
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: iIKKpzELxrwksxXSgGe/zKsZG7IkJayxhVhAvAUsp7Q=
Subject key identifier: 37:DA:D5:53:F0:71:C4:82:06:F3:3C:63:59:4B:A0:8A:86:C0:71:ED
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 3582
Signing time: Fri 04 Sep 2026 14:35:24 +0000
Manifest this update: Fri 04 Sep 2026 14:35:24 +0000
Manifest next update: Fri 11 Sep 2026 14:35:24 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: GafoPNUM9ufqvmsBKraq+ABeR4muuroYe2WVqHhwikI=)
2: 3C9DB4069A1F11F18861FC0A5611F970.roa (hash: bCbtL75JKHBw5u/1NC+7swWHc/6+S5w6cEHQLOSltb4=)
3: C264EF40348611F1AD86C498AC833773.roa (hash: 66uP3tYUHirGUL7IpMNKC13eU3IzhdVACv/RxfZkaWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13705 (0x3589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Sep 4 14:35:24 2026 GMT
Not After : Sep 11 14:35:24 2026 GMT
Subject: CN=6a9ad72c-356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:d8:67:5a:cd:1a:a5:f0:1e:f5:39:59:05:
35:29:d0:00:53:c3:b6:06:de:fd:1b:03:b6:f9:51:
3c:e6:26:e3:bf:68:56:cb:f9:bb:2c:4e:42:87:bd:
b4:19:f1:38:ca:fd:63:96:21:45:4f:65:c3:90:eb:
91:32:c6:8f:d8:6b:84:da:d8:bf:32:42:09:07:a2:
cd:7e:eb:86:5c:eb:09:e1:80:c1:f9:56:cf:87:7f:
0e:78:94:90:6d:c6:b9:98:54:2b:72:16:d4:7a:74:
65:16:e1:23:01:58:fe:c7:38:0c:d9:8f:c6:4c:9e:
a5:f5:61:74:1d:b2:89:69:c6:57:f0:82:28:79:cf:
b5:49:7d:ae:77:a5:6a:3b:2c:f6:e3:0a:56:ca:e6:
39:62:be:6e:dd:47:d0:f3:45:16:6b:d3:93:7f:a2:
77:68:44:56:b6:35:8a:ab:e7:59:7c:8b:9d:84:f2:
23:89:e6:dd:e7:81:df:44:34:c6:1d:ae:9d:2c:37:
73:22:1c:d3:c2:ab:22:4d:6e:58:5b:b7:8e:c7:09:
5e:04:cc:25:27:59:3b:99:9e:be:6c:5f:f4:50:a5:
ff:fc:7e:f3:45:63:6b:70:a4:81:2e:49:b9:fd:b7:
d4:e0:ff:bd:52:71:ca:6c:c7:2e:c0:3e:a4:5a:44:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:D5:53:F0:71:C4:82:06:F3:3C:63:59:4B:A0:8A:86:C0:71:ED
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b1:bd:de:2b:f1:b0:8f:ae:7e:6e:63:89:e6:84:3f:0a:3e:
94:6b:2c:83:88:6a:84:05:87:7e:16:86:7c:d1:dc:98:1c:01:
99:fa:7b:09:6c:a9:59:54:1f:c5:71:5a:e7:fb:6b:3e:1b:b8:
5c:22:d6:dc:6a:3f:20:ce:12:c0:25:88:2c:1e:f1:32:e5:d1:
65:22:41:fd:6e:ae:55:3c:7f:f2:5c:a3:98:f2:70:a6:12:fd:
e8:f7:93:0b:03:73:93:b0:ae:cf:f8:14:e2:c1:c8:5f:62:d3:
fa:28:93:9e:49:af:98:42:9d:55:3e:68:92:cd:4b:5b:11:67:
c1:6a:ca:f4:a0:a7:a9:0d:3b:92:1f:b4:af:5a:33:26:2f:05:
9f:a3:c0:c7:de:28:66:b9:07:4d:bb:00:6f:fb:1b:0d:2f:bf:
4f:ca:bf:9f:23:56:6e:93:19:bf:06:ab:c5:de:28:58:da:b5:
fa:86:8b:0f:66:66:fa:af:4d:e3:86:4e:45:f9:16:52:58:6c:
f6:9f:4f:11:70:bf:cf:bd:8c:5e:3b:8e:7e:a9:cd:c6:e8:98:
df:d5:4d:10:97:a1:e3:59:62:d7:c1:f1:db:f2:4a:fd:db:34:
05:25:00:ab:42:53:25:9a:be:68:bc:b0:78:e5:8a:dc:76:e8:
45:f7:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:53 2026 by rpki-client