
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json)
Hash identifier: dmpPvoUaJ9TSzjJGrzsfanaaFRJOsmz50nGhlZL4srM=
Subject key identifier: 94:66:79:16:D6:32:34:75:63:EE:12:E0:73:2F:D1:6D:C8:5C:E7:7D
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial: 1FFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
Manifest number: 1FE8
Signing time: Sun 04 Oct 2026 15:59:16 +0000
Manifest this update: Sun 04 Oct 2026 15:59:16 +0000
Manifest next update: Sun 11 Oct 2026 15:59:16 +0000
Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: /lW0JkiG/NuYky0WpF/84x5tPBF9+1S/4FkRhNbvD8g=)
2: B3FD34B086EF11F19E006003A7EE528E.roa (hash: jUd6E1y9akwpYW++1YnOWiJy/vljpSRRO3tXCJkUkr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 15:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8186 (0x1ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Validity
Not Before: Oct 4 15:59:16 2026 GMT
Not After : Oct 11 15:59:16 2026 GMT
Subject: CN=6ac277d4-d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:2b:57:7f:46:6b:87:92:a3:02:ef:be:c0:
72:d8:59:46:3b:96:be:6d:a8:67:ce:50:fb:63:4d:
84:66:80:37:fe:50:92:20:0f:84:a2:51:28:37:15:
5f:ff:52:e2:f9:f2:09:41:40:07:47:d1:19:7c:87:
9a:6e:9d:e0:c2:55:59:57:c7:1b:54:ed:f8:96:d1:
f5:77:c7:8f:18:2f:bc:c5:d7:a6:a7:ec:65:9b:9d:
ed:c5:8f:31:1b:ee:2a:4f:eb:85:37:50:7d:ec:ae:
ff:65:d3:cc:d4:cf:60:09:97:ec:a6:75:bb:d6:71:
b1:cf:1b:37:3b:44:cd:a1:b3:36:9a:ba:d9:0c:a3:
ef:57:88:58:a2:c0:9e:a7:47:e5:6e:2f:92:88:7c:
9d:81:b5:8d:de:a4:d0:4b:cc:c3:63:16:15:e7:f3:
ec:70:06:57:62:90:dd:cd:51:96:9f:81:6b:5f:93:
b3:71:da:5c:61:73:42:8b:60:a4:50:c7:62:83:77:
0f:40:94:31:e5:7f:1b:80:d0:f7:d5:fd:ce:84:15:
ac:e8:f9:dd:1c:be:e5:fd:5d:60:80:d3:66:fe:ec:
48:a9:c5:a9:d0:74:44:26:38:5a:15:d9:c5:ba:81:
98:03:2a:d1:71:9a:26:a7:c0:f7:4c:9d:f9:56:af:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:66:79:16:D6:32:34:75:63:EE:12:E0:73:2F:D1:6D:C8:5C:E7:7D
X509v3 Authority Key Identifier:
keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:ec:75:e8:cf:4e:60:91:2e:59:c7:34:7f:fe:52:9a:fe:
62:de:a4:ba:fa:0d:ea:6e:a5:c7:88:4f:e5:cb:ea:6e:cf:02:
95:fe:9c:8b:94:4d:5c:0e:c8:26:5a:8c:2e:87:8d:c7:02:24:
30:24:7f:aa:79:aa:be:7b:38:1e:dd:c0:9f:63:6c:f7:f9:59:
a5:4a:af:42:17:7a:cf:d9:c4:4f:7b:08:4d:39:7b:5c:ad:f7:
41:79:60:8c:7a:e3:95:33:a8:fa:bc:ee:7e:27:28:fb:87:ed:
d0:50:f9:b4:2a:e5:d6:21:98:78:99:5e:80:91:4f:a5:bb:56:
f3:2d:72:29:50:3b:af:83:0b:71:87:ad:91:66:29:95:6a:55:
a0:30:88:4f:a0:18:93:a5:a6:34:cd:e2:56:e4:4b:68:07:3f:
1c:44:30:e2:c3:1e:89:c5:34:3b:79:5d:56:b6:46:15:77:d8:
be:c7:16:25:3b:1a:b1:62:c2:81:15:d4:9c:1a:3d:66:91:9d:
3e:72:63:a2:48:82:c8:04:2f:4c:a1:97:04:52:db:14:70:a8:
6f:39:ff:93:7b:70:d7:a1:f5:c0:6b:de:64:da:44:34:00:dd:
9b:a7:30:a5:6b:68:72:d3:30:16:dc:8a:15:38:4d:dc:5c:e0:
1e:2d:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:01:00 2026 by rpki-client