
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: ZEpG5R103eUs2+NjLDvCzfWRZZkI1OD3JzgCRbecgeQ=
Subject key identifier: 75:55:98:F3:C4:27:31:1F:5A:F9:A7:99:9E:A9:6F:F7:F5:61:F4:94
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 3591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 357A
Signing time: Thu 20 Aug 2026 15:06:12 +0000
Manifest this update: Thu 20 Aug 2026 15:06:11 +0000
Manifest next update: Thu 27 Aug 2026 15:06:11 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: uLxPigN0BBA/PE8pJ2bjE/2aGOhOKTFuog+zrGm91RI=)
2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: lcPnaIB18udIDK59GlXd33E7TBxqjppD2+EBWUcfuec=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: sDXIi4FmNE0iX4Dfq4o1yKRfQ07xt+5i6eoc1LblsFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Aug 20 15:06:11 2026 GMT
Not After : Aug 27 15:06:11 2026 GMT
Subject: CN=6a8717e3-df79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:ca:ba:93:07:e8:91:bf:49:b0:24:04:f3:
6d:27:49:7e:3d:71:55:86:22:d0:ec:ca:61:6b:d6:
5c:a3:69:02:52:1a:0c:c5:dd:ab:cf:4f:1e:58:ad:
bf:e6:cc:02:55:88:62:bc:3e:28:56:bf:b4:0c:e6:
b6:91:9d:8c:6b:5b:cc:1e:9c:95:5c:cf:0a:98:ac:
5a:cc:20:0c:0a:98:85:3e:93:2a:b4:48:26:bd:9e:
78:2e:18:26:11:5a:92:9c:ac:5a:5e:6d:37:60:a3:
57:2b:c1:5f:5a:dd:d6:d5:a2:c6:1a:a9:d7:53:b3:
90:46:d4:40:0b:c3:26:53:f0:1d:3d:19:9e:bf:51:
bb:71:b4:2e:99:f5:4c:56:fa:10:0d:28:da:b9:41:
84:0d:3a:a8:e7:1e:f9:29:7a:57:39:54:0b:e4:81:
a4:8d:69:52:e2:44:da:14:0a:73:a1:8b:27:97:3f:
12:22:10:b8:e2:01:52:f6:ac:22:9f:7b:8e:65:f2:
6f:d4:04:69:d1:87:04:54:f6:5d:38:23:94:c8:17:
7e:79:f7:b4:24:e4:7f:0e:16:cc:0f:20:94:3c:44:
65:09:ea:8a:6b:57:43:38:f1:e4:24:6e:9e:0d:5d:
74:d1:eb:b2:8e:79:82:7b:81:a4:08:22:10:f4:5d:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:98:F3:C4:27:31:1F:5A:F9:A7:99:9E:A9:6F:F7:F5:61:F4:94
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:ac:4f:6a:66:ca:ac:e0:07:49:b5:96:2e:9b:ba:af:53:24:
fe:5c:05:6e:9c:fa:46:74:84:62:3f:a2:dd:ff:86:eb:35:7d:
67:d1:5b:04:9b:8f:b0:85:08:85:66:d1:b3:71:4e:00:d3:c3:
e6:b6:23:d1:2c:41:e2:e3:92:1d:19:9f:48:a3:3f:fe:ca:00:
56:0c:9f:fa:d7:7e:91:9f:46:59:76:c0:04:86:ce:7c:bb:1e:
9e:f7:b8:0b:03:13:9b:79:81:5c:fd:39:eb:78:38:b3:36:77:
ce:62:5f:1a:64:5c:3b:56:56:01:5f:0c:3a:99:20:8b:bd:62:
13:48:cd:f2:3a:3f:a0:d1:68:e2:d6:84:9c:3e:ea:0e:a4:b9:
ff:d3:a4:61:33:27:a1:09:3a:38:91:2d:d3:ee:f7:c2:86:59:
32:2f:49:76:75:bb:7d:c2:cd:ed:d1:a0:a7:58:1b:5c:55:60:
ec:8f:45:7b:d3:07:1f:83:19:16:df:85:fe:e1:a4:38:a3:45:
da:0a:b9:71:b8:0d:e0:e4:b1:4a:f7:6e:17:23:a3:b8:d3:bf:
0d:b6:7d:e6:7b:27:92:32:e0:16:ac:96:15:23:77:59:25:dc:
f1:f2:a6:50:aa:85:1a:e7:a6:93:db:08:2e:a6:fa:60:53:2c:
7b:17:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:18 2026 by rpki-client