
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier: DoqJ2zpCrg2FpxnQLyV/OlqAuY2hraHLSy6tMLtXQVI=
Subject key identifier: D6:27:8B:31:98:F1:1B:98:84:94:62:39:86:2F:E3:28:51:DA:05:0D
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial: 3599
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number: 358E
Signing time: Mon 28 Sep 2026 14:41:33 +0000
Manifest this update: Mon 28 Sep 2026 14:41:32 +0000
Manifest next update: Mon 05 Oct 2026 14:41:32 +0000
Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: DdiiGSthAWpWnFgGRTFtUW5JracJR9OUVZrO1Df4jDQ=)
2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: XRI5mHaTfsQ5P4tZOTRljrYvxsKQSjEVMe5uuC/lXuc=)
3: apiP3IaTlla9pO0ZlnjeAJly3qg.asa (hash: RKk860CiBzRAIvVVTtpUHabg1EPk6C/BjP9N4cmxXWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13721 (0x3599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Validity
Not Before: Sep 28 14:41:32 2026 GMT
Not After : Oct 5 14:41:32 2026 GMT
Subject: CN=6aba7c9d-e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:d0:64:49:fa:d0:f7:af:d8:47:12:f1:cf:
b2:4a:d1:7d:d7:85:8e:42:47:33:aa:f0:d6:db:f6:
87:54:b8:44:9f:e3:49:70:5c:f1:2d:85:ea:48:2d:
6c:e2:c3:1a:29:75:b0:c5:45:f3:b7:09:df:0d:33:
c1:f0:12:2c:8b:fc:c1:1d:82:e5:ea:ad:b0:b5:a3:
32:86:5a:c5:b7:67:9f:7f:62:c7:9d:58:92:fb:b5:
bd:7e:df:d2:5e:54:fb:dd:49:48:3e:f5:6a:33:2b:
fc:66:28:a4:f2:b4:9b:6f:21:5d:2e:23:af:07:5d:
32:c8:6c:6d:b6:0a:9f:24:10:ec:0d:13:2f:fb:c5:
8c:35:5e:b9:42:8e:03:0c:2a:52:3f:da:c2:04:20:
9a:ca:48:04:31:2f:88:f3:3f:d6:f3:58:2c:5c:8e:
75:a8:fc:99:7f:f4:f2:eb:fd:dd:f6:0f:77:4b:6e:
42:80:95:81:d9:54:c1:12:15:92:a6:3d:04:ec:b8:
8e:cc:18:4b:3a:77:e1:41:ad:ef:c3:97:94:5d:9f:
24:8f:93:b6:fc:64:34:48:1b:17:49:dc:40:02:54:
02:cf:e9:bb:f2:de:4d:5b:be:84:a6:c1:41:87:5f:
8a:45:e4:6e:bc:78:72:01:b7:9a:d0:a8:97:c7:2b:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:8B:31:98:F1:1B:98:84:94:62:39:86:2F:E3:28:51:DA:05:0D
X509v3 Authority Key Identifier:
keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:63:e5:07:2d:55:a7:cb:15:57:78:76:62:bb:e6:e3:d3:
99:d7:67:84:75:ca:dc:f4:6c:65:9c:f6:f9:61:42:3d:99:52:
99:d6:0b:d4:06:ab:e0:03:82:79:ca:4a:f0:55:e5:da:73:a7:
f5:7f:48:18:ab:65:30:f3:cc:c2:00:b8:98:cc:48:7a:47:22:
f1:50:9a:31:56:fd:00:b1:88:86:ca:2e:24:7b:f9:46:4d:e3:
0e:d8:4f:e7:3f:ee:47:f8:ea:89:64:4f:76:eb:8e:85:11:e0:
ed:b0:63:87:3c:9c:df:f1:6f:d5:6d:e0:9a:5d:5c:ef:e9:14:
97:43:38:75:9c:bc:e9:ed:3d:d0:e9:a7:e9:88:1d:75:7c:ba:
9b:89:74:f6:95:ea:ca:3f:38:38:6b:17:a9:90:39:33:57:e7:
a0:92:fe:61:0a:71:55:da:47:e3:5c:77:ac:82:36:56:82:6f:
99:dc:e7:22:e1:c8:85:a9:63:ec:12:44:44:e5:42:3d:97:ee:
7b:30:27:c9:88:b7:4b:e9:72:59:4b:7e:cb:2d:70:30:0f:25:
75:ce:7d:b6:8c:51:cd:37:81:6b:26:41:6f:85:69:b7:4b:3f:
16:ac:67:92:1b:ab:53:e7:a8:08:de:04:e4:ca:43:1f:cf:f5:
47:6e:ef:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1
OTNFRENGRUMwHhcNMjYwOTI4MTQ0MTMyWhcNMjYxMDA1MTQ0MTMyWjAYMRYwFAYD
VQQDEw02YWJhN2M5ZC1lNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYzQZEn60Pev2EcS8c+yStF914WOQkczqvDW2/aHVLhEn+NJcFzxLYXqSC1s
4sMaKXWwxUXztwnfDTPB8BIsi/zBHYLl6q2wtaMyhlrFt2eff2LHnViS+7W9ft/S
XlT73UlIPvVqMyv8Ziik8rSbbyFdLiOvB10yyGxttgqfJBDsDRMv+8WMNV65Qo4D
DCpSP9rCBCCaykgEMS+I8z/W81gsXI51qPyZf/Ty6/3d9g93S25CgJWB2VTBEhWS
pj0E7LiOzBhLOnfhQa3vw5eUXZ8kj5O2/GQ0SBsXSdxAAlQCz+m78t5NW76EpsFB
h1+KReRuvHhyAbea0KiXxytGPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYnizGY
8RuYhJRiOYYv4yhR2gUNMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE
OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa
d2V1SDBOWHFQdXhaUHR6LXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKzBj5QctVafLFVd4dmK75uPTmddnhHXK3PRsZZz2+WFCPZlSmdYL1Aar4AOC
ecpK8FXl2nOn9X9IGKtlMPPMwgC4mMxIekci8VCaMVb9ALGIhsouJHv5Rk3jDthP
5z/uR/jqiWRPduuOhRHg7bBjhzyc3/Fv1W3gml1c7+kUl0M4dZy86e090Omn6Ygd
dXy6m4l09pXqyj84OGsXqZA5M1fnoJL+YQpxVdpH41x3rII2VoJvmdznIuHIhalj
7BJEROVCPZfuezAnyYi3S+lyWUt+yy1wMA8ldc59toxRzTeBayZBb4Vpt0s/Fqxn
khurU+eoCN4E5MpDH8/1R27v3g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:32:31 2026 by rpki-client