
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json)
Hash identifier: RkXMs31rVv/HWG8tTu3VfBiExVhb4FIw0Y1/WVEaa6Q=
Subject key identifier: 82:A6:90:7C:63:5F:13:96:D0:BD:5E:F8:15:7A:BC:7B:4E:17:40:F1
Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Certificate serial: 05F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
Manifest number: 05ED
Signing time: Fri 02 Oct 2026 23:15:24 +0000
Manifest this update: Fri 02 Oct 2026 23:15:23 +0000
Manifest next update: Fri 09 Oct 2026 23:15:23 +0000
Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: br4lp5hSR7KKXT0uuDi18oI4qi6aOV3AUtWQhk+wDRI=)
2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524 (0x5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D
Validity
Not Before: Oct 2 23:15:23 2026 GMT
Not After : Oct 9 23:15:23 2026 GMT
Subject: CN=6ac03b0c-5baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:44:d0:27:c9:02:50:e9:0b:de:6f:d1:ba:
f2:6c:3b:38:fa:e6:7b:51:36:9b:91:ab:77:79:02:
27:3a:d2:9c:e1:a5:da:03:76:b4:c7:bc:5d:b5:d3:
5d:db:fb:c0:f3:a6:05:55:c5:e3:59:6e:28:aa:75:
62:90:6e:3f:fb:4d:53:85:19:7f:8b:f7:f0:74:d5:
ee:2d:79:d9:df:8a:80:04:26:6b:a1:b6:5f:03:7c:
20:68:2a:73:e5:4d:4e:47:70:86:a5:97:b3:f7:7e:
f8:81:56:8e:3b:fa:7e:6f:64:83:fa:e8:46:03:3f:
e2:5e:da:9b:47:90:3a:95:64:b3:83:76:1e:e9:0a:
6a:09:c5:88:9f:6f:8e:80:62:32:01:57:fb:d2:e3:
b3:c9:39:52:5d:79:82:74:ef:bf:e6:61:c2:b3:fd:
ec:1c:25:9e:9b:27:2f:d6:4e:ee:04:9c:80:a9:68:
76:66:a6:73:0e:ff:ac:f3:da:35:d5:4e:de:fc:2c:
84:a4:c4:e4:f5:ea:c1:69:2b:b2:56:f4:40:cd:46:
2c:a1:d2:80:41:f7:6f:2c:a7:53:16:f0:3f:48:c0:
bd:f9:3b:23:ef:f0:b8:cc:ef:c4:31:09:f4:2d:33:
9b:11:4e:c2:05:0e:83:29:af:8b:b9:36:4f:2a:cf:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:90:7C:63:5F:13:96:D0:BD:5E:F8:15:7A:BC:7B:4E:17:40:F1
X509v3 Authority Key Identifier:
keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:d2:1b:b6:08:fc:67:b3:6c:a2:a8:a6:f4:24:b1:00:1b:
b9:b0:23:92:9b:df:b0:1b:e7:6c:ab:03:a5:e5:05:48:d4:2d:
0d:88:21:43:ac:2c:e6:09:68:b3:fd:0b:49:f1:86:43:ed:0a:
0c:68:c4:31:fc:c8:6a:71:e4:f4:10:8b:6f:c2:29:24:18:01:
01:10:de:d6:73:0a:fc:d3:6e:60:08:c2:7b:20:cf:48:07:6f:
f3:36:46:cb:12:53:7e:f9:bf:8a:61:82:7e:bc:89:ce:10:d3:
02:b0:32:0d:35:5a:b8:ed:5f:dc:78:d1:95:87:b3:a0:b4:bd:
e5:b5:ef:5e:89:45:6a:f0:26:69:19:20:ad:9c:75:2e:fe:3e:
17:a8:f4:6e:47:be:50:76:95:6a:89:16:b3:fb:f9:8d:5f:90:
5c:a3:d3:69:71:02:c2:d4:fe:d4:18:c9:51:1a:75:c8:49:11:
6c:3e:13:ff:b6:b3:d2:ab:71:13:10:4a:73:21:52:f4:7b:75:
d2:00:62:b6:d8:35:be:24:01:48:3e:19:8c:2c:e5:7a:f5:04:
dd:0c:31:65:32:05:e2:12:61:48:37:47:5d:b0:46:86:e9:96:
9c:83:23:0e:58:3e:42:e8:e8:f7:39:12:ec:4f:d4:44:27:46:
13:c7:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:17:12 2026 by rpki-client