
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier: oFdMYF7sQNbvFTiGEtmvcz5KpvXhYCjm3E/aE5gQ8tc=
Subject key identifier: 35:77:5E:18:FF:C7:02:B1:05:5F:1D:32:B0:81:E6:71:6E:BB:17:4E
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial: 1F32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number: 1F11
Signing time: Thu 08 Oct 2026 16:04:43 +0000
Manifest this update: Thu 08 Oct 2026 16:04:42 +0000
Manifest next update: Thu 15 Oct 2026 16:04:42 +0000
Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: o/04X1rebrNiR/x/fuR8scQU+9zV4rF4zpgmJhkZcfk=)
2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7986 (0x1f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Validity
Not Before: Oct 8 16:04:42 2026 GMT
Not After : Oct 15 16:04:42 2026 GMT
Subject: CN=6ac7bf1a-12a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b9:24:e5:53:bb:77:bf:0d:25:93:cc:24:dc:
2f:91:ce:79:1d:52:07:6b:db:8e:e1:c7:81:4c:9c:
b1:a4:33:63:1e:c1:33:9c:5e:8c:2e:4b:59:99:95:
91:19:16:1d:2f:34:ac:a2:2a:2b:35:66:2e:bf:ad:
13:30:1f:f6:ff:fe:be:62:34:ef:d8:19:47:bb:59:
3a:97:9a:06:5c:96:66:76:db:99:05:3b:59:2f:a7:
56:44:69:75:f4:54:42:84:53:7f:62:f9:2b:2f:c5:
61:c9:ba:23:56:81:c0:f1:c8:c1:31:24:f3:95:8e:
6d:54:1c:13:62:24:b2:6f:1c:68:51:66:f4:fa:35:
eb:c9:d6:74:ae:bd:73:41:f7:6f:89:ac:47:e4:89:
82:c2:50:59:6c:5f:cb:4e:e8:95:c3:4b:9a:7b:b2:
74:7c:5b:6f:57:7a:ec:1b:2a:e6:73:3e:2b:3d:4e:
60:59:92:25:b8:be:f8:bc:d9:bd:94:a9:5f:29:99:
72:1f:60:42:df:f5:89:a5:9a:8d:7b:76:18:f8:3a:
e7:9b:57:83:de:42:7e:2e:23:86:47:5b:2a:0e:23:
d1:ca:23:25:b3:6d:c6:d7:54:e9:74:6a:57:af:08:
23:4f:61:ea:3d:4e:dd:55:bf:85:a4:82:50:3d:df:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:5E:18:FF:C7:02:B1:05:5F:1D:32:B0:81:E6:71:6E:BB:17:4E
X509v3 Authority Key Identifier:
keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:6a:1f:4b:da:91:0d:6b:6f:f8:59:b6:c7:5d:6a:b0:87:
df:88:0b:e3:df:5c:fb:0b:ef:93:3e:d3:69:4d:8d:a6:ce:8a:
e1:25:3f:06:dd:f2:0f:47:14:da:1f:41:b8:0c:ad:d4:d3:3f:
e0:0d:d2:fb:ba:ae:52:f6:82:f0:8f:5a:40:47:11:5f:72:d9:
f3:56:9d:a6:c4:f5:4b:5a:63:0c:ec:10:92:03:da:9f:0f:f6:
f6:84:ce:3d:f1:ab:68:db:22:49:9f:78:cb:8d:c8:c0:be:33:
91:d0:47:ca:66:6f:18:68:71:39:25:51:29:c5:6e:ce:f9:55:
81:32:74:eb:83:28:e2:db:8c:10:da:59:89:b2:aa:56:72:3f:
90:22:e6:64:d0:d7:be:11:10:50:86:7d:6e:48:79:9d:81:19:
4e:94:ab:5c:97:1d:33:ba:62:2c:b5:ec:d9:2a:fe:a2:1f:95:
96:fd:5d:d0:9f:28:0f:26:08:34:30:7a:ed:bd:4f:c9:75:ac:
f7:24:e4:d9:6e:d2:e2:e4:8c:f1:f0:c1:dd:57:7a:77:fb:7f:
df:8b:2e:84:40:c7:1b:67:c9:8e:f9:10:3c:a1:24:3c:77:d9:
70:0e:dd:a3:bb:44:1e:25:2a:03:ef:b4:83:ad:6d:e8:40:a6:
3b:10:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:45:08 2026 by rpki-client