
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier: w3dUzzDJ3Aq3gqlsjxQYol0NTej4aQ3fx04+n74SR0U=
Subject key identifier: 77:C9:BA:1C:9A:4F:DD:48:C8:F4:0F:AF:E9:59:75:B3:E9:9E:EE:63
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 03C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number: 03A5
Signing time: Mon 05 Oct 2026 00:44:22 +0000
Manifest this update: Mon 05 Oct 2026 00:44:21 +0000
Manifest next update: Mon 12 Oct 2026 00:44:21 +0000
Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: k665x5yc8IxlrmPWBPb29mOKioyG3LFwsAwOOjNuOWc=)
2: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: Hqy1LRVKHy8Ftub7eFKosjYqL2kysNH4BmXhj25dFeY=)
3: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: mf0wGIWAXtcqp5A/STrLzJZxEHdPx6LC7pC19PfOQBM=)
4: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=)
5: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Oct 5 00:44:21 2026 GMT
Not After : Oct 12 00:44:21 2026 GMT
Subject: CN=6ac2f2e6-da01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:f1:5b:f5:00:34:6d:62:26:12:9f:61:66:
90:ae:fd:11:20:b7:c0:88:f7:18:3d:1d:cf:6f:c1:
f8:95:c5:24:c7:84:fc:37:f0:67:59:e8:b9:7d:f0:
ef:dd:36:77:83:23:c2:07:27:f5:36:e8:cf:b4:d2:
c2:01:4a:4e:08:4b:92:b9:bd:5b:a8:2f:ff:72:63:
d1:97:ae:79:db:2a:04:e7:ae:a7:f6:33:86:70:c2:
89:32:98:51:d7:cb:4c:5f:08:fa:34:36:b2:df:91:
3a:ce:20:63:6a:b1:b6:24:3a:b3:77:00:37:77:d4:
39:31:6c:29:07:1e:76:75:ef:fc:13:dd:05:f1:22:
a3:60:39:2a:2f:32:57:47:79:ef:28:b8:0e:2d:d9:
ec:b1:99:41:e7:ef:fd:4e:53:02:d9:6b:c5:55:26:
47:96:cc:c1:3b:af:2a:5c:c1:50:d4:52:ed:db:71:
8c:e5:4c:f7:3a:f7:a3:ac:c1:90:bc:a7:d4:0f:b0:
ca:a2:e9:7b:77:39:94:84:69:30:41:85:b4:c7:d0:
bc:e1:06:bb:2d:a2:ea:23:bb:1f:f3:65:90:94:8c:
0f:4c:43:82:ee:cb:5c:db:ef:52:a6:18:1e:9c:89:
75:31:51:a9:f6:46:f8:e5:64:d5:9b:69:28:e6:c1:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:BA:1C:9A:4F:DD:48:C8:F4:0F:AF:E9:59:75:B3:E9:9E:EE:63
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:8b:87:ec:97:b5:68:d4:90:72:fd:36:39:56:bb:ce:7f:
8b:67:27:83:e1:04:d1:bf:b9:fb:cd:18:7d:19:ad:56:eb:34:
68:f4:29:51:81:b2:ad:31:cb:f3:cb:2a:4e:89:fb:56:02:df:
e5:29:35:aa:29:f8:13:7a:5c:c9:99:74:95:d6:67:1e:23:d9:
fb:12:78:46:94:01:04:27:30:bd:c5:ae:28:ec:07:bd:dd:ae:
a7:26:5f:6f:15:5e:64:cc:e3:b4:3f:a3:02:0f:3f:9c:10:3e:
c1:47:e1:63:7d:3e:6a:b8:37:92:b3:d3:2b:59:b4:50:d0:23:
4e:6c:99:95:65:c7:60:82:1d:2f:1d:3a:db:f6:eb:43:b7:ea:
5e:85:08:06:4e:17:83:7b:11:ce:bc:33:bc:40:2e:74:ce:ec:
07:59:d6:8a:9f:f8:dd:50:d6:5a:c2:d9:76:1b:e2:e9:4e:c8:
f1:f6:72:19:d7:4d:bc:96:47:52:a0:a0:70:7a:fb:df:68:b1:
d2:ca:24:44:70:bd:f2:28:0f:4c:30:6b:f5:56:57:b2:71:99:
f1:68:29:c9:12:01:91:4f:75:11:5c:19:2f:8d:57:7b:38:04:
cc:12:1e:3d:32:d4:fd:1a:4f:9d:81:ef:5d:59:00:2c:bb:6f:
65:66:58:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2
RjkyNDlGQkQwHhcNMjYxMDA1MDA0NDIxWhcNMjYxMDEyMDA0NDIxWjAYMRYwFAYD
VQQDEw02YWMyZjJlNi1kYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzvXxW/UANG1iJhKfYWaQrv0RILfAiPcYPR3Pb8H4lcUkx4T8N/BnWei5ffDv
3TZ3gyPCByf1NujPtNLCAUpOCEuSub1bqC//cmPRl6552yoE566n9jOGcMKJMphR
18tMXwj6NDay35E6ziBjarG2JDqzdwA3d9Q5MWwpBx52de/8E90F8SKjYDkqLzJX
R3nvKLgOLdnssZlB5+/9TlMC2WvFVSZHlszBO68qXMFQ1FLt23GM5Uz3OvejrMGQ
vKfUD7DKoul7dzmUhGkwQYW0x9C84Qa7LaLqI7sf82WQlIwPTEOC7stc2+9Sphge
nIl1MVGp9kb45WTVm2ko5sEXOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfJuhya
T91IyPQPr+lZdbPpnu5jMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2
NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj
UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVkiLh+yXtWjUkHL9NjlWu85/i2cng+EE0b+5+80YfRmtVus0aPQpUYGyrTHL
88sqTon7VgLf5Sk1qin4E3pcyZl0ldZnHiPZ+xJ4RpQBBCcwvcWuKOwHvd2upyZf
bxVeZMzjtD+jAg8/nBA+wUfhY30+arg3krPTK1m0UNAjTmyZlWXHYIIdLx062/br
Q7fqXoUIBk4Xg3sRzrwzvEAudM7sB1nWip/43VDWWsLZdhvi6U7I8fZyGddNvJZH
UqCgcHr732ix0sokRHC98igPTDBr9VZXsnGZ8WgpyRIBkU91EVwZL41XezgEzBIe
PTLU/RpPnYHvXVkALLtvZWZYVw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:36:06 2026 by rpki-client