
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json)
Hash identifier: Zdyr14wdvdDYM+0XTMrWQfVq4Pa5NFORdm6931MNHsY=
Subject key identifier: 8D:E0:61:D4:77:5E:7E:A5:52:67:B2:90:06:CE:B6:E2:10:39:33:D5
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial: 0BAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
Manifest number: 0BA6
Signing time: Sat 04 Apr 2026 18:52:45 +0000
Manifest this update: Sat 04 Apr 2026 18:52:45 +0000
Manifest next update: Sat 11 Apr 2026 18:52:45 +0000
Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: 67t8Yolj0zf10SPHhoWTRwa3y21gbBEy3hY5emNXL8o=)
2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: DuaXg8ErIllO7PDms4lKRxOCOp64K0AXe/FcoVLC2mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Validity
Not Before: Apr 4 18:52:45 2026 GMT
Not After : Apr 11 18:52:45 2026 GMT
Subject: CN=69d15dfd-5eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:1c:51:65:31:b5:87:f1:ff:c3:6e:9b:ef:
18:72:f0:04:34:ea:38:22:83:74:25:b1:b4:39:47:
cd:d2:85:e6:3b:4a:51:74:5d:a8:21:fa:d8:5a:d6:
3d:94:57:33:9f:08:ad:53:92:5d:9e:64:a5:fe:6b:
51:b2:87:f1:ca:74:d0:2b:f8:26:72:01:6a:b4:f4:
8a:d9:ee:28:24:ba:d4:56:06:14:26:d1:03:a3:4d:
43:e0:34:ba:65:fe:f1:36:a2:91:c6:c4:b8:33:dc:
13:88:ea:8f:8d:93:ae:c0:d4:a5:a2:5f:b5:4c:5d:
83:6b:02:2e:13:a7:3d:9d:16:3d:07:6f:15:aa:88:
d8:47:37:22:ca:25:12:7c:3c:fc:03:7c:f1:54:16:
3a:b2:f5:87:62:5e:a6:04:b8:e6:59:af:f8:ee:94:
ba:21:0a:9d:3a:ba:17:84:20:00:ed:b4:ea:a0:e7:
90:a7:a7:aa:c3:f4:73:eb:d4:d1:43:13:47:ba:03:
4d:3c:61:7f:ba:3c:10:72:71:3b:c8:3f:be:16:71:
1d:e7:c1:31:7f:f1:64:0f:88:4b:5b:a1:e8:75:32:
83:a9:dd:ee:01:4c:5e:e5:fe:f0:b3:20:73:01:85:
ad:3c:46:a1:2f:5e:37:de:b5:e1:1a:6d:fd:8c:45:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:61:D4:77:5E:7E:A5:52:67:B2:90:06:CE:B6:E2:10:39:33:D5
X509v3 Authority Key Identifier:
keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3e:78:23:8c:34:7a:04:52:6d:50:a4:b9:25:93:98:4d:90:
71:49:97:c3:6e:7c:80:d6:cd:f2:38:e3:35:e2:35:79:9e:a3:
64:e1:6a:d0:0f:02:eb:f7:d4:97:32:68:f2:90:4d:2f:2e:78:
96:ef:0c:e8:fa:78:6f:f8:ff:76:e6:cb:88:d2:f5:35:e3:28:
35:37:18:33:4b:f8:c6:04:54:85:54:1b:8b:5e:56:27:4e:bb:
32:42:bb:b7:44:f0:2c:5f:a0:8d:d1:06:76:c6:59:49:57:3a:
f5:51:3f:fb:8e:f2:b0:60:c2:ce:01:92:52:f1:4d:4c:7d:26:
fb:8c:ff:f5:7e:33:25:1c:58:08:47:44:ba:ce:5f:d1:cb:82:
92:f6:ef:d3:84:59:fd:80:45:a9:2b:a9:8b:1a:97:f4:0f:51:
62:85:0d:7d:a3:8d:0a:6a:33:5f:ea:3d:fd:7f:b3:25:4a:61:
3c:8f:ae:7f:84:d0:de:ec:ed:f3:da:4a:9c:46:c5:9d:26:ac:
8c:36:fa:62:b8:6a:a3:a8:28:9e:cf:82:e1:06:d4:e6:6b:92:
38:c1:30:ed:83:4b:ac:59:2e:5e:73:15:60:97:d3:0b:69:df:
52:d8:9f:1a:29:b8:fc:e6:0a:4d:9d:ae:29:94:a3:98:e8:dc:
1d:ee:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:32 2026 by rpki-client