
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier: wQvflg+HmQ33RHhZQU1OPCGHtUZSbV1xQpdZ57ZSYy4=
Subject key identifier: 14:43:76:6E:E7:65:3E:25:21:89:21:D5:5D:94:31:9E:DF:7D:E9:FE
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer: /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number: 25
Signing time: Thu 03 Sep 2026 08:42:50 +0000
Manifest this update: Thu 03 Sep 2026 08:42:50 +0000
Manifest next update: Thu 10 Sep 2026 08:42:50 +0000
Files and hashes: 1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: MyNZFaXuQnYdcS+2EhTiJv8gciuFYiCym/w0fL4kNNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Validity
Not Before: Sep 3 08:42:50 2026 GMT
Not After : Sep 10 08:42:50 2026 GMT
Subject: CN=6a99330a-5c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:1d:7d:76:a6:ab:60:a3:7f:5b:09:92:a0:
c3:dc:34:28:08:2a:77:0f:1d:cc:33:be:c5:e5:be:
5e:c7:12:75:8f:86:97:d7:9a:e1:88:3f:c4:e3:20:
54:d0:56:55:c3:6a:c3:19:91:46:c3:19:7b:75:35:
04:d9:aa:96:c9:0c:ff:c8:d4:08:b4:a3:84:9d:f5:
98:f2:59:92:2f:45:6b:ef:3b:51:90:76:2b:dd:9b:
e1:7a:9a:3a:6b:d2:cb:ed:e7:0d:8f:fd:d2:f1:44:
14:88:93:44:11:6a:83:de:03:0b:f9:2a:a4:e9:bd:
f0:16:51:b4:83:8a:d3:44:f7:4a:fa:21:b3:57:64:
f1:71:23:4c:a8:d1:bb:a8:08:ff:cb:ca:67:3b:13:
08:a3:81:ad:d8:6a:26:dd:ba:51:c1:43:15:78:d2:
f6:3e:58:cb:6c:5a:3a:c1:a9:4d:ed:4a:96:8e:da:
18:30:98:48:ea:5a:72:e8:cc:d6:68:3b:e8:0d:13:
d8:c0:d0:cd:74:4f:94:a2:37:b5:d0:b1:d7:16:b9:
d5:4d:dd:10:a2:d9:ef:91:45:a4:83:3a:6a:42:01:
15:05:2d:b8:c4:45:67:c5:90:b4:42:e6:3b:f7:d8:
52:4d:e2:00:f1:1d:a0:47:44:2b:4c:88:74:10:1f:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:76:6E:E7:65:3E:25:21:89:21:D5:5D:94:31:9E:DF:7D:E9:FE
X509v3 Authority Key Identifier:
keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:11:da:7f:d3:28:fb:24:57:69:51:19:5f:5c:22:4c:69:11:
1a:40:e0:af:df:c6:f2:36:e2:47:63:2f:15:6b:a1:98:1a:50:
35:93:92:e0:63:5d:73:a5:24:f7:23:ca:ba:d4:8a:d5:a8:80:
7c:37:34:1f:51:18:1a:5d:ae:82:2a:5e:8d:4b:eb:fd:9e:1a:
af:3d:95:9e:a4:05:9c:54:5d:b8:32:72:42:32:f4:92:a6:f8:
66:53:32:94:82:07:07:a3:95:f5:d9:dd:38:69:bd:a8:af:7f:
53:8e:48:64:4e:a4:04:fe:01:be:e2:48:95:8d:59:32:82:55:
c1:5d:96:13:82:e4:eb:04:f2:bc:65:85:45:23:89:ba:04:1b:
72:b2:f4:88:89:e1:4d:17:bc:21:97:9f:79:db:27:19:96:90:
e6:27:b5:b8:1a:26:85:f4:84:01:53:1b:81:e3:58:2c:ca:aa:
72:c5:ec:94:09:e0:34:15:82:0f:8e:b5:9b:4f:0e:de:2a:30:
eb:0e:61:fb:f7:ab:40:f8:a7:d6:9e:59:b9:54:93:b5:49:a6:
11:a0:58:f8:12:b1:9a:50:0f:1b:93:60:6f:3e:9c:cf:09:2d:
0f:c9:e4:4b:58:3b:98:28:92:a0:e1:9f:38:d2:43:37:91:a2:
a1:6f:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:28:30 2026 by rpki-client