
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier: 2ksfXJimcqyeZMQ11m/6sqE5gH9kbgdeAvrbW2wdRzM=
Subject key identifier: 10:CC:E2:CD:5C:13:D3:85:C3:59:AB:1A:D9:86:48:11:B8:DD:B0:41
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number: 0275
Signing time: Mon 21 Sep 2026 02:01:24 +0000
Manifest this update: Mon 21 Sep 2026 02:01:23 +0000
Manifest next update: Mon 28 Sep 2026 02:01:23 +0000
Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: BPvZuUZoPslGIP+STgZaDKlIwmlyd4DyH3Wk6gi+rlE=)
2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: uA3cRTnm0nh69G6nHVUfrJqxaulMue0OOyc7I/1E8Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Validity
Not Before: Sep 21 02:01:23 2026 GMT
Not After : Sep 28 02:01:23 2026 GMT
Subject: CN=6ab08ff4-630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:d8:34:2d:c1:32:80:51:38:3b:70:6b:6d:
09:dd:9e:05:6c:4f:00:53:7d:3d:64:3b:fa:fc:e1:
6d:18:29:30:31:ba:c8:d6:18:e5:9c:5a:b2:97:75:
64:bc:fa:d9:92:89:09:5d:68:e4:48:67:37:e3:fb:
aa:14:2e:71:75:8d:16:ca:84:a7:1a:00:2b:92:20:
0e:45:76:80:20:fe:e9:27:a9:da:3a:9e:fa:b9:f1:
d5:68:a9:4c:88:93:d5:fe:c9:20:df:8e:28:42:b1:
2e:5c:d9:61:d2:12:ed:2f:61:c4:1c:33:30:89:09:
61:6f:7e:2e:63:aa:1b:3e:f4:2f:f3:c6:ea:4e:53:
ed:7e:48:9b:44:5c:92:34:58:c7:17:fb:a1:f0:4d:
97:9d:4a:90:84:dc:1f:2c:0c:45:d1:47:03:38:d6:
1d:e1:c8:49:46:39:d0:ce:20:d2:13:7c:53:34:9f:
a6:69:12:f8:74:c2:73:c7:3c:24:81:68:95:88:7a:
88:1a:b0:da:e5:be:71:20:66:30:5f:cf:5e:cb:e6:
b2:a3:17:44:56:de:7c:df:9f:00:e2:1f:eb:c1:9a:
d2:c9:68:37:19:37:38:a8:02:05:26:1d:ab:4f:64:
77:eb:2a:5f:33:00:f4:1e:42:22:8f:59:ba:f4:14:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:E2:CD:5C:13:D3:85:C3:59:AB:1A:D9:86:48:11:B8:DD:B0:41
X509v3 Authority Key Identifier:
keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:95:ab:b9:a0:a6:98:e2:33:eb:6d:9b:28:9e:5a:12:db:63:
0f:a8:41:77:b0:f9:ba:93:08:3c:d1:3d:d1:13:e1:40:c5:1b:
e6:38:86:4b:38:b5:e2:65:17:45:01:71:b9:34:80:ae:ea:88:
06:c5:ef:34:dc:ab:c2:27:10:b1:1d:57:69:9f:e3:fd:9e:49:
60:91:d5:65:c7:1e:7f:83:e0:8b:93:d4:40:21:08:b9:ee:bc:
77:be:d7:44:e9:fc:5e:e2:6c:c4:e7:c1:81:e3:a0:95:ec:30:
1c:bf:f7:96:28:df:d1:d6:80:4d:4f:8d:65:8f:78:77:75:fe:
5a:c0:2f:13:6b:ad:56:83:8b:ad:e2:00:38:45:df:11:c3:65:
b9:a8:a0:1e:69:93:71:57:4e:99:78:d0:89:a8:62:bf:4d:fe:
f0:a7:a7:6e:01:c8:51:dc:9f:b8:ab:03:f2:4a:d7:b6:46:22:
60:d8:68:44:9d:b2:0a:49:42:2f:a4:fe:fe:85:ff:b6:b7:a8:
3e:2c:fc:82:4a:ac:9f:34:0f:0b:0b:9b:b6:27:f0:9d:d6:5e:
b0:b9:39:10:73:fb:64:9d:ea:ba:39:77:ba:64:94:e3:06:a0:
5f:3b:c4:be:f3:8e:47:aa:d4:db:3e:80:17:ce:65:d6:b0:3c:
47:74:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:47:09 2026 by rpki-client