
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: jor+TRrO24qc/BEgP2OZHSLH0RmG9KPgaAZWHX9vYN0=
Subject key identifier: 4D:6C:5B:67:15:05:DC:F4:7C:5B:FC:80:F7:25:27:00:13:00:3E:98
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 05B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 05AF
Signing time: Sun 04 Oct 2026 23:08:59 +0000
Manifest this update: Sun 04 Oct 2026 23:08:59 +0000
Manifest next update: Sun 11 Oct 2026 23:08:59 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: xibb6SZUw/LI8bEFxi04OCsO5c6598Ps28blNZhUJ2g=)
2: 026757CA3E2A11F19724AD26B6833773.roa (hash: yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Validity
Not Before: Oct 4 23:08:59 2026 GMT
Not After : Oct 11 23:08:59 2026 GMT
Subject: CN=6ac2dc8b-69bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:ca:27:23:56:31:f4:66:7d:99:4a:21:a5:
6a:fa:c6:f0:81:21:8c:be:42:f4:12:f2:14:6a:d3:
62:ae:51:b2:c7:50:62:10:6b:92:df:bf:78:97:db:
19:71:e5:24:57:60:c4:ce:73:00:cf:84:14:c8:62:
c4:91:06:84:af:a3:a4:d4:04:fe:19:5d:ab:84:4e:
d7:4a:4f:1d:ba:a5:11:69:69:27:cb:64:ff:cd:02:
c1:97:02:1d:90:a0:5c:9b:70:e2:4a:1e:d7:f3:da:
59:2e:7e:ec:54:e0:33:c8:74:69:ac:e7:c5:67:6d:
d1:05:bb:d5:9f:4e:e6:89:0a:b4:fd:69:7c:4a:f5:
3b:b2:e0:2d:62:ff:0e:f7:be:3b:7c:61:c5:39:c1:
28:3a:ac:82:84:7d:59:b2:a5:32:08:71:80:90:b2:
d3:5b:dc:20:2a:68:6a:e3:21:57:56:a4:27:33:0e:
ad:1f:14:95:d8:a4:6f:44:55:3c:38:6b:7a:7b:19:
d6:85:99:86:71:15:8c:50:03:f2:7f:13:f9:c4:84:
c6:56:cb:97:e0:e8:2d:ce:da:d9:9b:b6:0f:a8:97:
83:16:71:38:b8:90:c7:2e:ee:21:1e:ca:6d:cc:18:
6a:4c:e0:93:db:e9:e8:59:c0:e8:42:f2:87:bb:83:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6C:5B:67:15:05:DC:F4:7C:5B:FC:80:F7:25:27:00:13:00:3E:98
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:92:41:f9:2b:d8:0d:5b:a2:50:fb:1b:3a:f7:43:97:2b:
48:1a:b8:df:88:8b:0b:4a:95:22:46:f0:e5:85:9b:f2:f9:af:
81:63:dc:9b:a7:c7:f9:5b:ef:11:41:f6:3b:f1:3a:8b:1b:c8:
c8:75:b2:05:4b:5c:34:4c:ff:9a:c9:3f:6f:8c:18:38:1d:a5:
bf:9d:56:40:f5:7d:32:82:d3:49:e4:77:9b:da:55:bf:bb:05:
be:b6:d9:5f:1c:27:71:73:bc:33:90:7f:d6:4d:ac:9c:d0:1a:
17:05:7e:84:9e:8e:97:fa:07:0a:64:f7:1f:6f:df:c9:fe:48:
cb:ae:4f:e2:05:ed:4e:64:5d:34:e7:cd:a8:cc:57:38:f3:2b:
66:c9:88:e7:b8:e0:9b:df:2a:99:e5:f9:44:7b:7f:87:89:84:
3c:aa:6e:db:05:d4:08:7d:34:da:03:5e:f0:59:81:71:ae:4f:
a5:1a:66:b6:62:41:48:e6:63:1b:4b:b9:c4:85:a9:07:82:ae:
cc:a3:a4:b2:98:89:b4:f5:1c:13:4d:87:5b:ab:a5:ff:ae:24:
7f:ed:bf:ec:f5:12:9c:6d:cc:14:d1:a8:f1:24:7f:90:8b:a3:
23:00:77:d7:7c:c7:60:89:e4:a9:a7:f9:69:45:14:bc:da:83:
9f:13:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:29:37 2026 by rpki-client