
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier: tcpfsE2t0QJYlY30ENFzLLHUSfLmTKYwBRyZCaDPVxM=
Subject key identifier: 8E:8F:54:0E:42:95:A9:A0:43:10:C3:39:A8:B1:43:4B:31:25:3A:5E
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number: 06CB
Signing time: Sun 20 Sep 2026 22:08:54 +0000
Manifest this update: Sun 20 Sep 2026 22:08:53 +0000
Manifest next update: Sun 27 Sep 2026 22:08:53 +0000
Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: 1wZMzAArJKmUKQVK72nAiR/nQcdvqlOunRxEvs554IM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Validity
Not Before: Sep 20 22:08:53 2026 GMT
Not After : Sep 27 22:08:53 2026 GMT
Subject: CN=6ab05976-5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:82:d8:1b:39:ad:66:be:c2:a6:11:b2:a8:
09:1d:a6:50:41:0c:2d:b3:0e:79:5a:b0:7f:e3:bc:
b4:09:f7:e1:62:ea:b6:ec:6d:3e:9a:7b:95:da:09:
85:ec:fe:f6:c3:fc:ae:32:c2:b3:fb:90:a1:93:eb:
b5:a8:d9:15:48:6e:c7:39:57:98:28:41:91:3d:01:
de:53:7e:e3:91:fa:77:5c:74:08:97:67:68:48:78:
7a:6b:a3:d5:85:5c:b1:3e:fc:59:f0:30:9c:df:9e:
7b:e4:d7:2f:a0:ab:1a:a4:d4:7f:02:c4:23:2f:ba:
94:e8:c2:54:75:62:81:dd:a9:a7:cc:14:f3:af:ea:
1d:42:12:92:72:4b:5c:e2:c3:61:ee:cc:5a:8b:8a:
f9:10:05:9e:71:21:86:e1:bb:03:a3:3d:c7:2e:fc:
88:53:ad:0e:cd:c6:af:48:38:be:51:af:6f:f0:58:
bc:b0:59:ca:f6:61:14:fe:30:5a:12:bb:98:26:0c:
32:26:eb:86:6a:b0:95:9a:5f:23:8f:2e:a2:d0:12:
55:bf:12:76:15:a4:34:a2:fc:dc:1d:a9:c9:09:b8:
5d:01:bd:ac:a2:13:68:49:16:0b:6b:d7:65:73:5f:
a8:d0:cb:d2:46:b1:7b:a6:bd:14:98:be:15:14:db:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8F:54:0E:42:95:A9:A0:43:10:C3:39:A8:B1:43:4B:31:25:3A:5E
X509v3 Authority Key Identifier:
keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f1:fb:20:71:70:b4:31:b7:9d:f1:f5:f0:0f:87:72:ed:95:
ec:f1:3c:ad:fb:12:93:8c:d3:b9:56:b2:c9:44:11:92:0b:6b:
f7:a1:f2:e7:5e:dd:a7:4f:f9:d8:1b:e5:48:4c:74:b3:b9:4c:
49:72:a9:f0:17:59:9d:8f:bf:4a:fd:63:53:58:48:a0:27:47:
94:10:be:3f:d0:83:94:5d:0f:cd:49:b7:a9:62:c4:85:a2:38:
07:43:ee:9d:b0:13:fb:cb:b2:3d:3c:46:a2:89:83:7e:f6:83:
0e:d8:e8:60:b1:77:d0:ad:46:07:ef:f1:1c:13:f7:31:68:bb:
b0:9c:2b:ae:59:e5:3e:de:15:71:1c:b7:36:3a:07:35:fb:e6:
7f:27:55:d9:94:d3:08:f7:09:68:72:d8:df:83:50:f5:1e:cf:
09:08:f6:6d:c6:dc:55:a5:1e:0f:26:ad:77:69:d6:6c:71:27:
65:9c:c8:ce:f0:92:5f:2d:88:86:92:54:47:72:2e:13:d9:55:
11:b6:4f:fb:80:19:ec:37:4f:81:3e:9c:87:9c:20:0f:f2:d9:
88:9c:29:e8:d1:6c:64:1d:cd:55:1b:f7:7e:c4:da:66:d8:56:
76:d9:69:88:8d:dd:06:7d:70:03:1e:89:41:8c:b9:05:f4:67:
eb:f2:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:44:41 2026 by rpki-client