
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier: 7ZK+m6g0lYf0AwVYU7Q1imCwwMcOGCeYwQDGEV4//lA=
Subject key identifier: 50:25:36:C8:29:93:31:29:2A:01:72:72:76:5D:CF:39:03:D9:47:6E
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial: 2CC8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number: 2CC5
Signing time: Sat 28 Feb 2026 14:27:26 +0000
Manifest this update: Sat 28 Feb 2026 14:27:25 +0000
Manifest next update: Sat 07 Mar 2026 14:27:25 +0000
Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: pES18taaZZVPeKAyob270sX0byP8asbuiz/5lwT+s9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11464 (0x2cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Validity
Not Before: Feb 28 14:27:25 2026 GMT
Not After : Mar 7 14:27:25 2026 GMT
Subject: CN=69a2fb4e-69ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:41:cb:5c:78:67:c7:8f:7a:8e:ff:35:0d:
3e:e6:02:71:db:9e:36:5a:bc:a5:72:ed:e2:60:ed:
89:b5:e7:b0:15:b3:84:29:d4:48:4f:58:e7:d7:1a:
1a:ec:12:6c:72:cf:66:ed:52:f1:fa:b4:4b:25:fc:
9a:41:a8:f9:72:e8:1e:13:51:28:d8:80:be:6f:68:
28:7e:21:30:4e:16:a2:36:ce:ba:40:0a:d2:e0:8c:
d8:7e:57:b0:a6:e4:cf:f4:ac:d5:41:12:d2:25:44:
78:81:8e:9e:c1:87:43:aa:ef:1e:24:a4:22:8a:dc:
94:cf:2a:52:ae:2a:8c:33:3f:1d:09:c9:d8:9e:b5:
46:44:4d:47:a5:d0:5e:12:b6:8f:82:39:29:fd:c2:
af:ae:b3:39:80:39:63:47:46:a3:ec:ad:13:68:74:
b4:ac:83:cb:47:86:81:53:46:ed:96:2c:aa:10:4c:
59:75:0a:a3:56:f3:2a:c4:c6:95:06:b8:41:3d:dd:
1f:ba:00:f6:a8:7a:0b:a0:52:08:81:9b:36:3d:78:
8f:dc:ba:70:9a:43:c5:8c:91:92:79:60:ab:bc:32:
c4:f1:20:6b:88:15:0f:00:ce:ef:a7:2c:56:53:87:
87:53:a7:f7:3f:0b:2d:db:db:00:27:7f:77:48:80:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:25:36:C8:29:93:31:29:2A:01:72:72:76:5D:CF:39:03:D9:47:6E
X509v3 Authority Key Identifier:
keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:bb:b4:e3:14:a1:50:f1:20:03:b6:fb:da:8f:aa:09:8f:
1c:87:70:b0:82:a4:6d:0b:ad:b8:c8:92:71:a2:27:a3:fd:0c:
27:34:ac:86:e9:95:3a:04:c6:87:77:fa:d5:73:7b:14:35:b2:
7a:b5:ba:e2:d2:36:ab:b7:20:ca:f0:af:2f:5c:1a:af:d0:6b:
05:56:50:07:e2:92:14:50:30:80:66:50:87:4b:95:07:86:37:
f0:ee:6b:9c:96:c7:ad:c4:40:93:98:2c:52:e9:ac:8d:17:90:
e7:9c:8c:cf:71:36:43:bd:01:e9:74:ce:59:f5:6f:45:bd:35:
6f:bc:fd:3d:e5:a1:02:4f:17:84:d1:4b:5e:3e:70:7a:3d:96:
ad:c2:7a:80:39:c9:6e:a2:42:5d:0f:19:90:53:59:9b:ea:8d:
ce:9a:a9:6b:db:b8:5e:5a:cb:a0:42:69:a7:6b:ad:94:b9:d5:
5f:fc:4b:36:01:13:c8:fe:b3:8f:4b:50:ee:ac:ab:81:b1:19:
5f:c0:cf:b1:45:0b:a7:2d:63:5c:34:48:25:56:45:f7:ae:2e:
9c:9e:22:fb:fa:ee:d1:f6:63:78:b2:e4:49:49:4a:0e:0b:1f:
fd:fc:f8:59:b1:53:b5:d4:d2:8a:28:35:ba:b6:55:9b:84:07:
a3:60:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:44 2026 by rpki-client