
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier: wePd6eRU1j32QV8FFkqDTD+iMdg1aWDYynT0q2WI2b4=
Subject key identifier: AE:40:E6:76:E8:EB:D5:92:21:24:C8:95:B4:EC:D8:66:43:C9:44:A2
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number: 01C0
Signing time: Sun 11 Oct 2026 04:34:19 +0000
Manifest this update: Sun 11 Oct 2026 04:34:18 +0000
Manifest next update: Sun 18 Oct 2026 04:34:18 +0000
Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: fbbvaOTkMutV5KTKtrN30rPHd7L8+/CKptMEAEd3b1Q=)
2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: CSNhoZkKt729AJAsDVCNWknT1CnJ47gjrYdcuOI20TM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Validity
Not Before: Oct 11 04:34:18 2026 GMT
Not After : Oct 18 04:34:18 2026 GMT
Subject: CN=6acb11ca-f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:e4:d5:6f:62:9e:ba:5f:36:26:d7:e0:6b:
d4:27:69:d7:25:fa:7e:0b:f1:5f:a3:49:05:8d:51:
d0:48:d3:b4:a1:39:79:58:7d:4a:04:61:41:f4:d5:
97:95:da:9d:ea:23:69:42:d1:de:61:22:db:19:71:
3e:2f:47:7e:cf:65:f9:da:d1:69:7d:31:b7:16:20:
bb:f6:bd:26:9c:7b:ea:d4:1e:23:34:de:8d:ad:ce:
4d:20:0d:55:a0:05:b7:94:10:22:8f:92:93:96:2b:
eb:40:97:53:3d:bd:f0:62:0a:08:58:0c:7f:c7:d4:
0b:e5:5f:d0:80:33:33:10:0e:52:ae:6c:8b:82:82:
80:0f:fe:d9:b1:90:5f:ea:18:2d:da:bb:53:bb:f4:
d9:fa:c7:9c:46:56:21:32:68:59:88:d7:5f:43:86:
6f:84:5a:4f:fa:4d:b3:49:fa:a0:d3:0f:c1:26:38:
0f:7e:71:56:2d:25:cd:53:e5:d0:87:bb:42:94:6b:
bb:5b:d6:23:3c:8b:8d:ff:31:2f:30:63:f1:08:ef:
1f:c6:cd:a7:05:ca:da:6b:8e:95:ee:7d:46:d1:62:
62:12:b7:68:27:c9:32:54:79:75:06:35:5c:43:c9:
64:f8:14:d8:b2:7d:a3:11:08:89:25:6f:37:0f:61:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:E6:76:E8:EB:D5:92:21:24:C8:95:B4:EC:D8:66:43:C9:44:A2
X509v3 Authority Key Identifier:
keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:46:4f:f4:58:97:df:41:a2:1f:e1:95:53:4c:be:aa:f5:
79:b5:ec:bd:f3:f7:46:fe:0e:a0:74:c0:2a:e4:dc:76:ff:ba:
16:f9:77:ba:f6:53:b6:be:46:b7:75:4e:37:d6:0d:b8:b4:fd:
83:da:48:7d:43:2a:93:a0:1b:ca:45:be:cc:ca:f0:18:6c:85:
c8:2e:20:4e:7a:02:9b:53:f3:2c:eb:dd:a5:58:8f:71:a4:d7:
64:ef:ed:68:a0:9b:c6:fb:3b:94:c8:93:f5:de:17:fe:3d:cb:
62:2a:7b:dd:47:92:b5:33:73:0b:65:30:db:34:5c:d9:19:cc:
5d:dc:ad:d1:3e:b3:25:e4:bb:f8:bb:3e:8f:bc:50:ae:24:77:
f3:ea:4b:8c:6b:15:d8:71:46:d8:9b:65:ff:89:f6:01:64:27:
cd:d4:aa:6d:84:67:e9:c0:94:7f:f9:64:a7:46:4d:67:29:81:
d2:5c:31:46:0c:8d:0f:92:9b:9c:3b:30:19:97:4c:96:7a:7e:
56:e0:a3:0f:dd:7b:65:d6:87:ad:d9:90:ad:37:f8:b2:5e:f2:
a0:74:b1:53:2e:dc:af:cf:6e:b9:11:74:ae:31:e8:03:9a:ff:
c7:8e:3b:e0:51:5f:da:3f:65:89:4f:c7:b4:35:3e:50:74:34:
8a:de:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:05:04 2026 by rpki-client