
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier: khtJtby5L1MwZhk6GFG+z52CSKQiH1yA6E1NZ+Bg9Cc=
Subject key identifier: 55:C2:05:C2:C0:95:E6:13:47:DD:BD:8A:65:5D:E9:30:48:AB:FC:49
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial: 0641
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number: 063A
Signing time: Thu 24 Sep 2026 22:34:53 +0000
Manifest this update: Thu 24 Sep 2026 22:34:52 +0000
Manifest next update: Thu 01 Oct 2026 22:34:52 +0000
Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: Bd6izA5Uc7nPglYH6TbMecaJ5yaJllDG6ZSsEuJphpE=)
2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: YDIYwh8IZsocldDrNfzej1ZrNQO57DlnoJZAAXQRlpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Validity
Not Before: Sep 24 22:34:52 2026 GMT
Not After : Oct 1 22:34:52 2026 GMT
Subject: CN=6ab5a58d-3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:82:58:a6:61:4c:7d:91:f2:d0:d7:49:21:
52:21:70:69:ae:84:97:a6:de:0d:c7:0e:e7:55:2d:
f9:eb:e1:ca:2a:a9:1f:96:c9:5f:ab:5b:46:6b:25:
6d:22:56:dd:75:fa:6b:b1:6b:2b:55:0f:d5:ad:1d:
44:e2:5d:6a:49:56:c0:dd:e5:4b:c9:ca:60:43:d3:
22:35:1f:5b:19:bd:f6:4f:67:3d:cf:e1:80:6e:14:
2b:2e:3c:d0:4f:e8:e3:a8:65:18:08:68:eb:d2:ee:
a3:0b:da:ca:af:04:bc:5a:91:80:ad:cd:2c:3f:0f:
d8:6f:50:4d:2f:1f:d1:84:8c:3d:54:0a:51:ea:59:
f5:5d:f4:0c:12:a9:de:09:a7:94:9d:89:a0:7d:dd:
89:8c:5b:b4:8d:13:5d:14:eb:0e:13:92:27:f8:b7:
5e:ec:81:b2:4c:f9:20:dd:af:b5:bc:ad:c6:8f:08:
0a:2b:96:d9:63:fc:fb:0d:0e:ae:a3:8e:6b:81:b8:
eb:02:69:59:ed:db:3d:93:d6:44:ec:68:d8:94:69:
cb:06:3f:73:36:31:fd:28:0d:69:88:d6:45:80:a6:
5e:fc:57:8a:34:5d:5c:00:b1:71:60:73:23:db:85:
47:d1:a2:c8:d0:81:fc:93:43:35:43:d3:45:f2:c0:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:05:C2:C0:95:E6:13:47:DD:BD:8A:65:5D:E9:30:48:AB:FC:49
X509v3 Authority Key Identifier:
keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:9f:af:6a:aa:1f:b8:e2:21:57:d2:7d:10:24:50:52:6d:
bc:0d:96:70:40:b7:3a:9e:0b:67:62:4a:45:23:0e:a1:ad:16:
d0:bc:3a:8c:0c:58:e9:bb:c6:42:db:5c:b9:88:bc:40:10:5e:
91:57:f7:9e:6c:a8:a5:31:0b:bb:c1:4e:f2:f4:6c:74:01:10:
66:5b:3a:1c:87:0c:21:00:fe:f7:79:7b:97:c1:0b:38:93:9d:
76:c2:25:dd:3f:e6:da:50:e3:81:d3:c2:68:33:b8:ae:59:ea:
ed:f1:32:02:4e:b1:85:c1:5f:26:68:01:b7:bb:7a:f1:43:a8:
c3:fe:13:62:9a:e5:c8:a5:32:9a:6e:47:10:e0:8a:4a:8e:80:
61:a1:e2:26:58:ca:bc:0b:fb:65:76:99:19:43:7b:21:1e:13:
57:dc:e0:96:29:08:37:6b:47:ff:3e:5e:4e:9b:e7:35:8f:88:
49:ee:9f:b8:e4:b9:96:38:64:bc:10:db:e7:98:d1:69:38:3e:
a9:ba:7f:99:af:c9:9b:a2:35:a4:74:cb:8b:0b:d1:47:4c:da:
7d:69:bd:6a:53:66:0f:29:e5:d4:cf:c7:29:5d:b4:87:a9:fb:
9e:3e:8c:ad:4a:c6:f8:54:c9:93:39:ad:e9:d9:f8:62:08:41:
f1:3f:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:50 2026 by rpki-client