:16:c0:
b9:fd:11:a0:6e:6d:f8:9c:88:65:99:24:13:a3:68:
d5:b4:81:61:66:59:60:6d:be:7d:be:0f:3f:73:98:
84:fe:95:78:d9:17:b9:d0:54:fd:a3:a7:35:7f:c5:
11:78:80:13:35:9b:d0:2a:2a:32:a0:d6:c2:8c:c0:
c0:76:ca:71:eb:30:0c:54:0c:61:9b:a8:8a:7c:4b:
9a:fd:43:83:38:23:cf:96:33:5c:02:ee:3a:84:e8:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:07:DE:13:71:3E:B9:79:18:98:CB:6D:FB:5D:64:3C:7A:ED:3B
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:80:eb:c6:14:0b:4c:9a:4c:ba:ba:02:3d:e1:16:c8:c7:a4:
df:45:14:4b:71:ee:8e:dc:d8:f6:ff:13:d8:23:d0:f1:f5:4b:
49:e4:88:ea:97:3e:f4:b8:ac:45:aa:d2:54:bf:0d:e9:9b:1d:
20:c8:52:c6:5f:d3:d8:66:d4:38:68:7e:7d:8c:4f:97:3e:24:
31:11:08:7b:34:33:28:bb:fe:94:90:ce:a9:a6:44:19:ca:90:
be:dd:ef:cc:4b:fb:d2:c0:4f:7e:c9:94:b4:ed:da:07:4a:ce:
b0:f0:95:19:41:ba:3f:bd:b4:19:aa:be:e1:82:74:7d:e7:9c:
fa:82:8e:22:d6:b1:fc:87:43:4c:11:e2:ae:bd:18:e2:65:cd:
38:b4:d4:d2:68:68:4b:36:62:96:63:28:db:53:63:2f:53:c1:
89:89:38:1a:20:3b:b1:01:f2:78:07:1a:42:05:18:17:64:b4:
18:73:f4:10:0a:af:ac:92:b5:0b:f6:83:c6:89:f5:6e:13:29:
78:fb:3b:f8:1f:00:ac:57:fb:de:75:4c:91:4f:07:0c:54:42:
73:8d:27:9a:5b:7e:90:70:7f:78:37:7d:c6:55:1e:44:82:f0:
e8:05:2f:af:5e:d4:17:df:2e:28:3e:71:ca:01:6e:8c:58:fb:
fc:1c:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:20 2026 by rpki-client