
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier: GE5V7wkMDZGievv8tc3di6yMEo2FnBgR/fajrX8POvM=
Subject key identifier: 48:E1:79:95:4E:60:A8:FB:73:A9:4E:35:4B:F6:47:7D:CF:B3:83:AF
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number: 0259
Signing time: Wed 29 Jul 2026 03:17:47 +0000
Manifest this update: Wed 29 Jul 2026 03:17:47 +0000
Manifest next update: Wed 05 Aug 2026 03:17:47 +0000
Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: W9hhCUbP+Fu4VhFLxAqBsnXIHDofleRDHFwQvNdem7Q=)
2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: uA3cRTnm0nh69G6nHVUfrJqxaulMue0OOyc7I/1E8Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Validity
Not Before: Jul 29 03:17:47 2026 GMT
Not After : Aug 5 03:17:47 2026 GMT
Subject: CN=6a6970db-6516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:0a:58:7a:8c:85:3a:7e:7e:d8:79:50:b5:
31:98:07:68:cd:5d:3d:85:1a:ca:13:8b:58:ea:a3:
e4:de:06:0a:e2:2a:82:72:fa:f0:6d:5e:34:64:84:
2c:e2:71:e8:30:3e:56:1b:fb:ab:2e:b7:d6:32:09:
cb:90:8d:98:f7:41:84:dc:94:c0:87:0e:67:68:35:
5d:a2:71:89:57:34:d2:e7:69:ee:6c:84:21:47:9e:
bd:20:c8:73:90:d5:2f:09:7c:32:1d:a6:67:89:3c:
09:ba:34:fc:dc:5b:b9:ba:17:0a:0e:72:ea:52:45:
b5:87:ad:7f:7b:5d:74:ba:e5:3d:fe:6d:a9:93:24:
9c:3d:dd:7f:26:24:7b:2b:58:bf:0b:19:e8:43:6b:
2c:c6:bd:cc:c0:5d:42:72:47:88:93:cd:3c:28:9c:
c5:8b:16:da:b3:c3:ed:68:f1:08:b1:8d:f2:32:a6:
98:cf:d3:95:71:c1:3d:02:eb:24:04:90:b6:b3:06:
70:93:c7:88:77:45:5a:65:78:20:4c:77:c8:3d:80:
d4:f0:74:53:81:3a:68:f6:50:79:bc:e8:2a:26:0e:
9f:b6:af:6f:d1:be:28:10:f4:38:26:88:8f:80:3e:
7f:02:15:40:8c:18:10:a4:2a:09:98:44:5e:90:87:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:79:95:4E:60:A8:FB:73:A9:4E:35:4B:F6:47:7D:CF:B3:83:AF
X509v3 Authority Key Identifier:
keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:65:73:96:d0:1b:76:e8:0a:7c:a8:bd:ce:b2:78:c9:90:ac:
d9:b9:f5:ad:5a:2a:b8:09:90:2e:3c:d0:83:4c:96:0e:ed:ff:
30:e7:e9:e6:d9:97:b3:b9:54:2c:08:90:b3:40:af:93:8b:d7:
8b:9c:21:49:8b:54:8e:ae:b3:5f:15:b8:22:32:d8:4a:6a:a9:
55:cf:a1:c0:25:ea:89:0f:c7:0d:cb:9b:ca:2a:f7:fa:a6:38:
9f:f9:a7:cc:b1:a0:7b:c3:da:b6:11:d2:9b:f3:9a:c4:b0:18:
49:ea:9e:7e:eb:2a:02:b2:a1:b0:1d:90:27:90:45:f9:d1:c5:
1d:69:f5:5b:22:de:e9:e1:e3:2d:5d:da:16:95:36:64:20:91:
d4:ec:94:b0:aa:3a:2d:1b:a8:bb:c7:55:46:04:ad:c1:70:1a:
91:90:5e:dd:57:46:09:52:8c:d7:a3:34:3f:db:c9:ff:56:d7:
4c:6b:26:88:81:e4:fe:0c:20:c8:ec:5b:78:87:87:b7:7f:44:
ea:4c:a3:dc:a5:53:d2:55:70:6e:30:d9:57:f5:cb:a7:65:5e:
43:a8:ef:b3:94:ae:59:74:19:ea:96:26:52:7a:96:78:75:a1:
36:af:c9:31:bd:43:ff:d1:28:c6:e6:69:53:16:4d:b3:85:32:
b6:49:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:38 2026 by rpki-client