
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier: R+mzqbqwFnlZcCrNp2+bdTk8gB3EDfrWZxNZq1VuPSQ=
Subject key identifier: 80:E6:57:C1:F6:37:A1:55:05:16:21:2B:EB:39:B0:62:F7:94:29:FC
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial: 08A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number: 0897
Signing time: Fri 02 Oct 2026 20:57:52 +0000
Manifest this update: Fri 02 Oct 2026 20:57:51 +0000
Manifest next update: Fri 09 Oct 2026 20:57:51 +0000
Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: L+p7C5TjmAkFrT+UArqRhMZsx45J0VXyBifJVeJf+/8=)
2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208 (0x8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Validity
Not Before: Oct 2 20:57:51 2026 GMT
Not After : Oct 9 20:57:51 2026 GMT
Subject: CN=6ac01ad0-e42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:ff:46:4c:cd:d8:5a:f5:8c:59:d3:e9:ff:
57:c8:2f:30:5a:6e:56:bd:a9:da:8b:47:d5:cb:a0:
d1:bf:4b:7e:12:88:b2:1d:02:1b:37:e5:b4:ec:bc:
84:a5:b0:a9:53:a3:15:46:cc:bf:f6:c2:86:4d:5e:
2e:84:d1:42:84:96:83:e8:09:22:5f:fa:53:9d:05:
41:41:b4:10:e1:af:1f:a9:57:c6:f0:1b:c8:aa:26:
ff:e2:1a:c7:17:d1:71:44:8b:c0:a8:64:4d:20:d8:
3e:9d:ae:f7:c8:dd:43:f0:44:c1:a5:62:7d:69:3c:
09:15:25:1a:83:7b:c8:3a:b5:3d:ac:0f:b5:b7:55:
de:59:b7:cb:70:e0:56:19:5a:e7:94:03:53:ab:00:
df:43:e0:2e:aa:02:4c:de:c7:74:dd:c2:40:38:93:
30:71:c1:68:b1:9d:4f:bd:f1:8c:0a:22:de:9d:02:
5e:9b:2c:c5:bd:4b:08:82:16:e3:14:9f:0c:50:45:
9d:b1:ff:82:4a:b1:07:0b:58:98:87:c3:bf:63:a4:
cb:ce:98:dd:df:91:af:9c:be:d4:18:05:43:7f:90:
6b:e8:e6:2a:a2:48:ad:7a:fe:ae:fa:33:41:82:13:
d2:71:48:24:82:a6:5b:72:c6:3f:7e:6e:f7:72:7a:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:57:C1:F6:37:A1:55:05:16:21:2B:EB:39:B0:62:F7:94:29:FC
X509v3 Authority Key Identifier:
keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:23:69:93:c5:b2:5c:60:85:a9:ca:a7:46:c8:55:44:a6:4a:
41:8f:7c:c3:db:0d:77:71:5c:9a:fd:41:7d:3a:5c:59:1e:35:
13:e7:94:80:f4:df:ef:76:0f:49:fe:20:03:41:a8:9f:c2:bc:
e2:6b:85:1a:bc:26:f2:28:ac:43:58:2f:31:2e:66:e8:24:22:
a2:17:11:57:83:1b:77:ee:65:a7:81:7d:7c:b7:7c:bf:09:b9:
35:c8:19:9a:ae:79:34:cb:99:c1:97:d5:cc:6b:a7:49:70:8f:
cf:89:b1:49:6a:a5:a5:6a:b2:d8:0a:9d:39:69:89:89:41:4d:
8e:d8:01:df:09:6d:d8:ca:cc:21:4b:bb:b7:b4:7a:91:a1:45:
f4:5e:7a:a3:63:66:e4:60:cd:c0:60:e0:2a:2b:17:2c:f3:e6:
72:28:1d:61:6d:02:be:2b:c1:ab:48:e0:bb:aa:f9:b0:39:7f:
35:40:cd:a1:d1:70:e3:e0:6c:55:d5:97:30:6d:48:ad:c6:87:
20:d2:9c:0a:17:ce:8d:ff:45:b0:dd:b6:0d:d8:e9:34:0b:5b:
f2:0f:9c:01:42:49:f3:8c:81:da:99:5e:c5:36:3a:d3:f2:6d:
85:d2:d8:d0:e5:75:13:5a:8b:e7:e0:11:0e:62:1f:a4:4b:d1:
52:83:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:48:04 2026 by rpki-client