
$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier: /nHRmR443IvBSYVt5GEUJDhRrf+XqhkISidTDk6yIJk=
Subject key identifier: 68:3E:02:D2:4D:7D:23:86:FA:3A:6F:67:B2:6F:56:87:D7:C2:61:FE
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number: 053E
Signing time: Sun 01 Mar 2026 00:03:14 +0000
Manifest this update: Sun 01 Mar 2026 00:03:13 +0000
Manifest next update: Sun 08 Mar 2026 00:03:13 +0000
Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: RrNG3nPNFl8zMlmBdiB//xUKF/vZwjrDHumPNMmXtY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Validity
Not Before: Mar 1 00:03:13 2026 GMT
Not After : Mar 8 00:03:13 2026 GMT
Subject: CN=69a38241-b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:2c:3b:38:c0:19:b9:3a:f7:cf:b4:0f:d9:
06:a7:46:b1:dc:4c:a4:7c:bd:b2:45:52:d4:b3:ba:
f3:ab:ab:1f:0c:53:a5:35:08:6f:a2:a2:9a:07:6e:
ac:0a:3d:ca:a6:17:2a:df:45:c6:c6:10:e0:f1:1b:
e2:f7:12:05:a1:d5:22:85:41:4c:a9:e0:f6:15:19:
b0:12:86:98:47:0c:1c:3c:24:23:8c:cb:e6:07:43:
71:d4:75:27:e0:5d:30:21:8c:3e:63:8d:a8:ec:42:
d7:f9:e5:ac:e9:aa:0b:c4:b9:40:56:09:bd:a9:22:
28:9d:b7:29:54:f6:bb:48:48:64:89:38:9f:f1:2c:
b0:88:9a:09:d7:29:d3:b6:3f:8d:53:4f:0d:20:68:
80:90:91:22:14:44:aa:ee:b4:cf:22:08:dc:15:9b:
98:e9:cf:d1:63:44:24:96:c4:0f:6f:25:46:a1:0f:
da:13:89:66:85:56:91:39:bc:46:eb:d7:b4:e6:c0:
83:89:54:44:f7:31:13:2e:6a:c5:3e:db:75:9d:89:
d0:7b:9c:9f:12:4f:57:1f:16:89:65:21:e6:35:bb:
dd:66:13:82:34:a0:a7:6e:5b:78:fd:14:72:8e:cf:
3f:3d:f1:6e:c4:ff:bb:d5:13:de:6d:ad:25:ba:00:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:02:D2:4D:7D:23:86:FA:3A:6F:67:B2:6F:56:87:D7:C2:61:FE
X509v3 Authority Key Identifier:
keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:0e:f1:39:38:29:e3:c8:38:5a:0a:08:15:1f:d9:fd:ea:
2a:f5:81:1f:de:e3:97:b4:f2:93:83:e0:72:d2:7d:b1:71:11:
05:63:1f:ab:c9:6b:fe:3c:d9:ef:21:d3:ed:89:f6:1d:98:11:
ac:86:08:2f:fa:01:62:10:71:51:53:9a:b0:86:aa:3c:6c:36:
98:c4:f7:b5:4d:58:47:44:01:2e:18:bf:82:a0:66:9a:09:4d:
64:3c:5f:0d:26:46:af:6c:f0:bf:42:c2:29:26:0f:cb:ca:b7:
a7:ed:20:7c:e5:e7:30:1d:24:a2:cc:c5:ae:16:74:3f:24:8b:
75:8f:4e:16:bc:5c:95:99:7f:3f:f2:3c:10:b2:fe:10:13:8f:
04:3a:36:17:26:29:c4:94:53:59:15:14:62:7c:b1:10:a2:59:
0d:fe:81:f6:f6:26:76:fb:f3:6d:ed:68:b4:2c:c9:40:70:47:
a9:13:40:6a:24:20:6a:cf:66:6c:49:05:7e:13:21:1f:54:1f:
2e:a8:9a:20:7c:cf:12:de:60:45:d9:65:d4:60:ad:f6:11:08:
58:5c:08:f7:5c:c7:3e:a2:16:b3:10:26:dc:5b:6c:31:51:1c:
17:aa:aa:c0:3a:87:98:23:c4:85:ed:0f:de:66:3c:33:95:e5:
ec:89:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:30 2026 by rpki-client