
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: eQJyuupFBBd6tJu33h7LlqgDY3PkU0hTecv8wqwp/IU=
Subject key identifier: C2:FE:45:9B:DF:C7:16:DC:98:B7:B6:A2:AC:70:30:1A:EC:A5:29:40
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 07EF
Signing time: Sat 28 Feb 2026 21:39:39 +0000
Manifest this update: Sat 28 Feb 2026 21:39:39 +0000
Manifest next update: Sat 07 Mar 2026 21:39:39 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: T3u1CfsGTdxf2C/r0cTJFDtjI83MgmiZnYJE9uxFhE0=)
2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: 1IWRKHioOXMwyjTTWNWycmySSHih4LoHTQzkoE2T/Mc=)
3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: v+QXD6bTtJAGlVNjOl+dSqWjB8ujPNeWcMRgTCNmmWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Feb 28 21:39:39 2026 GMT
Not After : Mar 7 21:39:39 2026 GMT
Subject: CN=69a3609b-6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:ca:e8:c1:4d:e8:48:7a:90:a8:2f:78:3e:
e1:1f:37:3b:63:b8:dd:d5:73:fe:06:73:e4:c5:52:
45:c4:85:66:72:03:fd:5c:4f:53:96:c5:92:98:e9:
e6:13:dd:e8:db:48:c1:d4:48:eb:91:57:e2:83:b4:
cc:5d:fa:ba:ee:97:ef:09:f2:db:ab:48:a0:01:cf:
98:a9:03:9e:f9:74:2f:7b:a9:57:be:96:67:5f:61:
1a:f4:83:87:ce:9f:7f:12:65:c7:d8:6b:fa:88:04:
b9:06:d8:c2:a7:59:1b:02:de:fd:4d:f5:ae:ea:1a:
45:40:38:d7:93:6a:59:2c:dd:49:c0:7a:7f:fc:e2:
dc:81:bc:8e:c6:fc:19:a8:3d:69:3e:10:17:2e:f5:
e2:94:c9:8e:d1:bc:51:06:20:66:1e:94:42:89:12:
71:8d:28:08:6f:1b:4a:fb:ab:90:ba:0e:dd:82:a7:
31:fa:5a:33:21:23:21:6a:9d:9b:8f:85:db:a8:ab:
70:b8:3d:5a:15:47:9b:1c:72:e4:4b:f7:20:6a:81:
25:ea:af:55:e2:47:97:97:34:a8:ea:90:8c:ca:7c:
57:78:5e:4a:fa:b1:01:0a:98:de:9b:4a:e5:15:24:
d5:0f:21:7b:a3:51:57:16:3e:3c:04:c8:2a:5b:ab:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:45:9B:DF:C7:16:DC:98:B7:B6:A2:AC:70:30:1A:EC:A5:29:40
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:91:27:da:f4:1b:51:4d:f2:45:0e:18:04:d9:89:8e:72:80:
9c:d1:83:8f:5f:04:6a:10:d9:29:ca:b6:ba:25:f5:96:43:e2:
de:b6:6a:f6:01:68:06:40:12:f2:30:0e:01:79:b9:c2:74:31:
d8:d3:51:67:7f:86:24:52:c8:32:40:27:85:bc:06:43:5f:27:
9c:90:32:e5:c0:18:11:b0:57:af:c1:64:fd:39:8e:22:50:f8:
17:3e:27:30:05:90:07:05:23:d0:9b:07:fe:86:bd:54:67:ad:
9f:25:c6:13:61:d2:01:ad:f0:cc:4d:eb:2a:cb:13:ad:9c:32:
61:02:0b:ff:ec:b1:cf:df:af:17:cd:80:c8:7d:c7:f1:ad:cd:
36:ab:32:77:1c:81:74:39:eb:df:e1:f4:1d:85:a7:14:73:0c:
59:78:15:1e:65:5f:eb:b7:9a:ac:47:0d:ba:77:6e:96:8b:9a:
be:c1:4b:a4:9b:d2:b2:5c:19:ef:4d:fe:c8:92:7d:e4:e6:5d:
bb:ac:2a:4c:a5:f9:a6:d1:9b:60:15:22:ea:59:d3:a7:e0:35:
ec:f0:7e:18:2c:7c:b8:df:8c:1b:fa:45:c7:4f:cb:1e:77:2d:
00:cc:be:e0:c0:d4:f0:f4:fd:4d:97:c8:b7:4c:b8:bf:49:7c:
e2:5a:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:59 2026 by rpki-client