
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier: jBNjufoJ7eekqktwWKfBS3xFr1MIFSbzrSDWQQLp5Y0=
Subject key identifier: 11:B8:B2:E7:EE:96:13:55:03:FF:19:A8:D1:1E:0A:05:10:0B:EA:0D
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial: 0A26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number: 0A09
Signing time: Fri 02 Oct 2026 20:02:12 +0000
Manifest this update: Fri 02 Oct 2026 20:02:12 +0000
Manifest next update: Fri 09 Oct 2026 20:02:12 +0000
Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: jLgVS3sLzc5O4AqkZFzLpR+KhrHVE+4Xfz5VQp5J5n0=)
2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=)
3: F663B6DE3F1011F1A8E91BA6CD833773.roa (hash: x5T7NYkz+hUgY/tU53+Hwc/BUR2tGXVOEyssUILN0gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Validity
Not Before: Oct 2 20:02:12 2026 GMT
Not After : Oct 9 20:02:12 2026 GMT
Subject: CN=6ac00dc4-1486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:b0:a8:6f:01:5b:56:eb:26:08:0d:5d:8f:
3b:61:c1:de:83:d7:68:18:8d:d4:5e:50:da:18:38:
a4:f8:aa:3d:90:c7:e1:56:94:f1:d4:7c:34:0f:fe:
90:72:d3:63:c1:56:99:70:b1:f2:1a:cd:df:ef:41:
4b:44:01:30:01:dd:c4:fc:f6:38:db:e0:dc:92:6f:
a6:85:57:7b:6e:12:ed:ef:4f:d6:cd:27:e0:fb:ab:
3f:bf:cb:44:b2:fa:fa:22:35:4d:19:32:88:99:6a:
ca:c8:28:0e:d8:26:3c:5b:59:ac:13:28:45:74:f9:
11:4f:ef:65:8e:e3:d1:de:ed:59:07:a8:b9:44:9a:
d9:17:48:b9:08:1d:9a:93:09:0f:ee:0a:9e:29:d6:
7e:8f:ac:5a:29:59:9f:90:86:77:a2:57:91:16:11:
c6:51:f3:62:dc:83:30:8f:fb:37:65:a3:59:1f:f9:
d7:ed:09:78:aa:f1:80:e4:63:28:f9:01:3f:29:d7:
62:b1:4e:db:0b:09:50:5d:8f:fe:de:5d:90:c3:ba:
f9:5f:1c:c3:ad:f4:e2:08:49:2e:b5:3c:bb:85:85:
af:79:6c:e2:db:c1:24:d7:e3:f6:54:39:bd:54:97:
93:75:16:68:af:3f:5b:8a:e6:c1:67:e2:4a:1a:7c:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:B2:E7:EE:96:13:55:03:FF:19:A8:D1:1E:0A:05:10:0B:EA:0D
X509v3 Authority Key Identifier:
keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0c:7c:fb:e8:47:68:2a:e5:22:38:b2:8e:b2:47:9b:85:60:
05:a1:47:33:91:d3:e7:72:12:8c:f3:13:a2:ee:24:e6:bb:45:
9f:aa:69:55:ec:3a:f4:2d:06:10:67:72:18:92:eb:3e:c1:bb:
28:8f:09:ca:36:0f:a3:6c:7d:1c:3e:15:d4:46:be:a6:63:e4:
2a:a5:7a:3c:cf:16:df:c5:2b:6b:6b:61:4d:48:5f:2a:9d:bf:
64:88:72:11:bd:66:12:2c:0f:15:57:a1:1e:1c:b2:45:2d:ae:
4c:0c:9f:eb:a4:43:10:8a:91:bf:d2:c5:b0:0c:b9:79:b3:31:
f3:42:df:b2:fb:39:a7:72:85:64:41:22:f6:ee:30:8e:c1:96:
28:c2:e9:b1:52:50:55:1f:e4:dc:79:4e:ee:d7:bc:c2:85:2f:
8f:dc:9e:d6:25:18:9c:62:7b:b0:d5:b1:89:aa:74:aa:f4:93:
d5:2e:d5:43:10:7e:12:43:26:60:51:a3:a1:5d:3f:03:db:fb:
45:b3:69:51:bf:19:58:f6:82:66:dd:6f:e8:32:81:f9:cf:0d:
c9:da:25:37:18:78:43:7e:1f:76:55:07:b1:0c:72:c2:20:27:
cb:f4:f1:32:1b:bc:76:0d:d9:11:73:47:43:74:bb:d9:ba:1f:
b2:4e:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:24 2026 by rpki-client