
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: XyIbAVCMiqQMyGB5rdJQUf2itAmxhOUMGSvpHu0V4SM=
Subject key identifier: C5:B1:CA:12:B1:DC:3B:CB:09:04:F9:C8:1F:F6:6A:5D:16:6D:4C:C9
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0883
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 0865
Signing time: Tue 06 Oct 2026 21:06:26 +0000
Manifest this update: Tue 06 Oct 2026 21:06:25 +0000
Manifest next update: Tue 13 Oct 2026 21:06:25 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: ytAKK/uC9dWwe1lDP69z3vtoL2khNCOvqHh+WsuaNxE=)
2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: gHuxeT98gQTNj1REYBSI+E5acOlwMT0Pk9NHYsnA4pA=)
3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EkJd0ltndV46ARB7IXXbQAAb0c1UEHu4qbKdQ4u1IMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179 (0x883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Oct 6 21:06:25 2026 GMT
Not After : Oct 13 21:06:25 2026 GMT
Subject: CN=6ac562d2-d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:ed:a1:45:c7:20:24:9f:70:99:39:20:6f:
54:cd:31:01:d9:0c:b7:b2:27:8c:ed:fe:68:b4:b1:
a7:31:78:13:db:72:51:8f:4a:4c:72:f7:c4:50:00:
09:6e:0d:b4:bc:9b:de:ac:ec:8b:65:9d:fe:15:b3:
e8:a6:73:b9:05:39:17:ac:7d:bd:7b:ef:83:e1:06:
cf:ed:00:d8:b7:7f:26:61:96:c9:f8:10:2a:0c:5c:
91:ea:ef:90:d2:84:d7:26:4e:e7:56:7b:43:cc:67:
d0:4e:cc:8a:d9:9e:07:97:5a:2d:8a:3f:1d:b6:44:
50:79:bd:9c:d3:12:56:08:28:08:8e:74:ca:29:76:
94:cf:b8:c2:4e:00:c8:f9:e6:cb:cc:f3:eb:26:ec:
6d:73:36:78:b5:10:14:22:27:5a:34:97:20:b9:0b:
a9:57:0c:0c:16:d3:00:05:11:1c:b0:a0:37:6d:b7:
d5:92:7e:2c:b6:80:19:4a:6d:cb:3e:fe:6b:22:bf:
0f:ac:6e:cb:21:93:a0:c7:2b:00:5c:d1:a9:1d:51:
27:61:36:00:b7:34:85:09:2a:15:b6:97:5c:d3:9b:
08:81:e3:83:7a:e6:03:88:7f:e4:bb:9f:fa:71:2a:
7e:22:9c:9d:d0:40:fd:67:ef:0c:ad:1e:99:32:6e:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:CA:12:B1:DC:3B:CB:09:04:F9:C8:1F:F6:6A:5D:16:6D:4C:C9
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:91:0f:19:84:48:73:37:f4:a6:df:08:81:d6:2f:57:10:73:
c7:fe:ed:a7:bb:f2:97:e3:83:fb:38:4a:3a:49:bf:bb:96:41:
9b:52:69:f7:b5:6d:27:40:81:af:5c:10:ed:38:2e:2b:7c:38:
e1:b0:14:fd:c7:bc:73:d1:4b:60:95:2f:2e:e4:8d:cc:16:0c:
b9:1e:e5:36:5f:d0:b4:79:6b:6e:53:e5:61:29:aa:71:0c:fb:
ec:12:39:95:90:9b:50:8b:dc:5e:ad:7c:e9:b0:ff:1b:93:ef:
b7:32:19:e5:66:9e:28:83:bd:d7:97:9e:53:49:eb:d0:25:51:
24:b1:73:c3:00:fb:2c:c8:82:39:e3:ee:5d:45:2e:24:04:a5:
6f:29:c8:0f:53:b9:ca:11:39:d8:08:20:b1:5c:47:04:15:6a:
05:2f:65:c1:8e:87:78:19:6f:d7:57:44:4e:88:e0:5f:95:d4:
ef:8c:02:eb:f5:8d:e3:00:27:fc:4f:e0:1a:dd:a6:fc:05:0d:
40:11:01:4e:ca:de:18:e1:13:6a:08:93:25:a9:ba:87:ce:99:
a7:88:51:f1:76:b4:49:3d:1f:9e:29:1e:eb:7a:04:81:55:85:
41:da:92:b4:1e:bd:c2:46:df:27:fb:6b:3d:e4:7a:22:f2:91:
f4:2e:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:07:28 2026 by rpki-client