
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: RE0HdPa5SkqqWtrP/8h9s2VBA2CubCHcNt10EfDJM7U=
Subject key identifier: D5:1D:3B:02:4F:2D:81:D7:79:0C:9D:C4:81:5A:34:EF:28:4A:67:8C
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 3576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 3561
Signing time: Mon 06 Jul 2026 15:10:38 +0000
Manifest this update: Mon 06 Jul 2026 15:10:37 +0000
Manifest next update: Mon 13 Jul 2026 15:10:37 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: NgAZfeSOcWCgrjvJGn7i4vAuZk/tpIh8IO1iz52UxOg=)
2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 15:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Jul 6 15:10:37 2026 GMT
Not After : Jul 13 15:10:37 2026 GMT
Subject: CN=6a4bc56e-3998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:d3:43:78:62:54:c1:10:c6:3a:fd:cb:89:
41:97:b3:df:30:ce:04:8e:23:d3:3b:ca:ca:b4:8a:
68:79:64:67:d4:11:46:00:3b:b5:98:b8:cd:63:21:
3f:7c:fd:4d:13:9d:f2:d5:7a:08:9c:21:e5:f7:f4:
ef:a6:a3:0c:d7:b9:6e:88:07:86:95:f2:5f:e6:98:
3a:a8:37:10:1a:13:53:f2:7f:57:6f:83:b6:e5:2a:
dc:fb:c8:91:69:af:0b:48:65:d7:e2:19:35:5a:3d:
a5:32:25:18:61:bd:c3:94:a2:e6:f3:20:76:3f:a2:
f8:f9:bd:24:73:a0:03:46:1e:f4:15:dc:85:24:7b:
14:1f:38:2c:97:02:54:d5:f0:05:d6:66:a5:d2:7d:
ca:b4:b9:e6:a4:db:59:85:7d:0b:1c:6d:41:6f:d4:
a7:5f:e4:52:bf:d2:30:24:f2:2f:cc:65:5f:13:ed:
e6:e9:01:25:94:26:6a:16:78:0d:d3:b5:1c:4b:87:
fb:10:61:d6:dc:b5:48:38:38:99:b5:ff:44:e0:5c:
2b:36:87:15:18:34:cc:d2:e4:04:4b:03:c8:c8:92:
4f:0b:8a:49:8a:8b:58:ea:53:86:0b:b5:72:5a:a5:
56:9c:9e:80:ad:2d:31:d7:b4:96:e7:ba:73:54:54:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:3B:02:4F:2D:81:D7:79:0C:9D:C4:81:5A:34:EF:28:4A:67:8C
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2b:aa:69:99:5f:76:04:4e:50:30:c1:77:e4:3c:f4:7b:40:
82:9b:82:c0:63:a5:58:4d:11:a9:89:bd:f3:47:28:42:66:8a:
ce:98:41:30:39:1e:d3:28:d0:f4:60:27:04:52:68:59:23:af:
a1:33:24:9b:90:37:20:90:f6:60:66:74:2b:60:ee:52:25:bc:
75:9a:4c:57:6c:b8:e6:a7:c3:f9:21:4e:06:f1:0a:ca:a2:ac:
8c:8e:4e:97:45:ca:f4:41:ca:bf:e0:fa:c8:51:4b:6c:39:1e:
9a:de:de:15:b3:00:f8:f4:aa:db:b3:71:a3:14:ea:d0:60:d6:
bb:c4:19:48:55:60:d4:aa:43:3a:13:61:a0:4b:68:6f:2d:33:
cf:0f:03:b4:7f:af:1d:7d:4b:12:e0:29:73:ab:0e:a2:c6:f9:
b5:33:71:36:a9:97:da:5d:3e:b2:6c:8d:5b:1d:b0:e8:d2:1b:
a5:09:d3:fd:a3:b3:73:fa:a6:9e:8c:8a:bb:0a:b4:85:13:fd:
79:88:00:ca:ca:8e:17:9e:57:17:b0:71:01:1b:c8:e2:6b:06:
e1:35:f4:6d:dd:ae:68:b6:f0:21:cd:e7:10:b6:aa:a1:bd:0a:
ac:87:7d:ff:84:94:d8:16:46:fb:09:fd:1b:d3:cb:7e:22:6e:
be:13:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:13:51 2026 by rpki-client