
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier: d9Rbom7FVaMN5BUq0WJWTBQRt8TRBCwnh59tqbXjKD0=
Subject key identifier: 26:AE:C2:40:66:FB:5F:43:52:1F:9B:F6:F7:6C:97:CC:C9:B0:C0:C4
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number: 0225
Signing time: Sun 01 Mar 2026 03:38:56 +0000
Manifest this update: Sun 01 Mar 2026 03:38:56 +0000
Manifest next update: Sun 08 Mar 2026 03:38:56 +0000
Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: Mybgp7kJEX9Hp8AX+2REOXvdq6tWOu1xVMOWbAw3anQ=)
2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: 8HVeMLO3bKhjW+EfaiYdpzWPVLQAZ8STeaepP4jAz8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Validity
Not Before: Mar 1 03:38:56 2026 GMT
Not After : Mar 8 03:38:56 2026 GMT
Subject: CN=69a3b4d0-3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:58:9f:5d:20:ef:12:40:34:23:06:c8:6f:
fa:3a:96:32:32:52:87:63:cd:3d:e2:95:ee:80:66:
d5:8b:eb:f7:19:a4:5b:42:34:80:b9:f2:37:31:c9:
af:59:ce:1d:32:12:a8:66:bb:9c:76:f6:67:ce:06:
de:19:f2:0d:ac:7b:89:5e:77:26:3c:72:29:cc:dd:
78:ee:5d:13:84:ce:b3:c4:74:a2:69:35:06:ed:6f:
3b:0d:ac:e8:1d:ef:3c:4d:30:84:97:68:91:cf:f4:
a5:cc:a1:d2:4d:73:77:e6:ed:b8:04:e7:9f:0f:eb:
1e:be:f3:d9:a1:f5:4c:84:c8:bf:17:80:72:7a:de:
f3:e4:c0:4a:ac:6c:69:b7:b6:3e:f7:43:a6:a3:18:
2d:05:01:97:0e:d4:99:2d:f7:c3:d7:43:d8:dd:0d:
54:39:99:aa:5d:d2:f4:4e:e1:24:5f:70:42:ca:2c:
d3:7c:71:15:8d:91:fc:ca:4e:a5:e9:ed:fd:0b:32:
70:3b:92:85:48:1b:cc:d4:f7:0c:7c:64:e3:ce:3b:
66:53:e6:2e:24:2f:7a:8a:93:c1:65:95:4a:f3:0b:
43:d2:d4:93:9b:30:d4:17:73:64:9b:b9:fe:d1:92:
7c:ba:95:b4:dc:b6:0f:61:e4:8a:e8:0f:d1:8d:2d:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:C2:40:66:FB:5F:43:52:1F:9B:F6:F7:6C:97:CC:C9:B0:C0:C4
X509v3 Authority Key Identifier:
keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:70:50:cc:26:de:2a:2f:20:f8:f7:8a:56:c0:dd:24:08:01:
29:da:dc:a9:87:ef:53:4b:75:54:e4:ff:61:7c:e8:b9:e9:1d:
dd:5b:08:bf:ec:eb:4c:55:31:cc:90:95:cd:20:b8:21:d9:69:
12:a5:bd:4e:e5:4c:64:e4:95:cb:15:6c:d8:44:32:b9:71:9a:
00:0f:17:11:0c:31:b9:0f:de:ae:50:97:f4:51:7d:1b:84:07:
f7:ca:43:2d:8e:27:87:3e:a5:74:02:ac:5d:91:83:82:8b:4a:
e5:43:c2:0d:c2:a4:81:30:67:97:17:db:1e:44:75:0a:95:4a:
5f:d8:d9:92:0a:41:1a:93:19:19:a1:39:5a:71:77:68:07:de:
2c:c4:00:0d:18:e7:4f:97:a3:83:b9:67:a3:49:c9:54:98:8a:
f1:55:b5:5b:08:1e:42:84:cf:cf:f6:94:c1:b9:ef:84:d3:09:
14:5f:d2:3f:7c:c8:c2:d5:e4:a1:c5:f0:dc:6d:ba:69:98:6f:
c3:6a:df:8f:ab:08:52:54:e9:fc:7c:5e:5d:7c:89:61:00:f5:
85:3c:3f:90:a7:24:53:39:37:c6:d2:eb:e7:fc:36:dd:98:5f:
19:5f:32:27:fd:6d:d2:96:56:19:5c:ee:51:5b:3e:18:11:23:
b3:49:fd:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF
MkZCMzFDMTgwHhcNMjYwMzAxMDMzODU2WhcNMjYwMzA4MDMzODU2WjAYMRYwFAYD
VQQDDA02OWEzYjRkMC0zNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqn1Yn10g7xJANCMGyG/6OpYyMlKHY8094pXugGbVi+v3GaRbQjSAufI3Mcmv
Wc4dMhKoZrucdvZnzgbeGfINrHuJXncmPHIpzN147l0ThM6zxHSiaTUG7W87Dazo
He88TTCEl2iRz/SlzKHSTXN35u24BOefD+sevvPZofVMhMi/F4Byet7z5MBKrGxp
t7Y+90OmoxgtBQGXDtSZLffD10PY3Q1UOZmqXdL0TuEkX3BCyizTfHEVjZH8yk6l
6e39CzJwO5KFSBvM1PcMfGTjzjtmU+YuJC96ipPBZZVK8wtD0tSTmzDUF3Nkm7n+
0ZJ8upW03LYPYeSK6A/RjS3JcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCauwkBm
+19DUh+b9vdsl8zJsMDEMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1
MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy
WWhCU3M2cUZKRlRpLXpIQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACXBQzCbeKi8g+PeKVsDdJAgBKdrcqYfvU0t1VOT/YXzouekd3VsIv+zrTFUx
zJCVzSC4IdlpEqW9TuVMZOSVyxVs2EQyuXGaAA8XEQwxuQ/erlCX9FF9G4QH98pD
LY4nhz6ldAKsXZGDgotK5UPCDcKkgTBnlxfbHkR1CpVKX9jZkgpBGpMZGaE5WnF3
aAfeLMQADRjnT5ejg7lno0nJVJiK8VW1WwgeQoTPz/aUwbnvhNMJFF/SP3zIwtXk
ocXw3G26aZhvw2rfj6sIUlTp/HxeXXyJYQD1hTw/kKckUzk3xtLr5/w23ZhfGV8y
J/1t0pZWGVzuUVs+GBEjs0n9RA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:44:04 2026 by rpki-client