
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json)
Hash identifier: n8+L0GLmdGgzkBm0XlXzbAG5KmAC6gwa01Zs2OJjqGI=
Subject key identifier: 3D:DA:7C:E9:E9:0C:AA:28:CF:0F:A3:5C:73:F4:82:46:EF:42:EC:16
Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
Manifest number: C5
Signing time: Tue 23 Jun 2026 07:08:39 +0000
Manifest this update: Tue 23 Jun 2026 07:08:39 +0000
Manifest next update: Tue 30 Jun 2026 07:08:39 +0000
Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: ns4aIFSyS2miA/QMZsrf6qny0sAvuxi+Q8OmdbaQJ8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Validity
Not Before: Jun 23 07:08:39 2026 GMT
Not After : Jun 30 07:08:39 2026 GMT
Subject: CN=6a3a30f7-7aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:5e:78:92:74:d7:b3:b5:1f:0d:e5:9f:f9:
bc:94:7b:7c:6d:d9:95:6f:f3:26:43:4c:d1:04:fd:
91:04:bf:ff:0b:c2:f9:83:cf:7c:25:61:d2:db:c5:
67:c6:7e:2b:da:df:fb:eb:ab:ee:e0:33:14:c7:54:
e8:e1:1b:80:7a:43:d7:63:2b:f7:4f:ea:8a:5f:89:
99:d3:48:d6:83:96:c9:49:31:36:52:7d:19:41:84:
6c:36:f8:d9:ab:b2:de:55:4a:14:eb:b6:61:a2:a3:
d4:9a:f1:e3:e5:ee:12:f4:28:cc:07:3c:64:84:e1:
72:06:85:07:6b:06:44:67:49:13:69:d0:c5:15:22:
ac:7f:9c:20:35:22:b7:07:af:06:70:26:03:1a:f8:
7d:35:5a:2c:7c:c5:6f:d2:39:4b:aa:e4:5e:47:3e:
5a:d9:89:6b:0b:c1:df:01:22:af:be:eb:5d:8c:f9:
75:bd:4d:ae:43:6f:81:25:bf:27:a1:32:98:f2:52:
73:8e:c2:b0:eb:e4:e1:31:53:f1:aa:fb:d3:19:78:
14:89:64:7d:81:61:d6:b1:66:5c:c7:16:28:ca:20:
67:e2:cc:d9:d1:b7:5c:23:a3:c2:81:cd:05:f9:78:
64:a5:93:83:07:70:42:b4:53:92:ee:13:2a:af:3c:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:7C:E9:E9:0C:AA:28:CF:0F:A3:5C:73:F4:82:46:EF:42:EC:16
X509v3 Authority Key Identifier:
keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:74:ee:e4:62:0e:74:28:aa:d0:49:fa:6e:f4:a8:cd:5c:a1:
28:28:84:86:c1:e2:ff:2d:48:1a:bb:42:87:c0:d4:d3:69:74:
72:39:14:18:fc:70:5c:92:42:4c:2d:e9:71:5c:8f:18:2a:49:
a9:39:2b:24:fe:fd:69:a7:19:07:e7:4c:5a:cf:df:37:44:b8:
08:5e:54:a5:e8:8d:f7:72:11:50:f2:ea:37:4e:a1:70:e6:db:
2d:3c:fb:ee:e2:c1:c5:24:17:2d:10:30:2f:ec:b3:39:75:4a:
81:d9:a3:bc:8c:4f:f4:66:25:b1:66:77:3a:f2:1d:59:1c:bd:
d3:06:13:a8:66:6b:f4:e2:5c:29:2f:8f:7f:9e:4d:ca:1c:9d:
17:f1:a1:0e:cf:fc:5f:b4:a0:86:9e:0f:2b:b0:19:62:0b:5e:
54:32:c8:c5:df:42:2f:8f:22:6f:49:29:4a:ea:fa:3c:10:33:
0c:f3:1b:5c:bc:a4:ed:36:1c:6c:21:7e:ff:2f:fa:f6:42:bf:
67:ac:77:8d:84:b2:df:97:fd:c5:e6:bc:63:84:70:85:dd:b1:
d2:53:7d:85:1e:a5:9e:01:7c:0d:0d:ba:37:a0:e6:fb:fa:a5:
1c:3c:c7:b0:7b:0d:96:9c:a1:dd:62:c5:0f:17:e5:a9:a5:2b:
6f:02:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:16 2026 by rpki-client