
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier: nMUYuK8qXVG5DumH6Ps7dwMkg24+QC9fkugmxQhJPXg=
Subject key identifier: DC:F5:C3:E6:8C:E6:9B:E3:44:47:57:98:BC:E5:E4:C7:F5:9F:82:C9
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number: 0931
Signing time: Thu 16 Apr 2026 20:07:31 +0000
Manifest this update: Thu 16 Apr 2026 20:07:31 +0000
Manifest next update: Thu 23 Apr 2026 20:07:31 +0000
Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: FQ69wxj5wbA8CiiOLopXzmjVRuTgNGwK59JaMZZzR3g=)
2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: Ueqo75gSThRYndYi3ug7/v3xrjnUfwH9KTMtXQ0mSlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Validity
Not Before: Apr 16 20:07:31 2026 GMT
Not After : Apr 23 20:07:31 2026 GMT
Subject: CN=69e14183-a9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:f4:eb:06:02:b5:d9:cf:a2:60:c5:61:47:
48:71:72:2b:e1:a2:17:44:a8:2f:a5:97:45:cf:2d:
df:13:54:a5:16:87:21:ae:b3:a2:f1:24:5b:67:10:
7e:bd:86:71:95:0a:c1:3b:a2:2d:89:b1:04:45:a4:
cc:f3:9f:1c:03:c3:e6:f6:18:be:b1:99:9c:f3:8c:
fc:dc:70:e7:7f:51:8d:17:be:63:3f:40:ba:05:40:
89:12:f5:1e:73:db:d7:94:b7:26:b8:1e:7d:6b:7a:
46:a1:3d:86:7b:a1:19:5d:b7:d5:5f:e4:1b:4d:2c:
fb:82:f5:d3:e4:f2:fb:95:3d:d0:56:f9:2c:c5:f1:
d3:a6:40:0e:92:50:7d:26:f7:f8:56:96:87:d9:ed:
a1:ef:ff:f4:32:67:fc:51:43:c8:63:84:9b:71:8c:
af:8e:f7:f4:d5:9b:c1:2f:03:dd:6a:43:86:d5:b4:
70:51:ec:81:ab:4f:f4:7e:4f:a4:16:fd:8c:ee:dc:
2a:c0:eb:c2:14:7c:83:5f:1d:74:72:73:79:a9:0a:
df:98:4d:61:34:60:7f:59:8c:4f:03:2c:06:fc:00:
b2:78:97:8a:89:23:4d:0a:0b:e6:45:15:b3:d9:43:
13:78:04:1e:63:3e:26:d0:53:46:42:59:b5:00:a9:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:C3:E6:8C:E6:9B:E3:44:47:57:98:BC:E5:E4:C7:F5:9F:82:C9
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:21:30:d7:ba:99:fb:b3:b0:8c:fb:e1:35:71:4b:ae:c3:
17:1c:ae:4b:ad:15:45:61:aa:48:b0:2d:39:82:5f:c5:c6:2a:
ef:fe:75:6f:15:b1:56:f1:08:c3:b5:a8:b5:fe:a2:f1:fe:b8:
fb:96:e9:d7:b2:17:2c:de:d2:a3:9f:c5:fa:38:c1:cf:75:15:
79:de:1d:d4:81:a3:f4:21:4d:ac:bd:a7:a7:ff:75:e9:c9:d0:
fc:eb:cc:20:9d:96:ab:51:92:0c:51:19:31:4a:7b:d6:a6:aa:
28:b5:6a:bd:b4:21:be:24:65:7b:2c:f5:05:19:0f:ea:4f:72:
8c:f7:59:e8:d6:52:ee:c2:23:aa:ea:4f:59:43:59:53:69:d3:
89:5d:56:1b:e8:39:e2:42:45:73:1e:08:02:5f:ee:03:2f:10:
04:9f:ca:5d:58:ad:d5:55:10:91:37:32:ea:a3:43:a4:1e:ca:
66:15:6d:0c:5e:30:ce:82:48:3a:c1:21:f9:c0:c7:48:fe:86:
f6:6d:74:44:ad:a9:11:d9:65:13:4f:e8:f2:53:a1:20:62:ae:
d6:7f:71:42:19:92:28:90:d9:9b:2c:c8:2e:f0:ec:c9:7e:9b:
6f:a6:cb:43:c9:fe:e0:35:fa:85:f5:9f:ac:10:3f:e1:aa:3c:
f1:14:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:06 2026 by rpki-client