
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json)
Hash identifier: blnYha2CUADKia8l3tuADnlDZfbcl2/NTT3MneFMZDA=
Subject key identifier: C3:EA:B5:46:68:44:1D:10:25:E7:37:97:97:08:DB:B3:A8:1B:C5:E8
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0D8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
Manifest number: 0D59
Signing time: Tue 06 Oct 2026 18:21:33 +0000
Manifest this update: Tue 06 Oct 2026 18:21:32 +0000
Manifest next update: Tue 13 Oct 2026 18:21:32 +0000
Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: p+meXsjfhcHGT7qQbo3EqrB0ASFmtam3wmiXudHH03Y=)
2: 1457405286F111F19E006003A7EE528E.roa (hash: DXkAVdTqtVw+EnDto9iziagqv6cs1aZGrAT3bRD4kFw=)
3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3468 (0xd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Oct 6 18:21:32 2026 GMT
Not After : Oct 13 18:21:32 2026 GMT
Subject: CN=6ac53c2c-10c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:b6:8c:12:c3:16:a0:2b:1e:6f:59:b6:81:
bf:8f:18:13:49:11:b4:68:7e:b9:12:08:23:ba:08:
e7:55:3d:ac:a9:03:c1:52:be:33:94:95:f0:51:ed:
a1:bd:83:07:e4:a3:b8:c3:76:23:cb:08:0e:51:ce:
cf:f3:3f:56:ca:aa:37:29:d4:28:4b:7e:a1:c9:a2:
23:b7:c8:68:9a:7e:74:e6:cf:bb:b1:4b:3f:a1:09:
83:41:c4:02:71:78:16:22:71:6f:70:c5:37:0f:f5:
ce:c3:8a:3a:88:5d:e9:69:8b:9f:0e:ef:ec:22:32:
e3:68:43:22:60:be:26:06:ec:17:ba:3e:d2:fd:8d:
dc:02:96:da:12:38:6d:9d:af:c8:23:2a:a7:3a:2b:
57:89:1f:06:60:a1:c6:64:4c:99:a8:27:0a:53:f7:
75:b1:84:04:c3:0e:d6:a8:b8:93:1a:ba:40:70:60:
e4:d0:d3:34:2d:e8:9c:29:03:89:36:c2:bb:10:68:
96:bc:44:de:0e:11:bf:0c:b3:8c:e5:9c:69:33:e3:
08:22:2b:66:7a:a2:9c:b8:f1:41:ce:77:cf:e2:94:
50:73:15:ac:79:d8:80:b4:a4:d2:cd:a9:86:e8:27:
9c:43:28:12:ff:de:cc:bd:34:1a:af:ed:9b:d2:50:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:B5:46:68:44:1D:10:25:E7:37:97:97:08:DB:B3:A8:1B:C5:E8
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:d4:e9:4b:80:21:38:2e:ab:42:86:cc:c4:59:49:52:df:
48:17:ac:09:26:19:df:b2:93:7a:89:4f:00:8b:6d:91:5b:a3:
6f:a9:27:fe:d8:7b:96:b2:44:61:a5:de:cd:74:0a:4c:64:81:
1c:f6:80:df:ea:44:37:ea:dd:17:38:1b:0d:77:b2:07:0c:24:
34:c7:29:36:18:ad:97:64:ea:96:13:ef:bd:4a:fd:85:78:09:
62:e4:ad:65:a2:1c:c2:7c:16:ea:85:91:8b:d4:e2:83:5e:02:
44:03:ed:90:e5:9c:1e:ab:6a:ce:51:d8:07:7b:4a:f8:9a:70:
ed:70:eb:67:3a:b6:8d:c1:db:17:33:56:2f:c4:8f:6e:21:7f:
20:4a:9f:05:ab:49:c7:ff:3c:da:4b:b5:6c:89:46:86:cf:76:
57:67:fd:e3:ee:ea:c7:85:9e:12:d7:77:d8:a1:c7:ca:8a:c2:
43:7f:8a:a3:4c:c7:c2:17:f4:d8:12:88:dc:c3:a2:12:ee:0e:
d9:87:47:eb:bf:c7:65:a8:8d:8f:46:83:e3:76:8b:a1:94:b2:
24:88:bf:87:37:b7:b2:8d:c9:83:58:e5:8e:7a:52:9f:bf:68:
6b:cc:8c:9b:89:ff:98:bb:85:4c:6a:51:d2:a6:16:d3:5a:ef:
ae:a8:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:39:39 2026 by rpki-client