
$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: wYE9499OrQa02urLbt33sdWA2kj1mFUwGSUJn8PvN3A=
Subject key identifier: C3:BB:8D:50:F4:9C:34:55:89:7B:37:71:EB:9D:BF:02:F2:1E:C7:EF
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 058C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 058B
Signing time: Mon 27 Jul 2026 00:09:34 +0000
Manifest this update: Mon 27 Jul 2026 00:09:33 +0000
Manifest next update: Mon 03 Aug 2026 00:09:33 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: 1GSeKsb6oyE3/SjKPdmimPaXS6y4mzmgJyBUwBzrPKU=)
2: 026757CA3E2A11F19724AD26B6833773.roa (hash: yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Validity
Not Before: Jul 27 00:09:33 2026 GMT
Not After : Aug 3 00:09:33 2026 GMT
Subject: CN=6a66a1bd-ac1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:15:bd:c5:ad:39:f0:08:61:97:ea:93:81:2b:
6a:b0:31:26:f2:3b:d9:19:9d:a2:df:65:ad:21:c0:
f9:32:95:d7:bd:8a:05:96:8c:65:ae:34:49:71:82:
4d:f7:3d:9e:20:80:2c:dd:ae:4d:7a:2f:d4:27:4a:
bb:78:63:93:4e:62:6e:69:ff:1e:39:c7:78:03:07:
cb:33:62:c2:a5:72:b3:45:4e:fb:88:d9:8e:45:c9:
d6:2a:a6:6a:b5:32:cd:68:77:32:77:de:f1:4f:f9:
81:66:b9:6b:49:d3:73:71:50:37:c6:8f:1f:3c:52:
07:d3:e0:1d:0c:c2:5d:27:1f:a0:71:00:c2:76:25:
91:42:4f:00:10:a0:4f:a6:c9:b7:7a:c4:41:1f:b0:
ef:f8:ee:03:b9:fc:f9:23:a0:35:32:e6:2f:cf:92:
56:73:16:61:78:06:9e:c6:57:73:a1:48:fc:15:52:
f1:be:eb:a9:a8:5e:b4:d0:b7:11:b4:6e:c7:56:6f:
00:81:ec:42:00:96:a9:5b:67:59:fb:6c:b8:23:7c:
ad:9a:05:7f:62:08:66:ce:ed:dc:69:d6:d7:76:b8:
42:28:0a:9e:b8:3a:a9:6d:31:84:0c:a2:26:1d:06:
65:44:e8:09:f1:ac:eb:ef:23:75:9a:5a:13:c7:2b:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:8D:50:F4:9C:34:55:89:7B:37:71:EB:9D:BF:02:F2:1E:C7:EF
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fe:f1:a5:91:21:49:a1:e5:de:71:37:26:ae:a0:c8:7a:66:
f1:12:65:26:79:c6:86:89:f2:9f:d8:ca:e9:34:f4:e3:dc:1a:
67:eb:53:97:30:c0:32:97:43:dd:f7:50:34:09:6f:9d:ae:78:
a4:73:d3:72:45:7f:fe:2a:3a:17:ad:44:1b:6c:49:be:6d:c8:
79:f6:41:11:d4:96:59:ea:22:f1:c8:6b:f5:b6:d1:51:e9:1b:
b9:31:9a:67:81:b8:b5:b5:a9:d1:c5:b1:ac:6a:7a:a9:40:a2:
84:9c:d9:79:4b:46:8e:fc:5b:e6:40:09:d8:4f:72:e0:c6:a1:
69:e0:f6:d1:b7:65:5f:37:4a:9c:bb:48:26:ef:57:12:46:1f:
23:cf:b3:f7:98:cd:2d:a3:01:a1:b2:14:34:d5:ac:db:65:9f:
24:49:ab:d9:29:be:a7:76:22:fa:a4:d2:bb:18:3e:ea:b5:a1:
d3:7d:b4:af:bc:1f:4d:8a:ee:f1:aa:a4:b5:ad:08:b9:b3:94:
d4:b8:13:fa:41:d9:26:ff:e9:ee:d2:c1:ef:0a:3e:20:78:05:
36:e3:f2:93:bd:01:f7:d5:ed:3e:d2:f6:54:2e:cc:57:ec:df:
dc:20:44:96:e6:c2:cb:a0:0a:05:2e:74:f7:e0:78:a0:9f:f0:
86:a3:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:30 2026 by rpki-client