
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier: BBftWzEc3EryI1DDDSswADmHiAr9OAadxzbtiFyecJI=
Subject key identifier: 92:D4:77:51:BA:48:D3:6B:D5:5E:98:D2:48:95:4E:A2:0E:72:63:14
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial: 03A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number: 039F
Signing time: Sun 01 Mar 2026 01:36:07 +0000
Manifest this update: Sun 01 Mar 2026 01:36:06 +0000
Manifest next update: Sun 08 Mar 2026 01:36:06 +0000
Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: Lmq1iyzWLGt48ncvJ7zYS32afhow4bRzLfbUKAPczM8=)
2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Validity
Not Before: Mar 1 01:36:06 2026 GMT
Not After : Mar 8 01:36:06 2026 GMT
Subject: CN=69a39807-84ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:70:5e:b7:d7:e4:4a:59:7e:c9:1b:29:12:
39:b0:17:10:dc:d3:72:88:5d:b4:09:24:52:7e:b9:
52:ed:3f:72:fb:ca:ca:2b:5b:c7:b2:26:7f:27:3e:
b7:f9:63:bf:71:89:07:85:90:e9:5e:ba:cc:55:69:
5e:7f:f4:ce:79:72:ef:88:bc:89:f0:a4:54:11:9b:
89:7d:56:99:67:28:a6:cb:d1:54:4c:31:c4:9e:bb:
38:c9:ef:b4:71:6c:f9:a9:82:3a:94:ed:5c:3e:06:
93:2f:fe:1f:2e:0f:83:2f:50:60:cc:f5:6e:c0:6d:
66:09:c1:c0:50:fa:7e:76:26:e4:f0:74:9a:32:d2:
6b:87:6b:8e:0c:93:3f:da:63:0e:8f:a7:e5:fa:ae:
ed:73:2f:6e:57:21:67:20:ea:cf:24:3e:0b:6e:68:
dd:21:df:e7:e8:3c:2e:46:ec:23:dc:30:70:f1:ed:
19:64:d2:e7:2e:08:d0:90:e6:e0:b8:fb:d3:b2:10:
70:99:1a:95:ec:04:7a:70:1e:3f:1c:9e:7f:5d:fe:
82:96:e1:c7:be:d7:be:41:8a:6c:e9:c1:e9:95:2f:
1a:73:77:ca:22:7e:7a:f7:52:81:ec:ad:b6:b4:16:
6b:ae:a4:4e:7f:76:4f:f2:20:f1:fc:0e:0f:a4:ce:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:77:51:BA:48:D3:6B:D5:5E:98:D2:48:95:4E:A2:0E:72:63:14
X509v3 Authority Key Identifier:
keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8d:c0:be:a7:a9:1a:cc:c8:e3:f3:a3:9c:d6:ac:05:6a:22:
34:cd:0d:bb:57:fd:7f:01:0a:f1:30:97:84:f3:d3:d4:41:31:
ec:ce:d9:50:07:2b:45:a0:6a:e3:2c:a1:75:c8:a0:87:a4:78:
01:a5:66:b3:ff:d9:93:9d:78:72:fa:00:fa:61:4a:2e:cd:3d:
f7:36:cf:b8:6a:f4:01:a9:9c:74:24:1c:58:e2:79:c2:85:af:
48:fd:d7:cb:47:61:ff:d3:f5:81:10:d4:f5:27:6b:f0:ff:2d:
51:9e:13:1d:2c:fa:d9:06:a7:0c:7b:01:3f:cf:7d:81:87:79:
a2:27:90:4b:84:83:7a:51:05:50:e6:47:6a:57:5a:6a:f8:d6:
b7:ed:b4:b1:54:8c:5d:fa:08:84:6e:52:91:25:c2:a0:a2:2b:
7f:4c:f6:f7:89:93:8f:ae:61:25:c8:93:44:8f:2b:9d:d0:99:
b2:66:7a:c6:e8:67:99:91:1e:7b:9a:ff:d4:fd:d5:50:d6:18:
79:fd:e2:7e:4f:74:c1:6d:49:ec:13:27:e9:92:ce:1b:08:0b:
4f:21:ac:f6:df:fc:e1:1a:e7:7e:ed:00:18:e4:f0:e5:bd:1d:
78:1b:8d:e8:cf:8e:63:9b:91:8a:f9:8e:39:87:7b:0e:31:7d:
d7:19:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:48 2026 by rpki-client