
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier: Ys17WBOya9noS3A6q8XrAiDAaFnfIUYSUSWSZw4Bvko=
Subject key identifier: 3A:DB:4A:5C:F7:F8:0D:B2:A6:7C:33:EA:0F:A7:DC:91:8B:1B:56:62
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 0995
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number: 0986
Signing time: Sat 26 Sep 2026 20:08:04 +0000
Manifest this update: Sat 26 Sep 2026 20:08:03 +0000
Manifest next update: Sat 03 Oct 2026 20:08:03 +0000
Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: Z3GrRMnviZ+UGHOaghLhTYP0RrelouywyWvzQkgohRo=)
2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: 0iggRslrFHDyEDgNHUdd/K9tCe1RZkt1d8yMy2CAg/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453 (0x995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Validity
Not Before: Sep 26 20:08:03 2026 GMT
Not After : Oct 3 20:08:03 2026 GMT
Subject: CN=6ab82624-8087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e0:3d:71:44:03:3f:ec:d0:63:3a:b2:f1:dc:
56:dc:68:bd:df:44:3e:20:20:f1:0a:b1:01:a1:44:
39:be:bb:7e:9b:53:de:ce:37:99:f5:de:82:df:ca:
6b:f8:5a:2c:01:d9:75:14:58:c1:5b:2c:e3:b9:5d:
83:59:82:b1:62:90:f2:16:5e:4d:a5:f2:71:f7:5f:
17:4b:68:4d:90:2b:a5:15:64:b2:0a:e8:2f:42:46:
fe:e4:ec:37:b3:3c:9a:42:b5:a4:27:98:e9:d1:89:
98:cd:4a:f8:31:42:45:7f:fd:27:7b:07:f0:54:10:
d5:29:12:96:ea:27:6b:54:3d:e8:b1:c0:fb:54:f1:
96:aa:97:fa:80:ab:67:fb:05:ea:5f:3c:cb:0d:bc:
c8:2a:93:c9:29:33:da:63:81:e2:3d:11:1b:96:ba:
a9:77:0d:0c:bf:d8:44:67:1a:06:e2:ee:df:ce:7e:
27:59:01:c1:cb:01:18:a0:32:e6:a6:9b:7a:e5:bb:
2d:dd:5a:55:07:25:d1:b5:29:b3:39:45:61:50:91:
19:24:ed:96:a7:9d:b6:bc:e0:6e:21:b2:69:16:35:
91:c7:c3:1e:9b:60:7e:e4:1c:7a:f6:b0:c7:fe:a4:
15:31:17:16:71:bb:7f:3c:35:6a:60:20:d8:de:79:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:4A:5C:F7:F8:0D:B2:A6:7C:33:EA:0F:A7:DC:91:8B:1B:56:62
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:1c:27:be:e1:e7:70:09:1d:e6:3e:ff:17:89:d2:65:12:39:
65:ec:b6:c0:8f:7c:ae:99:1b:d1:ed:b5:7e:e3:7b:0c:9d:91:
78:42:68:91:45:87:ad:84:dc:63:bc:03:61:77:81:c3:5b:e5:
e6:6b:6b:f2:a0:79:fc:af:ca:4b:f8:1d:5a:1c:a7:45:42:ef:
c7:8b:b7:dd:5d:d0:df:a9:38:79:dd:a8:cd:fa:d8:ea:2c:ac:
31:75:f6:fa:e7:f8:74:b3:55:44:00:5e:5d:89:f6:5b:ba:ec:
ab:13:32:ef:d7:ab:47:4e:7e:38:9e:44:6e:44:a8:b0:77:fd:
7f:b4:3b:68:4e:7a:83:1a:76:d2:37:b1:35:7e:62:4f:98:fe:
7b:93:20:26:d2:27:2c:97:24:3c:9e:04:23:a6:fe:46:83:cb:
63:94:35:f7:a3:75:74:d1:e1:8d:83:92:9b:9e:91:58:69:a7:
8c:8d:42:e6:40:45:29:95:f6:d0:4f:a0:56:b7:6f:7e:35:fa:
b4:c5:da:3c:7c:68:1f:6e:73:fe:c2:16:2b:82:cc:f1:bd:15:
54:ab:eb:b9:e2:b5:bd:c3:18:8a:9a:1c:d7:8b:37:ca:58:8a:
61:2d:c0:dc:34:58:a7:a7:7d:19:1f:9a:13:5a:c6:93:fc:8b:
01:b2:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:54:07 2026 by rpki-client