
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json)
Hash identifier: vWSTsE5D++NrmiUfvIR/U9YwNoMZHokGzrbL98Rdw5I=
Subject key identifier: A4:F0:15:71:8B:8E:98:AA:3D:BB:0B:46:EA:25:42:31:90:63:83:9C
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
Manifest number: 017F
Signing time: Sat 17 Oct 2026 05:21:12 +0000
Manifest this update: Sat 17 Oct 2026 05:21:11 +0000
Manifest next update: Sat 24 Oct 2026 05:21:11 +0000
Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: TNtW5KF4A+0B7BzN9IwiQlTStuZVOavPcUH03VKfbVc=)
2: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=)
3: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Validity
Not Before: Oct 17 05:21:11 2026 GMT
Not After : Oct 24 05:21:11 2026 GMT
Subject: CN=6ad305c8-9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:78:1c:7d:8a:eb:ed:63:77:7e:5f:54:2e:
f2:f0:1d:2c:b2:20:60:f5:2e:08:e5:5d:36:d6:41:
0e:b9:a3:03:28:c3:fd:28:a8:eb:57:a7:be:9f:02:
88:61:06:89:6f:5b:c8:59:59:13:c5:8c:e7:50:91:
be:67:a7:9f:d6:54:54:d7:bc:3a:39:a7:74:ea:2b:
62:f3:6e:6f:cc:15:d8:34:50:7a:3d:e6:57:39:7f:
de:3b:a4:38:86:9f:e5:c2:35:87:ae:bb:93:f7:14:
84:e2:09:eb:1a:72:1a:b7:03:b1:6d:05:a6:74:bc:
42:20:1f:03:cd:40:3d:15:17:be:23:cc:98:f2:ba:
0c:07:c6:6c:38:2e:57:de:33:a7:24:62:b3:97:2b:
0a:f2:84:35:72:e0:65:28:13:e7:38:23:79:83:1c:
b8:fd:78:e8:fb:49:97:06:0f:18:59:8a:f7:5e:ee:
1f:1c:62:55:49:b0:cd:ee:1a:55:6c:f2:61:ee:94:
d9:30:89:97:3c:b5:49:f7:0f:60:f2:ac:7d:7c:d2:
f6:d1:70:ae:ae:09:8e:bb:14:0e:fb:1e:c7:57:eb:
0e:da:37:a5:f2:60:2f:e7:80:b6:86:c9:b1:fd:94:
76:e4:04:d8:7f:f5:5f:11:aa:a1:26:92:08:8f:da:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F0:15:71:8B:8E:98:AA:3D:BB:0B:46:EA:25:42:31:90:63:83:9C
X509v3 Authority Key Identifier:
keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:97:e3:a1:8c:fd:f3:8f:24:73:bf:93:2f:7c:8c:87:ae:
95:2f:b7:54:5e:49:94:83:10:7d:32:b6:dd:01:cf:2d:ae:81:
03:e2:a2:67:ad:c5:a7:dd:67:ea:96:7e:ae:d6:89:9b:ae:9a:
a0:6b:18:f8:64:2d:39:ef:4b:12:df:b0:91:de:ed:7c:3e:b4:
29:c5:53:b5:68:c2:82:f8:25:8e:be:fc:c7:5a:35:5f:57:4a:
6b:79:4d:a2:e5:97:17:20:30:4b:9d:19:d5:ed:24:3e:ee:01:
78:b1:a8:fc:33:f8:b4:a7:ea:33:0a:9b:20:5a:f7:d0:ad:a8:
1c:23:72:58:06:08:ab:37:66:d1:a9:08:13:d5:b3:37:32:29:
64:6b:6d:c7:ae:00:ea:51:fa:ad:6a:b2:28:e6:cf:0c:1d:79:
09:18:39:08:64:22:b6:98:35:4b:1c:7b:39:e2:c9:bc:98:83:
81:51:77:a3:6d:8a:5f:9a:8c:79:e0:68:52:b3:c9:3f:61:95:
1e:fd:98:d5:aa:a4:34:0a:3a:e5:fb:76:b3:f9:63:68:da:0b:
f6:2f:ff:4e:99:87:41:68:10:77:16:55:37:2e:e9:45:43:1b:
ac:34:0e:60:f3:4b:cc:33:1c:23:49:83:4b:d0:7f:b7:bc:84:
b3:c4:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:09:57 2026 by rpki-client