
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier: O2DIB9VQVxAbu6KBEwLAKilD9FtE39lGlJvCyCOLvJs=
Subject key identifier: A6:A4:FD:A9:16:A0:2D:F2:7C:3A:56:4C:5A:3C:2A:88:5A:E2:EE:0B
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial: 1A4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number: 1A40
Signing time: Fri 02 Oct 2026 16:27:44 +0000
Manifest this update: Fri 02 Oct 2026 16:27:44 +0000
Manifest next update: Fri 09 Oct 2026 16:27:44 +0000
Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: oDFPc6XR+T0I4eTTt8V96L1hxN4by+2ZcqM6qvjoSAM=)
2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: DCBXdQ3TUOdDXYDH2IWIye/rRhJnHFBuWi5K22qghWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6735 (0x1a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Validity
Not Before: Oct 2 16:27:44 2026 GMT
Not After : Oct 9 16:27:44 2026 GMT
Subject: CN=6abfdb80-bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:9e:76:10:ab:da:23:ee:50:35:17:ce:d2:
a3:b1:62:08:48:9b:2d:aa:69:1b:bd:9a:ee:83:8c:
2d:70:c9:1b:6e:c9:50:b6:20:35:03:a9:a0:dd:53:
68:32:5e:ee:fe:52:5e:5f:4d:95:c8:c9:51:14:de:
1d:1a:07:92:e9:68:6e:96:17:f1:97:e8:b0:55:ac:
62:2f:72:67:69:ef:55:91:82:2c:ad:3b:6a:eb:d5:
37:08:0d:5e:76:5c:1a:31:8a:8b:8b:62:bb:14:34:
cb:98:d3:7b:23:9e:02:5b:7e:fc:f8:fc:3c:77:a4:
e1:fa:18:20:07:f6:10:8b:4e:92:c4:94:a6:16:02:
9c:aa:c9:09:d1:d0:06:24:74:60:96:3c:20:a7:f7:
60:61:4c:c2:7d:61:9e:01:4c:ba:39:69:52:11:79:
ea:fd:0f:1c:e5:dc:da:ba:6b:50:a4:3b:eb:da:05:
44:55:95:3c:e5:fc:86:98:77:0d:c3:47:dc:c4:7b:
e5:54:ff:0f:e2:ce:09:29:d7:5a:70:10:35:5b:be:
7d:9d:9a:8a:70:e7:57:b0:6c:a1:b1:ba:6c:5b:71:
f6:1a:bf:b3:01:ae:14:97:29:07:ad:0e:29:d6:81:
2e:f4:7c:01:3a:ee:71:3c:b9:24:ed:ff:e5:7b:74:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:FD:A9:16:A0:2D:F2:7C:3A:56:4C:5A:3C:2A:88:5A:E2:EE:0B
X509v3 Authority Key Identifier:
keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:09:5a:50:ee:be:6f:cb:1e:ae:43:63:62:5d:5b:a8:d1:8c:
22:f4:05:29:c8:e6:c9:97:1a:ed:63:e0:45:44:fd:68:60:d7:
bc:20:3c:3e:1c:91:f8:15:f5:38:c8:e7:b9:b3:72:f6:b2:83:
1b:39:7b:d6:d8:e6:7b:4b:97:00:ac:4c:1f:c3:06:1f:8c:6c:
93:79:da:87:51:1c:8d:b2:6a:3a:31:eb:43:2f:2e:74:4b:42:
2b:1e:0c:a9:61:98:14:e7:b5:12:4c:f6:ed:c0:c1:16:33:1c:
a2:7d:a7:06:25:64:c0:e2:80:ef:97:da:5e:2f:08:5f:1e:31:
a9:af:9e:3f:ed:17:b5:e3:af:98:02:90:c1:f2:cb:f7:d4:b3:
0f:96:5c:34:02:8b:e1:eb:13:3d:ed:ac:a7:a8:b2:7d:ef:b9:
73:a6:6d:e1:eb:74:9b:0e:40:6a:98:73:f5:4e:1c:8a:49:7a:
e6:b6:36:bc:32:a2:21:e8:90:01:d2:03:00:f1:eb:07:24:fd:
53:2a:47:41:79:be:e5:fe:71:0c:19:ff:05:18:86:8a:17:5e:
c5:fe:93:7d:cc:30:f0:a9:bf:d7:c4:ab:32:df:f6:2e:6e:67:
7b:bd:0f:34:18:9e:0d:07:78:b9:75:18:fa:00:d3:82:c0:02:
f3:f7:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:45:20 2026 by rpki-client