
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier: LFeZO0cs70iXfHC8hO2z0jpmqpMJh/gL06VRA6eTYHA=
Subject key identifier: 14:A0:32:BA:15:2A:27:D6:A7:1C:36:22:0D:3F:DC:B6:19:FB:DF:A1
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number: 01FF
Signing time: Sat 17 Oct 2026 03:49:23 +0000
Manifest this update: Sat 17 Oct 2026 03:49:23 +0000
Manifest next update: Sat 24 Oct 2026 03:49:23 +0000
Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: yJf08U3cPLy0zgO9Ski7rN7fKWSM/7Qi9pSBbrh5u7U=)
2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 03:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Validity
Not Before: Oct 17 03:49:23 2026 GMT
Not After : Oct 24 03:49:23 2026 GMT
Subject: CN=6ad2f043-1112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:04:e0:00:56:6b:c0:e4:af:35:6e:4c:14:
58:c1:59:be:c4:de:1b:7f:20:c2:b8:41:12:bf:79:
ab:80:b7:74:39:63:ca:18:19:ed:80:be:df:16:89:
bd:46:c2:e0:a1:5c:e9:ef:55:fe:b7:5f:4d:53:75:
5c:60:8d:33:31:08:8f:07:3a:21:9a:aa:55:4d:37:
a8:13:b4:9a:f5:98:37:5e:67:e3:f8:d4:d8:dd:41:
1e:17:ef:81:a4:0b:bc:52:00:59:bf:22:ce:35:b1:
d0:21:6f:72:d6:88:51:e6:f5:c9:2f:f2:f9:56:5a:
d2:10:ef:d2:8b:29:00:1b:4c:54:61:2e:fe:29:87:
0f:10:64:23:55:0b:c6:44:a6:af:84:25:31:4d:a4:
78:40:71:16:20:b2:d0:70:64:4b:b6:6c:5d:ed:ff:
7f:bf:10:91:26:53:f1:da:0e:31:1f:64:13:74:f9:
b3:ad:54:11:0c:9e:4e:fd:33:f5:b6:37:c0:93:f1:
48:75:3d:e3:50:9c:da:c5:98:d0:2a:b4:c7:60:85:
da:c6:34:4d:db:62:b5:ec:f8:ad:0a:38:d0:4e:97:
c8:a3:37:16:54:64:3b:a5:00:93:74:2b:fd:36:57:
15:3b:5a:d8:3e:dd:b6:35:5b:6c:d8:5f:cf:4a:24:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:32:BA:15:2A:27:D6:A7:1C:36:22:0D:3F:DC:B6:19:FB:DF:A1
X509v3 Authority Key Identifier:
keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:df:53:29:eb:b1:60:50:3d:31:12:dc:ee:74:f2:91:c4:
33:97:03:3d:fa:04:4e:1b:13:04:6d:40:fa:d3:bc:7c:de:56:
fd:b8:e9:8e:c2:66:60:9a:14:8e:09:50:0f:f4:79:3b:6e:98:
af:bd:fc:18:dc:f4:7c:f8:7f:ed:c5:fa:0e:ca:52:94:5f:e7:
13:7a:8a:ce:85:ff:7f:70:d5:0d:78:cb:08:e8:73:46:d5:12:
f4:c9:17:93:97:90:ee:bb:0c:6d:8a:59:53:27:29:07:64:34:
7b:db:20:40:53:82:ed:aa:c5:e3:2a:d5:dc:6e:3e:a5:00:b3:
63:4e:c1:4a:9f:b4:0a:f3:a3:1a:09:90:f7:58:6d:ed:dd:03:
4e:ee:61:6c:a9:d6:80:be:55:5c:86:b3:de:1e:28:51:b1:34:
de:84:a8:a8:02:30:09:37:ba:78:02:79:90:3c:64:02:bf:2b:
a4:ce:c9:51:48:ba:57:b7:1e:bd:05:c9:31:d1:5d:38:91:6f:
ad:74:01:70:53:d5:dc:80:b1:bb:68:30:7b:82:da:a0:59:ae:
f3:82:5c:d8:9f:b2:bd:f7:94:f4:0f:2d:f6:9e:d4:0d:ce:21:
34:c3:ef:53:44:7e:71:43:f2:91:42:b4:a3:a7:1f:bd:1f:5f:
b5:4a:19:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD
QkQ2RDJGNTYwHhcNMjYxMDE3MDM0OTIzWhcNMjYxMDI0MDM0OTIzWjAYMRYwFAYD
VQQDEw02YWQyZjA0My0xMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rIE4ABWa8DkrzVuTBRYwVm+xN4bfyDCuEESv3mrgLd0OWPKGBntgL7fFom9
RsLgoVzp71X+t19NU3VcYI0zMQiPBzohmqpVTTeoE7Sa9Zg3Xmfj+NTY3UEeF++B
pAu8UgBZvyLONbHQIW9y1ohR5vXJL/L5VlrSEO/SiykAG0xUYS7+KYcPEGQjVQvG
RKavhCUxTaR4QHEWILLQcGRLtmxd7f9/vxCRJlPx2g4xH2QTdPmzrVQRDJ5O/TP1
tjfAk/FIdT3jUJzaxZjQKrTHYIXaxjRN22K17PitCjjQTpfIozcWVGQ7pQCTdCv9
NlcVO1rYPt22NVts2F/PSiRK1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSgMroV
KifWpxw2Ig0/3LYZ+9+hMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG
MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv
aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc0/fUynrsWBQPTES3O508pHEM5cDPfoEThsTBG1A+tO8fN5W/bjpjsJmYJoU
jglQD/R5O26Yr738GNz0fPh/7cX6DspSlF/nE3qKzoX/f3DVDXjLCOhzRtUS9MkX
k5eQ7rsMbYpZUycpB2Q0e9sgQFOC7arF4yrV3G4+pQCzY07BSp+0CvOjGgmQ91ht
7d0DTu5hbKnWgL5VXIaz3h4oUbE03oSoqAIwCTe6eAJ5kDxkAr8rpM7JUUi6V7ce
vQXJMdFdOJFvrXQBcFPV3ICxu2gwe4LaoFmu84Jc2J+yvfeU9A8t9p7UDc4hNMPv
U0R+cUPykUK0o6cfvR9ftUoZ2A==
-----END CERTIFICATE-----
Generated at Mon Oct 19 06:30:49 2026 by rpki-client