
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier: H+WaHgXCxIJ158S0FnpywZjreoCxT2Ykb3QNbIWpYcw=
Subject key identifier: 2E:3B:CE:2D:9C:E1:CD:FA:2B:71:83:4E:95:EC:DD:C9:7B:E4:0C:72
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number: BC
Signing time: Sun 05 Apr 2026 06:22:16 +0000
Manifest this update: Sun 05 Apr 2026 06:22:15 +0000
Manifest next update: Sun 12 Apr 2026 06:22:15 +0000
Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: ciUBXbTxgqsmfZX9NmcNn27uXUNNmioUVDzgqBEyJwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Validity
Not Before: Apr 5 06:22:15 2026 GMT
Not After : Apr 12 06:22:15 2026 GMT
Subject: CN=69d1ff97-8008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:9c:c1:64:33:56:c9:75:db:b9:94:10:ff:
39:4b:1e:30:de:2f:f8:a2:4b:98:2a:f8:5e:41:01:
5b:ec:4a:ac:ce:9f:63:9e:6b:1b:9d:83:c5:3f:ec:
00:d5:a0:f6:57:6c:3d:d4:d8:eb:88:1a:e7:42:cb:
7d:cd:66:34:ed:b4:88:43:f1:72:46:21:21:c3:63:
96:72:b2:ae:79:4e:ca:d4:af:e5:16:24:41:f5:02:
2c:48:c7:f1:28:4e:b8:73:08:9e:fd:eb:7c:26:80:
06:d3:7a:02:26:db:ed:fd:e4:6e:9f:21:5e:4c:45:
00:e3:dc:ad:d9:ef:76:e7:23:0c:81:40:c8:d3:07:
82:6c:f5:dc:95:12:5c:b2:ff:a7:97:7b:86:3b:e7:
43:26:40:d5:92:31:09:c2:ce:54:76:a3:c1:cd:9a:
68:e7:bf:b7:2b:9b:1a:ca:27:d1:68:1c:cc:b8:b7:
d2:bc:7c:23:ca:2b:a8:5f:ee:4d:ae:7f:bf:48:ac:
ee:f4:6f:08:c1:ab:bf:af:06:d5:06:a5:bb:3d:3f:
2b:1d:1c:26:df:56:28:11:c0:59:0f:0c:72:2d:2b:
31:94:3d:84:9d:8a:54:98:97:3d:0e:23:22:78:e5:
5b:c5:47:ce:a6:4c:ea:02:a5:af:fd:51:fb:48:30:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:CE:2D:9C:E1:CD:FA:2B:71:83:4E:95:EC:DD:C9:7B:E4:0C:72
X509v3 Authority Key Identifier:
keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:b1:9b:47:fc:dc:96:52:af:3b:78:76:2b:13:50:49:ec:c8:
40:e5:7c:99:14:a5:d7:74:bb:90:31:bb:03:16:06:ef:c0:c4:
e7:22:c2:f8:e0:1b:34:d1:a2:8a:5f:5a:30:f6:b3:1e:fa:5a:
22:c6:ef:32:06:fe:8b:4b:59:ac:ba:d8:a0:ff:83:1d:e8:d6:
dd:e3:3a:79:c5:25:04:de:a3:06:7c:b3:54:2f:6b:c8:8e:69:
d2:e3:9f:91:30:53:5c:3d:f4:29:e2:a6:fe:d4:f8:62:8f:6c:
d0:96:d4:d1:3e:f7:7b:14:5f:11:1a:c9:25:c6:e9:a4:6a:1f:
21:c1:b9:f9:3d:c0:9f:5a:a2:d3:89:ee:12:4d:d3:af:0d:d8:
af:fc:b7:12:01:83:c8:be:e4:98:8a:c5:13:15:30:bb:31:7f:
6b:41:06:1d:43:01:7c:96:eb:1c:93:ba:ca:ae:fa:1b:a7:1a:
33:93:c9:a0:58:66:2f:c1:09:6b:f5:7c:96:c9:90:37:a1:6b:
68:53:89:32:3c:73:aa:ad:94:04:6b:f5:ac:08:55:5d:ad:0d:
96:a2:c5:0e:05:04:4b:aa:b7:27:9f:98:8d:59:90:42:5b:2b:
5b:47:df:f8:4c:8d:a1:ea:fe:23:6b:97:25:42:62:86:e2:f6:
0a:46:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client