
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier: 7D9x2taC2xeBLWVkJJhcGdIv3qEjtL0IE6L7QlWVc3M=
Subject key identifier: 0E:DE:D2:24:49:70:95:1F:7B:03:C4:E7:C8:1B:43:52:AF:17:BD:EA
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number: 9B
Signing time: Wed 07 Oct 2026 07:57:45 +0000
Manifest this update: Wed 07 Oct 2026 07:57:45 +0000
Manifest next update: Wed 14 Oct 2026 07:57:45 +0000
Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: ma32ShLhE/YcUjfdKuqkqrbSd3qPatkZofVMwaSXc4I=)
2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Validity
Not Before: Oct 7 07:57:45 2026 GMT
Not After : Oct 14 07:57:45 2026 GMT
Subject: CN=6ac5fb79-e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:02:42:50:6a:fc:1a:d7:e7:cf:a6:9c:21:
ff:b2:1a:72:87:29:69:90:c2:48:19:13:47:1e:62:
92:e7:6b:63:c3:00:a5:94:00:fd:76:8a:58:a7:d1:
d5:f5:a0:f0:03:cd:ec:41:38:3f:7a:b7:cf:a9:a0:
a9:e3:1b:63:31:6d:a1:a4:0e:aa:50:4c:17:a9:60:
06:68:e1:69:10:50:c9:94:13:d4:b7:1e:5c:6f:61:
be:51:d3:5b:c4:5b:e6:00:8b:02:86:5b:6d:55:42:
d0:41:48:bb:c3:01:81:38:17:21:f3:d5:dc:66:83:
54:c7:93:8e:bf:54:3c:62:78:ff:1d:c4:df:d9:e4:
b6:b0:97:ba:1b:f4:4d:d4:70:01:cb:0c:c9:62:f4:
ca:36:c2:a8:9c:49:4b:4f:dc:a1:40:61:07:f4:56:
06:c3:5c:61:fb:be:b7:7d:61:ae:6e:32:85:90:2a:
f5:e6:65:dd:74:46:b2:81:c3:c5:85:d1:43:73:7e:
67:f4:34:46:e2:ab:45:16:79:7d:c8:73:59:c5:09:
96:12:6c:5e:18:33:ca:84:7a:9b:3b:79:8f:d3:45:
8a:16:ef:28:31:9b:f1:da:15:89:25:99:bd:79:a1:
e3:49:20:38:9a:9a:90:6e:d0:90:6e:e5:85:69:e7:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:D2:24:49:70:95:1F:7B:03:C4:E7:C8:1B:43:52:AF:17:BD:EA
X509v3 Authority Key Identifier:
keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:03:6b:93:2d:ee:52:7b:38:bb:be:22:c7:83:e0:60:ea:b2:
37:9b:e0:f7:1e:43:10:06:d4:65:85:cb:cd:a2:ff:6e:01:09:
b8:59:63:c6:92:b5:8d:ab:0c:64:f7:a2:9c:63:e1:dd:cf:a0:
3f:8c:fc:e1:36:a1:df:4e:ab:b8:03:c2:89:f0:52:eb:06:78:
7c:7b:c4:e8:4c:c3:86:b3:63:63:76:4d:70:65:8f:1f:ce:d2:
fa:1a:72:80:a1:cc:f5:22:ff:92:fa:8a:62:fd:66:b2:e2:f5:
1a:96:5c:8c:17:eb:e2:24:8d:2c:ad:57:83:a6:b5:6c:7e:83:
03:69:da:c4:93:18:6b:d9:48:1a:3c:66:88:77:60:98:1f:66:
0d:74:7b:c8:e4:a4:e3:30:cc:2a:bf:e1:bc:97:c6:e7:78:ac:
a3:0e:83:28:76:4a:4d:d4:83:f6:62:e1:a5:69:9f:4d:24:fe:
ed:3d:1a:db:c1:8b:b1:0e:82:ac:0f:c0:9c:e7:83:34:d0:1b:
85:af:f0:b2:63:49:df:c1:fa:c4:0e:2f:6a:84:14:fe:f0:6c:
8c:29:c9:4f:a1:eb:55:bd:83:f3:c5:e7:df:77:3f:36:91:71:
4b:81:74:91:46:bd:6d:cf:8d:ea:28:b2:ef:ce:bf:12:77:e2:
b3:44:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:14:08 2026 by rpki-client