
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier: elR6LeDs73LXXQH3l7V8kbtmDYu8llc7O8I8D9rHLLg=
Subject key identifier: 9A:B9:93:5E:12:BC:A2:50:97:D7:B8:C2:BE:CE:F4:73:B7:3A:2F:79
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial: 2D2F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number: 2D2C
Signing time: Fri 04 Sep 2026 14:26:23 +0000
Manifest this update: Fri 04 Sep 2026 14:26:23 +0000
Manifest next update: Fri 11 Sep 2026 14:26:23 +0000
Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: xTKwUQHOd9JfP9dagJ4wGPk5T9SIPgatGfmmkSCCNrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11567 (0x2d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Validity
Not Before: Sep 4 14:26:23 2026 GMT
Not After : Sep 11 14:26:23 2026 GMT
Subject: CN=6a9ad50f-7480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:5d:2a:8c:5a:4d:88:95:77:a6:81:7f:ae:
c9:c5:74:19:f3:ac:aa:e9:b4:d8:b5:2a:8c:6c:a3:
0c:72:33:2e:ed:1f:8e:32:5a:4e:a1:83:b4:a6:26:
19:70:fe:1f:77:c0:b9:6a:20:20:b3:b1:4f:5a:fb:
8d:44:84:c9:a2:9c:93:42:85:22:8f:30:ef:d8:1e:
c3:1a:27:15:a1:11:e3:44:d8:20:48:3d:13:d2:63:
9f:b5:1c:2e:1f:c6:d6:32:ea:e8:ae:0a:d0:0c:eb:
67:2a:25:f2:18:08:41:a9:9e:f3:8f:1d:6e:69:d3:
7b:85:cd:38:a4:58:7f:9b:67:e2:00:88:7f:8a:c7:
24:83:74:17:35:db:58:4a:f6:6b:7c:93:ce:89:4c:
80:0a:8e:00:60:c2:a1:64:76:8e:73:26:3a:d7:d6:
9d:a0:45:c4:d1:8a:02:24:82:d1:d1:36:8e:e4:03:
a4:b7:27:9d:40:8c:b2:03:95:0e:5a:51:52:53:92:
df:98:be:5b:1b:15:42:9d:e8:27:03:49:fe:75:f9:
1a:f4:df:9c:7e:65:09:65:be:b8:02:0f:1c:17:9c:
96:bf:fd:34:f8:d1:14:df:e7:5c:39:d9:2b:4a:69:
28:16:98:71:d5:49:22:e6:b3:62:f2:a0:a6:0e:6d:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:93:5E:12:BC:A2:50:97:D7:B8:C2:BE:CE:F4:73:B7:3A:2F:79
X509v3 Authority Key Identifier:
keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:fe:d1:3d:c4:d1:c0:9f:30:6a:6e:e5:d9:71:52:b7:26:c6:
0f:d6:01:e9:30:8b:68:f7:e6:05:da:1a:2d:ff:e8:a5:1c:a6:
ab:f2:92:d1:d8:5b:09:bd:0d:1a:09:43:42:2d:cc:04:b9:68:
3e:58:5b:4a:93:2d:08:77:41:88:0e:c6:c4:a8:9f:7d:7e:61:
26:11:33:4d:43:e2:c6:2c:bd:41:ec:3c:a8:9a:2a:3f:8f:06:
30:1c:38:8a:0a:31:6f:be:e4:10:40:4d:3e:27:45:b0:56:86:
1b:61:da:ae:2d:f3:ea:cc:db:47:f2:6f:cf:63:79:bd:07:13:
3c:93:c9:8c:22:dd:1b:93:04:05:4c:38:5a:7b:03:c8:7f:c6:
ef:bb:62:ef:8d:0d:d2:d3:b7:24:ab:34:53:9c:6a:92:fb:25:
dd:0a:fd:a3:1f:b5:c3:b5:8a:13:4d:fb:12:d2:82:a5:3a:2d:
f6:9f:cf:79:61:a2:bd:e9:1c:57:bd:53:47:25:09:ad:8e:2c:
c5:b7:fd:50:4e:1b:e5:ca:e2:69:30:a1:6b:2d:85:a8:ff:51:
96:ef:88:1c:00:2c:73:19:c5:8a:a5:cb:ac:fb:27:32:d7:39:
a9:a6:a1:9e:d1:bb:5d:0b:a3:60:9a:6b:9f:03:01:c8:4a:66:
3f:05:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:17 2026 by rpki-client