
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: YZ/0A4mYen/LhT+UmmcJZGx8HpQ1XwxvewiPlVj93C0=
Subject key identifier: EB:B0:AC:3A:9A:EB:64:92:11:23:1D:91:ED:85:64:5A:06:3F:DB:20
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: 0132
Signing time: Fri 09 Oct 2026 06:18:57 +0000
Manifest this update: Fri 09 Oct 2026 06:18:57 +0000
Manifest next update: Fri 16 Oct 2026 06:18:57 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: nNkJqjpZIZvPzvmfNMjYcaUfJibUhabvXaGCRo5ezPI=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Oct 9 06:18:57 2026 GMT
Not After : Oct 16 06:18:57 2026 GMT
Subject: CN=6ac88751-da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:54:c4:1c:6a:1b:4f:5b:e1:f7:7c:72:ab:
71:dc:e1:1b:a2:23:d6:9b:3c:31:0f:65:e4:83:36:
df:0f:68:00:e0:70:40:3a:0e:0c:b3:68:9f:d2:e2:
27:57:95:b4:bd:28:89:6d:5e:db:1f:09:3c:69:ce:
d8:ca:59:d1:bf:2d:a0:78:d7:89:40:32:8b:d2:fb:
70:9b:be:05:44:1c:6e:4f:33:93:94:02:30:d8:a0:
91:4d:07:09:22:39:5b:c2:22:94:fa:19:de:9b:f7:
dd:9a:4f:a1:f2:b4:8f:fe:f1:d0:60:46:43:a6:f2:
a7:42:6f:7f:2c:0b:6f:df:e0:76:07:f2:ae:20:fe:
c8:96:2a:1b:93:5f:9d:e8:b2:a6:66:9b:cd:06:01:
f9:31:89:bd:be:50:a1:94:98:26:a0:a2:ef:ba:b9:
ef:41:1f:ae:94:3b:1b:25:32:a9:78:ca:f5:01:25:
b2:a4:2c:31:e2:69:22:10:36:05:66:1c:2b:35:af:
a0:9f:57:1c:4c:88:18:50:15:de:12:7c:01:c6:3a:
44:08:86:0e:9b:cd:97:c4:9d:f8:7b:9f:26:02:94:
9f:63:56:63:37:74:21:ed:8d:54:b9:db:14:6c:6d:
55:ad:4f:e2:37:27:b3:23:74:70:b4:ba:3a:08:a1:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:AC:3A:9A:EB:64:92:11:23:1D:91:ED:85:64:5A:06:3F:DB:20
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:f4:5d:c7:0a:9c:b7:7d:64:48:5f:48:44:d7:17:dd:3f:
6c:b3:ec:99:64:06:33:1e:f3:77:aa:4c:5a:e8:b5:1a:1c:9a:
a1:3e:d0:0d:72:b2:50:66:50:31:8b:00:84:75:72:3b:13:ac:
d9:3b:7f:78:c3:4c:36:94:ef:e5:12:14:b7:a7:15:bc:34:9d:
f7:d5:c8:a8:87:69:e5:6d:1f:23:1a:43:1d:0a:c5:60:d7:34:
f5:98:f4:4c:49:14:ce:92:8c:03:cc:c1:45:3d:0c:62:31:89:
f2:ed:f9:1f:80:7e:a3:53:66:23:b8:47:17:e7:1d:dd:90:3b:
1d:e3:34:66:3e:a7:99:d4:8d:a6:75:e1:b5:38:d1:5a:97:e8:
f3:fd:d6:6a:39:0f:2b:62:2e:85:c0:38:39:71:70:03:53:c6:
f9:d9:4d:0e:de:e0:d0:7c:4c:15:4c:4b:19:b5:ad:ca:8f:c3:
41:5a:da:11:9d:e8:7b:a8:e8:a1:22:cc:f8:ff:6a:d0:39:de:
59:c3:21:3c:1b:b4:13:32:d7:97:d5:4a:82:a5:21:df:d7:3a:
e0:78:43:66:3c:f9:61:8d:65:79:54:cb:ab:0e:4b:c0:94:34:
a7:01:bd:12:ed:0e:39:1e:56:af:32:1e:ea:8f:5a:b9:cd:53:
74:4e:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:07:57 2026 by rpki-client