
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier: k+ySpTa+WHWoL88T1zsTiTNRvBaYciKcxoFekseH7/Q=
Subject key identifier: F2:14:6C:71:4E:C8:81:7D:82:E6:B9:E4:3A:54:E1:63:BA:B9:41:6E
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number: 027C
Signing time: Mon 05 Oct 2026 02:14:12 +0000
Manifest this update: Mon 05 Oct 2026 02:14:12 +0000
Manifest next update: Mon 12 Oct 2026 02:14:12 +0000
Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: b8Tf0/K+xHAQwOhmEUnPSWtTV8s88IsamIRVBa7l0yQ=)
2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: uA3cRTnm0nh69G6nHVUfrJqxaulMue0OOyc7I/1E8Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Validity
Not Before: Oct 5 02:14:12 2026 GMT
Not After : Oct 12 02:14:12 2026 GMT
Subject: CN=6ac307f4-1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:45:5a:05:bb:ad:7d:28:1c:1e:7c:6f:14:
78:90:46:a2:a4:ec:e2:83:ca:fa:6f:25:a1:ec:be:
4a:e1:0d:56:c5:e0:dd:13:05:48:cd:55:7a:cc:48:
2f:9c:47:ca:41:05:c9:ee:d7:ac:85:a4:8b:9f:56:
65:11:e7:76:f3:e5:2c:e8:cf:1d:02:22:d2:85:55:
14:fb:41:ec:ed:f6:e1:b0:33:29:74:1d:c8:bf:05:
6f:76:1f:05:b0:43:85:2d:b2:78:47:e3:70:77:63:
ad:7f:d5:13:d1:2e:42:3f:e0:94:26:20:1e:2f:8c:
ad:99:06:ea:d2:16:54:ae:69:52:f0:a1:aa:1d:85:
75:aa:40:ec:ea:11:e5:d6:df:20:c2:1a:16:2c:2d:
86:c4:1f:78:71:b0:86:7f:e9:35:5c:d9:b5:5a:66:
1f:36:19:c6:ba:e3:b3:da:37:ac:78:45:8c:e9:bb:
20:65:37:5d:e8:82:91:5b:4e:ef:92:bc:6d:81:d9:
1b:a8:2b:52:d5:b2:f5:02:c4:c9:16:c8:6b:07:bb:
51:f6:27:cd:5e:f7:d6:99:16:8f:6b:49:7f:7d:c7:
91:da:47:c0:6b:15:f9:32:5a:5d:21:96:40:13:cf:
9a:4e:72:af:41:ff:c9:af:7c:6f:c9:02:c5:ef:46:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:6C:71:4E:C8:81:7D:82:E6:B9:E4:3A:54:E1:63:BA:B9:41:6E
X509v3 Authority Key Identifier:
keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:30:d8:fb:c8:65:66:8a:32:fa:b3:02:21:91:3f:c2:94:d8:
92:1a:ea:f2:1d:52:f0:14:b3:54:a4:30:da:13:78:44:18:d5:
80:eb:0e:f6:7a:85:28:95:2f:6c:b2:54:83:93:be:9f:f3:a1:
6b:69:a8:7e:de:92:f9:cc:29:e5:e0:99:3e:20:3a:f6:03:39:
00:9c:c3:d5:54:17:ae:fc:c5:f6:20:fb:0d:02:ad:48:1c:48:
69:55:fc:db:5d:96:90:2e:64:16:e1:dd:57:4e:de:bc:a3:41:
4f:90:7e:34:83:64:46:96:19:1a:fe:33:ca:04:a1:2e:01:6f:
63:46:67:db:49:b4:aa:d5:01:d5:b5:89:b3:a0:9c:ad:b6:5a:
f1:c1:ef:39:9e:4a:0c:3b:27:2b:6a:26:7d:db:bc:3f:2c:04:
d8:09:c2:44:31:72:44:92:e1:e7:27:16:52:b7:21:4b:1f:94:
97:5d:d5:96:af:bb:da:3b:7c:c9:e1:12:7c:59:ae:14:e8:e6:
ac:ae:18:dd:e5:48:b3:35:c3:ec:52:fc:6c:36:e6:2b:37:71:
a8:62:50:62:23:79:ee:b1:3b:3a:b9:b7:32:d5:cf:f5:4e:ac:
7c:67:69:97:ec:aa:97:34:99:3f:4b:49:e0:92:f3:1e:7b:38:
2d:a8:36:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE
RUU5QjMyNTYwHhcNMjYxMDA1MDIxNDEyWhcNMjYxMDEyMDIxNDEyWjAYMRYwFAYD
VQQDEw02YWMzMDdmNC0xZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzpBFWgW7rX0oHB58bxR4kEaipOzig8r6byWh7L5K4Q1WxeDdEwVIzVV6zEgv
nEfKQQXJ7teshaSLn1ZlEed28+Us6M8dAiLShVUU+0Hs7fbhsDMpdB3IvwVvdh8F
sEOFLbJ4R+Nwd2Otf9UT0S5CP+CUJiAeL4ytmQbq0hZUrmlS8KGqHYV1qkDs6hHl
1t8gwhoWLC2GxB94cbCGf+k1XNm1WmYfNhnGuuOz2jeseEWM6bsgZTdd6IKRW07v
krxtgdkbqCtS1bL1AsTJFshrB7tR9ifNXvfWmRaPa0l/fceR2kfAaxX5MlpdIZZA
E8+aTnKvQf/Jr3xvyQLF70YUxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIUbHFO
yIF9gua55DpU4WO6uUFuMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2
NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y
ekk4ZElQNXFWWFRlNmJNbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuDDY+8hlZooy+rMCIZE/wpTYkhrq8h1S8BSzVKQw2hN4RBjVgOsO9nqFKJUv
bLJUg5O+n/Oha2moft6S+cwp5eCZPiA69gM5AJzD1VQXrvzF9iD7DQKtSBxIaVX8
212WkC5kFuHdV07evKNBT5B+NINkRpYZGv4zygShLgFvY0Zn20m0qtUB1bWJs6Cc
rbZa8cHvOZ5KDDsnK2omfdu8PywE2AnCRDFyRJLh5ycWUrchSx+Ul13Vlq+72jt8
yeESfFmuFOjmrK4Y3eVIszXD7FL8bDbmKzdxqGJQYiN57rE7Orm3MtXP9U6sfGdp
l+yqlzSZP0tJ4JLzHns4Lag23w==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:39 2026 by rpki-client