
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier: E0WAlv7+WOzm6UWXEmkZAq/heofGvIUwqXfLGhAaFd0=
Subject key identifier: 11:31:7D:80:9B:CB:27:B8:A3:28:FA:98:97:0B:E0:8A:7C:B2:C3:9E
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial: 2D49
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number: 2D46
Signing time: Mon 26 Oct 2026 14:26:56 +0000
Manifest this update: Mon 26 Oct 2026 14:26:55 +0000
Manifest next update: Mon 02 Nov 2026 14:26:55 +0000
Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: VIOnLR74i9lR0bwZDPAGJcBK5kOKWRkBXyaLSuq+jD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11593 (0x2d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Validity
Not Before: Oct 26 14:26:55 2026 GMT
Not After : Nov 2 14:26:55 2026 GMT
Subject: CN=6adf6330-4fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:e1:d4:8b:1d:26:cb:a2:e7:68:e1:85:bd:
c3:83:9c:26:97:de:53:21:d3:a0:ad:73:2a:d2:84:
c7:06:92:c4:f8:b1:88:07:60:2f:15:de:75:eb:8f:
b2:25:2e:91:f3:e1:dd:54:c7:60:1f:ef:7c:55:d2:
68:56:8e:2d:36:30:3b:25:8f:63:d1:4e:e4:66:43:
6c:4c:35:18:77:7f:d4:12:8f:2c:61:28:a2:a5:6d:
b6:67:22:90:0c:a8:f9:60:41:e5:07:54:d3:d3:f3:
10:61:0b:35:3f:0c:7c:ae:3e:73:f5:9d:85:7b:99:
e7:57:30:c6:80:db:55:2a:e2:71:c9:7b:e8:82:04:
98:af:83:5a:7a:77:69:00:49:eb:9f:52:c4:56:ac:
6a:06:20:d5:7e:0b:0d:aa:10:16:3f:f2:f2:23:8c:
55:e8:e3:9f:8a:43:46:b0:93:43:c5:e1:b4:75:23:
28:a3:8f:33:e6:42:cf:32:58:2b:97:5f:ab:ce:33:
7a:9a:41:5a:c5:df:ba:c9:6b:c1:3c:43:5f:6c:41:
15:49:bc:4e:8f:7a:5e:22:e8:04:0f:08:1d:2f:d9:
51:8e:7b:91:2b:e1:cb:93:cb:da:ba:78:d8:4f:3f:
a6:fd:04:a9:d2:9f:c3:bb:1a:dc:53:ce:41:62:fc:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:7D:80:9B:CB:27:B8:A3:28:FA:98:97:0B:E0:8A:7C:B2:C3:9E
X509v3 Authority Key Identifier:
keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:0e:a3:d7:2e:74:2f:91:c5:58:29:13:86:7d:13:e8:26:
15:4f:2b:8a:01:32:8c:d0:fa:eb:d1:f7:36:1d:fb:c6:d1:f4:
97:2a:60:06:e4:66:a8:02:90:56:bb:9b:17:3a:51:65:37:a7:
0f:e9:91:c2:82:e8:4c:3c:6c:4c:74:bb:16:1a:4a:a2:e4:cb:
ba:44:0b:d6:90:f3:36:a8:8a:ef:ca:d0:3c:ab:c5:d1:04:a1:
17:4d:c3:19:27:ed:0a:bc:42:29:ab:2c:09:6a:0d:1a:5d:6f:
78:1f:a2:13:95:3f:7b:20:8d:8d:70:63:b6:66:87:71:21:ea:
8d:1a:73:ac:e3:b2:bb:71:b2:07:42:17:8f:d6:d8:51:f7:fd:
2e:60:55:ce:14:6b:63:32:6d:24:eb:76:60:b0:e1:b8:98:c0:
05:fe:3d:01:ec:c4:02:96:a9:88:ce:37:ff:73:9b:de:d0:76:
79:80:85:42:9c:fd:1f:2a:b4:1e:e1:ed:dd:32:e5:da:7e:7d:
b2:e6:6a:ab:42:24:9b:c1:9b:5c:8c:29:1a:00:9a:d0:a4:51:
f4:42:e1:84:1c:5a:9a:b5:90:83:30:d6:92:85:71:ee:40:f6:
6a:40:67:2c:fd:9f:ff:2c:5d:eb:f9:5d:05:04:98:d1:29:4e:
6f:1d:e5:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdFNEQxMTAvBgNVBAUTKEE0RTk1NzZDRTg2MEM4RkY1Rjk3MkFGNTkzQjQwNTRF
NzgyM0U2NDIwHhcNMjYxMDI2MTQyNjU1WhcNMjYxMTAyMTQyNjU1WjAYMRYwFAYD
VQQDEw02YWRmNjMzMC00ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFbh1IsdJsui52jhhb3Dg5wml95TIdOgrXMq0oTHBpLE+LGIB2AvFd5164+y
JS6R8+HdVMdgH+98VdJoVo4tNjA7JY9j0U7kZkNsTDUYd3/UEo8sYSiipW22ZyKQ
DKj5YEHlB1TT0/MQYQs1Pwx8rj5z9Z2Fe5nnVzDGgNtVKuJxyXvoggSYr4Naendp
AEnrn1LEVqxqBiDVfgsNqhAWP/LyI4xV6OOfikNGsJNDxeG0dSMoo48z5kLPMlgr
l1+rzjN6mkFaxd+6yWvBPENfbEEVSbxOj3peIugEDwgdL9lRjnuRK+HLk8vaunjY
Tz+m/QSp0p/DuxrcU85BYvy6hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBExfYCb
yye4oyj6mJcL4Ip8ssOeMB8GA1UdIwQYMBaAFKTpV2zoYMj/X5cq9ZO0BU54I+ZC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9BNjRGQkNFMEMw
NTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQOWZseXIxazdRRlRuZ2o1
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3BPbFhiT2hneVA5Zmx5cjFrN1FGVG5najVrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0U0RC9BNjRGQkNFMEMwNTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQ
OWZseXIxazdRRlRuZ2o1a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOeMOo9cudC+RxVgpE4Z9E+gmFU8rigEyjND669H3Nh37xtH0lypgBuRmqAKQ
VrubFzpRZTenD+mRwoLoTDxsTHS7FhpKouTLukQL1pDzNqiK78rQPKvF0QShF03D
GSftCrxCKassCWoNGl1veB+iE5U/eyCNjXBjtmaHcSHqjRpzrOOyu3GyB0IXj9bY
Uff9LmBVzhRrYzJtJOt2YLDhuJjABf49AezEApapiM43/3Ob3tB2eYCFQpz9Hyq0
HuHt3TLl2n59suZqq0Ikm8GbXIwpGgCa0KRR9ELhhBxamrWQgzDWkoVx7kD2akBn
LP2f/yxd6/ldBQSY0SlObx3lbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:41:53 2026 by rpki-client