
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier: vKpZTNhJMDDCCrSCkDxP3fgXn6Ny6akwePe2ZzDmOig=
Subject key identifier: 4F:A3:78:C5:4C:52:F7:B8:07:FE:2D:DF:4D:DE:6F:20:65:6B:1A:8A
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number: 0411
Signing time: Sat 03 Oct 2026 00:40:39 +0000
Manifest this update: Sat 03 Oct 2026 00:40:38 +0000
Manifest next update: Sat 10 Oct 2026 00:40:38 +0000
Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: NffwwZj41nEsRKj9SnL58+2gAHY5/MsnR8QhR5DzmwQ=)
2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: hAQl9H75BpKmN7Muu51VVyZ+oy7nwK9cCULcraz4/lY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Validity
Not Before: Oct 3 00:40:38 2026 GMT
Not After : Oct 10 00:40:38 2026 GMT
Subject: CN=6ac04f06-ee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:d5:2c:cf:e1:d3:ee:16:90:f8:e1:0e:28:
ee:1d:64:5d:e8:e4:fc:e6:0e:42:90:c0:02:78:e7:
8f:f1:1d:5b:10:59:bb:5e:ae:20:24:ec:6b:81:75:
bb:ea:e3:00:2a:3e:fc:fc:fb:85:c3:ec:33:21:07:
b0:22:6c:3f:38:90:c5:0a:64:f1:74:6d:45:f4:f0:
7b:b8:f9:4f:84:b6:38:9f:ce:9f:d3:c5:e0:69:6e:
9c:c5:11:88:6a:bf:09:01:30:83:dc:f8:df:1c:b2:
d1:44:bc:2d:34:4f:4b:b0:15:8f:fc:4a:6c:a9:b5:
e9:6f:40:84:a9:e5:82:5d:34:a3:09:9f:79:d4:d6:
f2:41:15:c4:d7:7f:81:11:ad:ed:81:90:80:e7:d5:
c0:a4:f1:8e:d2:7a:a2:1b:86:43:cd:cb:91:6c:86:
c2:5d:eb:05:c1:f4:a4:41:ab:92:6b:b7:e4:97:9b:
73:b6:67:29:53:a2:f0:86:f2:14:8f:ff:5a:4d:5d:
eb:16:1d:c4:13:ad:44:73:b0:49:7f:a4:ec:40:22:
86:7a:6d:92:99:ee:44:6f:32:b7:c6:48:c2:5a:0c:
b3:58:f0:cf:75:30:c9:9a:9a:7b:6b:64:36:f4:d1:
27:df:d8:11:67:3b:b1:54:8a:4a:3b:bc:1e:d3:3f:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:78:C5:4C:52:F7:B8:07:FE:2D:DF:4D:DE:6F:20:65:6B:1A:8A
X509v3 Authority Key Identifier:
keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:07:70:88:6a:2f:69:0a:fe:93:ba:c4:4c:ec:18:b6:bf:
9f:e5:1a:a4:1f:3a:6d:f6:27:ff:6b:09:28:92:84:80:8b:9d:
a2:b6:7e:70:ec:62:f0:7e:c2:6d:f5:35:68:35:3c:3e:e1:03:
50:86:b3:4a:e7:04:10:5b:ce:71:1c:84:40:9a:a3:03:7a:10:
8a:0a:20:ed:b2:9f:e4:d8:11:e7:6e:5f:df:17:c8:18:fb:12:
73:b3:aa:ab:b8:49:5d:26:d7:27:18:2c:29:a5:1a:1e:b1:84:
39:37:f2:f8:77:f6:1e:bf:2c:cb:7c:d5:e9:3f:59:27:b2:ba:
2c:01:77:fb:ab:9e:b5:3e:f5:86:54:b1:d2:3c:93:dc:79:48:
1c:ce:b5:85:34:39:c8:2b:24:36:7a:15:35:74:6a:5a:03:82:
ea:87:42:27:28:4d:99:16:54:9e:88:34:f5:7c:eb:0f:fa:bc:
17:8d:8f:48:e9:2b:5c:96:4e:2a:15:ae:72:fe:8d:b0:fe:6b:
c6:84:cc:7e:64:c3:79:de:62:97:96:c0:50:b5:c7:f1:0c:f3:
f3:57:c9:10:c6:ae:3c:a0:27:5d:b4:19:2e:e8:93:5d:37:bf:
eb:46:7a:18:62:91:ed:6d:6c:de:f3:86:85:62:5e:ce:5d:5c:
4a:6a:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:56:32 2026 by rpki-client