
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier: x4h7vNNlFp0HX+dXUuzf71jCMv3PZwRc8cybmLOcQrM=
Subject key identifier: 8C:1A:D1:5F:8D:63:12:6B:A9:C7:E5:0E:4C:21:40:A7:DC:E5:92:81
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number: C2
Signing time: Fri 17 Apr 2026 06:37:01 +0000
Manifest this update: Fri 17 Apr 2026 06:37:01 +0000
Manifest next update: Fri 24 Apr 2026 06:37:01 +0000
Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: uwQOTljvuXYuF3cQtMUbebJ/84NBPypym+RLB78KpeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Validity
Not Before: Apr 17 06:37:01 2026 GMT
Not After : Apr 24 06:37:01 2026 GMT
Subject: CN=69e1d50d-1d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:2d:83:84:69:17:52:59:5a:d0:6a:e2:0e:
7f:dd:cc:7a:69:81:87:18:6e:ef:a8:ff:a5:2d:5d:
8a:83:d9:94:2d:77:d1:c6:1a:8e:c8:0f:8d:19:32:
02:72:95:2a:ea:fb:9a:38:47:f5:1c:fa:be:02:a8:
fc:98:09:44:15:96:72:75:64:53:12:00:93:14:c1:
ee:50:f2:e8:6c:0d:0b:37:14:81:97:6c:cc:af:a3:
24:75:ff:08:be:4b:b6:4b:c1:34:95:e2:be:a7:4b:
fe:3a:ff:8a:e7:99:9a:31:dd:b0:79:15:b4:16:fd:
b2:76:5f:c8:ac:91:06:70:81:13:91:8b:fa:68:2f:
f6:ab:72:ce:b4:91:81:17:6a:b7:8b:b2:3c:5e:66:
dd:c7:ff:cf:69:ab:62:1c:44:06:74:2e:cb:d0:2c:
33:d5:6a:c0:24:18:df:60:ca:de:8c:14:ab:54:3b:
f0:ba:db:ed:d7:ed:de:24:de:32:5d:c3:24:ab:27:
a3:b3:47:76:c5:7c:51:64:a3:b0:6c:ba:7d:8d:19:
dc:73:82:2d:79:44:58:00:41:4d:0c:84:05:ab:9e:
e8:ca:df:39:4b:1a:58:79:fa:ca:db:e5:0b:06:b2:
54:2b:d9:39:4c:c1:d3:58:a0:62:84:a9:8e:a3:ab:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:D1:5F:8D:63:12:6B:A9:C7:E5:0E:4C:21:40:A7:DC:E5:92:81
X509v3 Authority Key Identifier:
keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:cc:64:ba:f4:43:9c:e3:07:fa:48:bf:ac:5c:aa:79:3f:
21:e8:67:ce:2c:d9:b3:d7:2b:31:05:92:d1:d3:5c:f5:04:fd:
26:20:4e:81:02:ff:e5:93:77:ad:58:ed:d2:b3:14:e2:9e:a4:
71:65:f1:45:ee:fb:0c:7b:24:59:c7:0b:5b:c9:7e:99:b6:02:
ee:1e:2d:95:97:03:32:b3:f5:1a:1f:53:6c:19:11:fe:b0:26:
9e:9b:17:c4:75:95:fc:29:89:8c:6f:31:30:d9:07:a2:7c:0b:
f0:b7:a9:4a:9f:61:aa:8c:be:75:ec:aa:10:e1:41:4f:4c:07:
fa:6a:bd:7f:3e:86:ea:aa:19:98:7d:f8:50:c5:bd:f4:7c:eb:
f1:79:21:fd:ab:21:84:f8:20:f9:1a:f3:c1:e4:dd:42:f3:8e:
7c:a2:50:c6:95:2a:cc:bc:b3:ba:59:a6:b2:80:de:5f:7c:24:
b7:ed:12:9b:d0:6e:0a:34:da:86:a9:1e:28:7a:d6:23:ef:f7:
03:04:65:46:3d:75:b6:cc:17:65:4b:58:00:fb:27:f0:8f:bd:
ee:25:90:6f:29:86:54:88:c0:9d:d3:f8:3d:cf:0f:74:f0:60:
34:15:14:c2:8c:61:7d:41:47:92:2c:5b:9a:27:f9:ed:37:76:
1a:c3:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:45 2026 by rpki-client