
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
File: PxmdXjbAMtlxfGzB9r9SYBcovW0.mft (raw, json)
Hash identifier: g6rYwMAGTOLd8U69cGINvG43LUCDH4bI9puPZGWOz5o=
Subject key identifier: AD:D0:0E:31:AF:30:D2:94:36:FD:7B:BA:C6:C8:E0:8C:1F:F2:88:E6
Authority key identifier: 3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D
Certificate issuer: /CN=A9177B33/serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
Manifest number: 50
Signing time: Mon 05 Oct 2026 08:44:31 +0000
Manifest this update: Mon 05 Oct 2026 08:44:31 +0000
Manifest next update: Mon 12 Oct 2026 08:44:31 +0000
Files and hashes: 1: PxmdXjbAMtlxfGzB9r9SYBcovW0.crl (hash: 4xaEshTmvogdfkADERQxd4UwIigg1lmXXCLCPASuqU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl
rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177B33, serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
Validity
Not Before: Oct 5 08:44:31 2026 GMT
Not After : Oct 12 08:44:31 2026 GMT
Subject: CN=6ac3636f-7ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:86:a7:0e:e9:f9:a0:8b:aa:26:a8:40:86:
a0:90:2e:2d:d7:6e:6c:74:ba:13:d9:fb:88:ef:4b:
6e:a2:33:b5:ff:c4:ee:fc:79:d6:a7:a8:3d:10:be:
2b:9c:ee:ce:93:d4:95:14:b5:c5:0a:f8:30:76:92:
fb:a9:26:8e:fc:0f:6e:8c:b0:d5:fe:ac:c4:67:97:
8a:6c:7b:f1:5a:51:f9:64:dc:4e:f7:fd:a0:c0:a3:
cd:5a:5f:58:1f:38:38:f4:25:1b:d9:44:e1:73:79:
92:53:65:2a:e6:a4:05:9d:14:21:fc:a9:e2:ff:c2:
86:84:4a:12:12:c3:c8:bc:e9:d2:27:6a:b1:b4:80:
16:43:8b:cc:92:03:fa:5a:21:83:d9:a6:92:8f:f7:
4a:24:bc:4f:7c:84:8a:33:d2:de:18:18:6c:e8:f6:
b6:b4:d7:ae:77:44:e9:25:b0:a4:cc:d5:8e:95:71:
dc:35:a2:5e:2d:eb:6e:89:50:3b:aa:38:29:f2:f7:
4a:97:cc:11:f7:08:9f:27:25:35:73:d7:42:9b:f1:
68:d7:9b:2b:d4:0b:a5:3c:a4:0d:55:92:91:f5:16:
45:e3:a3:aa:11:97:b0:d6:ce:7f:9f:09:7c:3b:3a:
4f:9b:55:7a:12:1f:ff:78:ef:4c:fa:68:a5:55:ae:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D0:0E:31:AF:30:D2:94:36:FD:7B:BA:C6:C8:E0:8C:1F:F2:88:E6
X509v3 Authority Key Identifier:
keyid:3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d8:93:7e:45:72:e0:2c:70:b9:be:64:1c:55:ba:d7:ec:37:
4f:09:55:61:60:03:08:0e:b7:aa:76:ab:7d:12:e7:ea:b2:e0:
4b:72:95:d6:67:f4:21:66:7e:77:e2:16:1d:10:00:f5:5f:c0:
23:fe:b0:1e:40:0a:a1:38:40:b7:48:e2:d9:c7:3d:58:7a:17:
83:8f:87:95:c1:54:f5:9a:45:35:aa:a2:e8:43:82:a4:72:e2:
5f:6b:20:e1:97:3a:40:cb:20:82:a0:9f:0c:cd:11:61:db:51:
40:35:2e:40:3f:a0:40:e8:06:fd:d1:f1:4f:07:27:9d:0d:ca:
31:65:d8:4d:55:a6:fd:ac:6e:8c:69:b5:c5:e9:f1:d8:3c:c8:
53:b5:13:06:db:ba:f1:e0:17:1b:f5:20:5d:bd:da:3f:03:e9:
54:b9:31:40:07:82:e4:f4:fe:d9:6e:91:32:bc:a6:4a:53:1b:
e9:ec:47:a9:4e:f4:5a:68:49:9f:83:d9:1d:22:ef:00:48:b4:
6a:4d:5a:11:44:62:43:40:cf:8d:76:be:ec:6e:e2:92:71:b8:
30:17:af:67:88:32:cc:a8:68:f3:36:9e:93:83:37:29:13:43:
f7:e5:8e:30:99:13:af:de:0d:56:b9:3a:f7:db:ae:5c:8b:3a:
7e:22:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:04:09 2026 by rpki-client