
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
File: pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft (raw, json)
Hash identifier: OO5eV+QlMJHBZAynlPUnkX9ZJUYFepi/LJSHLyADs48=
Subject key identifier: F9:A4:2D:13:0A:EA:A2:86:BD:71:A0:38:74:7A:E3:AC:9F:F8:A7:5A
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial: 077D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
Manifest number: 0770
Signing time: Tue 22 Sep 2026 21:23:29 +0000
Manifest this update: Tue 22 Sep 2026 21:23:28 +0000
Manifest next update: Tue 29 Sep 2026 21:23:28 +0000
Files and hashes: 1: pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl (hash: lvf2CQVCuz72bnyh9qK7IE9nM9got7Q/1Cia+scSJd4=)
2: E84DCBC422D211EDAF1F924EC4F9AE02.roa (hash: pwlC3i6Dw77h4VjdOciKa1OoCdf0YqgEjmXujNfwxJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917 (0x77d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Validity
Not Before: Sep 22 21:23:28 2026 GMT
Not After : Sep 29 21:23:28 2026 GMT
Subject: CN=6ab2f1d1-2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:dd:4d:2a:20:70:dd:39:f8:db:35:fc:6c:
64:64:c9:df:63:be:46:9b:c0:e8:f5:30:ff:50:c7:
08:33:1a:6d:2d:b9:1d:91:d7:c1:fc:67:80:b5:43:
29:a4:6c:ea:4d:79:21:59:d0:4a:17:13:3e:f6:c1:
11:23:a5:3b:16:8a:1b:2f:ab:83:9a:c7:4c:e1:f3:
90:8d:c9:b9:6f:0c:d2:6b:bc:e0:9f:68:59:00:68:
f8:ed:75:70:45:7e:2d:f7:ac:a8:32:87:96:53:7c:
06:f8:51:f7:70:0e:4e:14:f0:46:29:ed:c8:59:27:
04:03:c5:89:c9:43:46:3b:84:e9:38:ff:58:d7:ab:
cc:46:2a:3c:0d:bb:fa:d0:8e:77:2f:28:b8:a9:90:
4a:c8:2e:4a:e8:c0:7c:20:d6:da:cf:f1:55:53:17:
2d:0d:14:12:5e:10:45:be:77:a8:3e:bd:d2:84:67:
87:1c:13:d5:cd:e7:99:05:ef:c3:75:94:58:c0:92:
55:06:e2:24:9f:01:1a:14:4f:67:eb:ae:1d:bf:bd:
7e:97:99:b3:da:04:f1:6c:85:b5:63:b4:ec:bc:80:
c9:3d:5c:aa:e7:66:8e:9c:d0:01:7f:b7:30:1e:8b:
43:22:d8:08:b1:56:ac:cf:ff:a7:57:f6:56:bc:22:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:2D:13:0A:EA:A2:86:BD:71:A0:38:74:7A:E3:AC:9F:F8:A7:5A
X509v3 Authority Key Identifier:
keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b8:e6:96:e6:6f:da:f5:22:c0:93:0e:df:7a:5f:f5:da:69:
c7:61:a5:b2:30:81:88:e2:bf:83:b6:7a:81:a6:f6:c0:b3:e8:
b2:90:5f:9f:6c:3a:89:4a:c1:35:40:11:28:8b:58:f3:39:c3:
f0:46:71:33:37:1b:93:7c:09:fc:e8:cc:bd:81:c6:4b:f9:3b:
1a:82:e6:5e:51:d0:73:85:16:4f:eb:e4:05:6d:8b:35:73:2a:
90:78:7d:1c:5b:a4:cd:c4:79:89:ce:df:f6:9b:fd:a7:e5:4c:
50:4e:c5:22:2f:46:ce:23:1d:69:33:42:50:5e:23:a8:67:3c:
f0:47:e4:36:88:00:30:7a:18:88:47:c6:de:e0:11:17:b0:27:
bf:f0:c1:84:c0:85:67:48:41:88:cc:52:8a:21:8a:56:ae:5f:
43:5c:16:b0:b0:fc:bb:40:b0:88:2d:5b:50:55:7a:75:fa:1b:
21:56:88:78:d7:f6:50:12:cc:f6:d2:c8:6f:a4:53:11:a3:33:
bb:fc:2a:e2:be:c6:74:70:c9:8a:ec:ce:b5:44:2f:95:95:92:
44:6d:52:07:c9:21:6e:71:b4:2d:b9:75:63:1a:13:53:8e:73:
26:cb:12:5f:0d:63:36:f8:70:3d:1a:09:de:f5:2d:fe:3d:58:
e9:d2:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:23:01 2026 by rpki-client