
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier: Q3IWAfFFGcbDSPZXCaQiNJx5q3lJwEj3y0eHpZ0QL+8=
Subject key identifier: 2F:17:72:07:04:FC:E8:39:55:75:14:8A:34:1F:D0:C6:7B:FF:88:8E
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number: 086F
Signing time: Thu 16 Jul 2026 21:06:13 +0000
Manifest this update: Thu 16 Jul 2026 21:06:12 +0000
Manifest next update: Thu 23 Jul 2026 21:06:12 +0000
Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 1upUPivjWvCnvETA+WfHfSYCmZ3s5VfQA/NS8pCmIhY=)
2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 21:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Validity
Not Before: Jul 16 21:06:12 2026 GMT
Not After : Jul 23 21:06:12 2026 GMT
Subject: CN=6a5947c5-8c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:13:a6:04:87:af:e4:4f:87:b8:a3:54:44:
c2:ee:a9:bd:0b:b9:3f:73:07:21:c1:ca:ba:80:15:
70:38:ad:75:c2:1f:85:79:3c:2a:e9:9a:37:20:6e:
aa:23:a1:15:ed:0c:c0:8c:8c:d9:6d:b6:42:64:ee:
cc:2c:37:93:a5:3a:75:06:76:34:e3:8e:14:5f:77:
31:2c:7e:19:ec:c5:2b:8e:c1:bb:57:8d:7a:ff:4a:
89:c5:0b:28:48:05:3e:ed:da:c7:e8:fc:14:45:01:
a2:b5:b4:af:9a:64:a4:7b:4a:53:f0:a5:db:c6:d3:
4b:c5:47:6b:13:c1:c5:62:18:6b:e0:1a:8c:49:3c:
af:80:87:2f:9f:f7:f2:a0:4c:cb:13:fe:a9:ba:f5:
a6:02:5b:10:da:fc:96:b6:cf:c5:b3:79:4b:33:b4:
d3:8b:67:03:73:91:b3:64:4a:4c:26:e8:58:d4:d9:
6b:20:ff:25:b0:fc:c5:72:30:75:03:fd:42:42:f8:
3f:0d:0e:a4:53:f6:d5:a3:87:95:cb:57:a8:95:0c:
0b:4a:b6:46:11:21:38:96:9a:52:23:fd:77:d5:f7:
03:00:cd:bb:92:74:28:ca:4b:0c:53:33:89:31:78:
5d:86:97:23:59:91:ef:7b:c8:fe:02:a5:bf:12:03:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:72:07:04:FC:E8:39:55:75:14:8A:34:1F:D0:C6:7B:FF:88:8E
X509v3 Authority Key Identifier:
keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:dc:db:91:74:87:1f:45:c6:04:c7:60:f8:6b:ba:77:ef:
7d:fe:4d:92:51:14:14:38:e1:b8:95:15:54:0c:8b:5e:17:7e:
11:9e:d2:59:71:97:88:9c:59:c3:75:25:8c:3e:2a:49:06:25:
28:4b:ae:a5:46:3b:77:f7:b1:5f:9c:b3:12:22:8c:e9:25:57:
89:cc:98:7f:8d:9f:9b:17:41:ea:63:06:90:14:d8:45:29:4c:
45:25:fb:9e:e1:0b:4a:c7:9e:33:21:34:90:1e:19:d6:90:58:
9e:10:59:62:ee:46:c3:01:a5:52:ad:5c:58:8e:86:b6:2f:47:
ba:9c:e3:be:02:30:77:e7:14:da:ab:94:3e:e8:63:cc:c7:18:
88:bb:0d:a5:72:74:2c:77:69:24:7b:19:27:6e:27:19:87:a8:
1b:26:36:fc:db:43:bd:61:e9:e4:32:0e:74:0d:05:cb:2d:b8:
01:2f:67:ed:a1:64:e4:9b:cc:64:2c:2f:ad:44:41:af:fd:fe:
22:e5:8d:8d:48:64:04:f6:cc:5a:60:a7:ee:bb:cb:84:c7:65:
6b:bb:2b:c9:c1:08:05:f1:d9:9f:48:0f:30:7f:e4:b4:d7:39:
7a:2d:15:0f:13:58:54:80:b0:f0:c0:32:f8:94:98:de:0c:82:
8d:09:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:10 2026 by rpki-client