
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier: JRVYoUECz6MyptqMRvNn6saYpYn9ZW4v9GH4JVe3JsQ=
Subject key identifier: 56:DB:93:26:9B:3B:FE:84:DA:80:A8:B8:0B:C9:20:9B:67:8E:B5:AD
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 0950
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number: 0942
Signing time: Wed 20 May 2026 20:12:24 +0000
Manifest this update: Wed 20 May 2026 20:12:24 +0000
Manifest next update: Wed 27 May 2026 20:12:24 +0000
Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: cHqdwVwGGCkzFPpu7dMNwOFJvlq5sQEGqe8c0WztXTw=)
2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: Ueqo75gSThRYndYi3ug7/v3xrjnUfwH9KTMtXQ0mSlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Validity
Not Before: May 20 20:12:24 2026 GMT
Not After : May 27 20:12:24 2026 GMT
Subject: CN=6a0e15a8-eaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:70:6c:97:97:a9:3b:48:3e:60:e3:a7:9c:
84:a7:8a:ee:2b:0c:fd:37:48:11:cb:12:63:cd:35:
a2:3e:2d:18:77:63:33:a9:22:62:05:5e:58:53:e3:
da:0a:45:42:1c:4b:6a:85:8b:66:1b:a7:be:f2:61:
9c:93:12:da:f5:b1:98:8e:c5:f0:96:68:4d:9f:ff:
12:9a:30:7c:88:86:0f:a0:3d:76:82:f7:2d:bb:3c:
00:96:9c:b9:5c:97:d8:dc:ec:bc:da:ce:9f:33:8c:
20:a8:d3:4b:2a:cd:51:4e:f2:d0:8b:5b:8f:38:f8:
af:f8:02:67:ca:61:0e:23:19:f8:7a:ee:87:d6:4e:
03:cc:5f:8f:4c:96:57:af:0b:f1:ac:da:d3:d5:a2:
93:09:3d:db:50:ea:ae:f2:25:d0:59:19:ad:5d:5c:
cf:70:8d:c9:53:da:a3:58:bf:fc:ad:b8:32:4e:79:
36:f1:a0:bf:65:3e:84:3c:aa:68:a2:58:0f:02:93:
05:f9:07:24:04:d1:38:8e:f6:17:46:bd:fe:9e:7f:
c8:20:3a:9c:2a:a3:0c:b3:9f:97:29:a1:e8:64:f7:
d1:59:53:a8:87:ae:a7:c3:40:2b:2e:d1:ec:eb:ec:
fd:3f:a1:0d:de:00:0c:47:f4:6c:f0:21:58:fb:e5:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:93:26:9B:3B:FE:84:DA:80:A8:B8:0B:C9:20:9B:67:8E:B5:AD
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:1e:9a:d1:ce:76:99:7a:9c:c9:cc:73:04:19:97:19:ab:
0c:6b:32:cd:fa:3d:ce:e7:66:ca:9f:ad:1e:87:51:de:db:12:
93:63:cb:1b:11:20:e2:89:31:58:ec:1f:2d:5c:ab:9e:35:28:
33:bd:27:a9:a2:87:7f:85:7b:41:23:9f:1f:d8:9b:12:a3:e5:
e4:1b:63:79:6d:7e:93:c7:58:ec:03:28:73:c3:c0:de:bf:3c:
68:4b:92:88:37:6b:7b:f1:37:eb:a3:9a:a3:90:44:19:05:40:
c5:81:d4:0d:ec:13:7e:05:c3:ab:8b:59:23:75:8f:f5:3a:aa:
6b:3b:b6:33:a9:78:0c:db:d2:30:b2:90:8a:6c:b9:82:75:a5:
8a:65:76:e7:79:dd:d8:79:94:c7:3e:f0:b5:a6:f6:d8:44:93:
5d:96:87:56:a5:40:7b:ab:69:c9:57:2e:99:85:05:11:a8:54:
82:6d:ff:1f:25:60:2a:cc:80:45:5f:17:23:06:b6:ec:3d:f3:
c8:77:a3:3f:87:42:5d:07:b7:23:9b:d8:07:c7:77:db:4b:cd:
21:d3:e5:ed:9e:bf:4f:60:23:78:c8:ff:c0:3d:30:5b:96:51:
6b:0c:ef:53:02:70:9f:21:2c:21:20:cb:0f:6d:b8:1c:ee:d4:
7f:ac:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:00 2026 by rpki-client