
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier: noWeXIy2ivC1myjwyGC7Ri/GUKb/WmvUMb56dL86jns=
Subject key identifier: 4B:35:BD:B5:6B:08:14:9D:CF:FB:02:8D:88:42:C9:60:F9:35:70:11
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number: 01C2
Signing time: Mon 19 Oct 2026 05:38:10 +0000
Manifest this update: Mon 19 Oct 2026 05:38:10 +0000
Manifest next update: Mon 26 Oct 2026 05:38:10 +0000
Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: y2JZ9I/gd7PRMeI3xrr7TeNB6z5Bbc1/5xuL2pVTo0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Validity
Not Before: Oct 19 05:38:10 2026 GMT
Not After : Oct 26 05:38:10 2026 GMT
Subject: CN=6ad5acc2-46a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:46:dc:79:f7:82:bf:a7:17:c2:2f:6d:e8:
5a:dd:40:ed:90:56:6a:e5:ce:39:1c:f2:e8:e3:2c:
4a:c9:2f:86:db:0e:95:b3:3b:9d:0d:4d:10:74:68:
73:b2:89:1a:b2:76:78:af:fc:f1:8f:fd:2d:9d:bf:
8e:ed:26:84:01:db:31:d8:d6:be:1c:ec:79:5b:77:
fc:db:4e:cb:06:54:00:5c:8c:9d:ee:ff:fe:f0:57:
04:f4:94:5f:2a:71:3e:ac:72:81:54:71:84:1f:6e:
a5:67:a8:11:c2:24:58:f3:46:92:d0:d9:d6:29:0b:
9f:0f:f7:9b:3f:2f:4c:14:44:40:2f:f7:80:92:d7:
7a:fb:3f:34:99:1c:dd:99:f2:14:d8:2e:ce:d2:9d:
f4:fb:8f:15:de:e5:f9:3e:0c:e1:7e:06:f8:02:06:
1c:b1:b9:da:39:05:38:06:7f:94:0e:a4:57:f3:ec:
2f:65:dc:84:57:71:0f:9c:8c:8c:db:ec:fb:92:8e:
10:c7:be:65:78:f5:ad:a5:44:09:a6:cc:6a:6e:c6:
99:aa:3c:ff:56:be:33:a2:9c:b3:39:30:1d:64:64:
01:62:52:46:51:51:35:cf:10:80:51:f7:d8:a6:a6:
c4:ac:3d:fb:a5:c5:f1:e4:83:1b:aa:77:2c:40:22:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:BD:B5:6B:08:14:9D:CF:FB:02:8D:88:42:C9:60:F9:35:70:11
X509v3 Authority Key Identifier:
keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:ba:d9:f3:cc:82:1f:4c:6e:51:5a:a3:44:39:e2:78:a5:
fc:69:c0:63:fb:ea:b2:6e:ec:d0:fc:bf:78:d1:5c:90:73:a2:
56:79:48:c2:e8:6f:80:c4:3e:b0:a7:87:89:d9:4e:f4:bd:66:
7f:7a:a2:00:a7:d8:41:55:5a:45:a3:0c:e6:8d:88:1d:56:23:
83:5c:55:35:0d:6e:cf:6d:d2:d2:91:0f:3d:9c:78:2d:fc:9c:
ef:ff:8e:9b:6f:44:e4:79:b3:f2:1a:cd:67:56:27:00:c3:91:
5a:7c:41:4f:f0:d3:a3:91:b1:56:1d:8a:ef:49:83:24:5b:bd:
a3:9f:6f:89:e2:27:b3:f4:9d:6a:bb:a5:ac:eb:03:2b:cd:1b:
ff:4c:33:0c:1a:d5:43:c0:02:a5:e1:eb:46:53:99:4b:01:cf:
a7:fd:35:94:22:eb:d9:0e:c4:7f:22:40:72:fe:f5:d4:cd:03:
16:eb:ea:9a:a1:4c:a2:d9:3b:bd:ba:76:9d:78:1a:f1:0a:9a:
d8:00:18:10:18:88:e0:75:9b:78:b7:7e:d6:c2:1a:c4:78:bb:
53:90:89:54:76:12:b8:1e:08:5d:13:ba:30:7e:5d:24:75:5d:
cd:cc:a5:06:30:bc:43:07:65:13:4c:b6:d0:13:2a:d7:33:b8:
6e:59:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:25 2026 by rpki-client