
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json)
Hash identifier: jB4q8cBtiIe5hKfLKxst+vqBlQlkCNrvTA4VG4o92pA=
Subject key identifier: 45:1A:2F:E8:D9:8B:16:80:CC:CF:DD:20:B4:05:25:CC:86:9F:06:59
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0D62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
Manifest number: 0D30
Signing time: Wed 22 Jul 2026 18:33:04 +0000
Manifest this update: Wed 22 Jul 2026 18:33:03 +0000
Manifest next update: Wed 29 Jul 2026 18:33:03 +0000
Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: 4mxChHGDPcJy1ihNcLsUp0kq4YZuzuQJbOeqO74KX2g=)
2: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=)
3: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Jul 22 18:33:03 2026 GMT
Not After : Jul 29 18:33:03 2026 GMT
Subject: CN=6a610ce0-8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:84:05:8c:2c:21:01:9b:8f:fa:77:e7:9a:
fd:46:f9:63:27:97:6e:8b:58:33:11:c9:17:7a:b9:
e0:8c:15:ab:6d:09:9a:46:6c:5c:9e:5b:03:43:a6:
14:29:1d:5d:65:21:8c:a7:1c:f7:9f:26:a0:f0:fe:
96:3c:5e:6c:c1:43:31:ab:91:54:90:ce:66:c2:50:
27:bd:af:7b:6f:cc:ca:47:6f:76:02:e9:da:d2:87:
dc:9a:23:6c:9b:bb:a8:55:9e:0c:80:06:48:0d:32:
bd:be:5d:1c:c3:41:61:1e:b3:50:8d:c8:21:e6:26:
cd:ea:fd:a1:0c:a8:15:9a:2b:05:bf:73:94:a2:91:
0f:8d:69:25:42:7f:a1:75:06:0e:cf:03:87:47:df:
39:af:6a:35:f7:b5:f3:3e:76:63:24:f8:d3:73:5f:
ac:19:cd:34:62:8f:fd:36:22:ce:a3:0f:55:db:24:
37:ea:4c:97:09:e0:4d:c7:24:69:7f:bd:f8:83:9e:
ee:d0:de:15:a6:cd:4a:e8:29:3d:c0:34:fb:da:cd:
c9:26:b4:1c:bb:5c:42:fa:09:65:2f:9b:95:55:3f:
34:63:63:45:fd:2f:ba:c2:8b:62:40:fa:95:d6:2e:
5f:e9:64:57:9e:85:ab:97:4b:89:2b:94:38:98:aa:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1A:2F:E8:D9:8B:16:80:CC:CF:DD:20:B4:05:25:CC:86:9F:06:59
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:b4:2a:74:17:b7:88:ac:4a:90:96:49:34:ad:84:9f:19:
db:f4:18:86:b6:05:71:8a:3d:25:fa:d0:51:64:b7:77:b5:fe:
b0:48:d6:fc:1d:54:59:f7:ee:35:69:0a:26:65:5f:71:0d:81:
df:4b:3b:68:53:8d:b8:44:72:52:bc:28:70:a4:4e:d2:57:1b:
b3:02:21:65:92:00:03:61:83:dd:f1:02:e5:b2:0f:66:8c:e6:
0a:af:67:61:0d:b6:25:2d:ea:84:1b:95:21:2b:f6:21:ec:10:
c0:88:2a:84:83:66:cb:e5:33:ce:28:d5:27:44:5f:18:5e:59:
49:61:c5:23:7e:40:6f:5d:42:5f:41:39:b1:56:53:57:dd:a1:
1f:29:22:e0:01:1d:7d:19:64:70:3e:20:58:1e:bd:db:31:af:
9e:af:ef:e9:12:d0:00:7e:57:db:37:8a:9e:1b:9d:42:49:ad:
ba:7b:e8:2f:c1:41:22:b6:67:70:13:c3:a7:9d:09:7b:a6:59:
09:d6:16:be:cf:38:79:6b:47:a0:7d:2e:1c:bc:6e:d5:e4:44:
ad:38:b2:83:c0:ff:1a:f6:52:7a:0d:fd:d4:00:4f:6c:5c:eb:
b1:13:06:c2:28:8b:ba:86:cc:1d:d7:a0:8e:ce:7f:f3:a6:bb:
24:8d:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:03 2026 by rpki-client