
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier: 2pzRMfAxhDjbQ5NT8DP7iH0SgyGb1PmaADonXx/W5Os=
Subject key identifier: D0:CB:CA:E1:18:56:BF:09:EC:9A:57:28:16:3B:28:AC:55:66:30:10
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial: 04B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number: 04B1
Signing time: Sun 20 Sep 2026 23:43:11 +0000
Manifest this update: Sun 20 Sep 2026 23:43:10 +0000
Manifest next update: Sun 27 Sep 2026 23:43:10 +0000
Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: Q/WW3ThOo8FmscjU6bnWHyqGn7yPOYzQYsHosyZ2Ujk=)
2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8pQQGYfUUBzCIciN0c19QppTw2ZQOUtkh3E6ZoV8hjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Validity
Not Before: Sep 20 23:43:10 2026 GMT
Not After : Sep 27 23:43:10 2026 GMT
Subject: CN=6ab06f8f-6b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:90:8c:ca:b8:5e:f8:8d:94:ea:73:1f:d8:
6a:b9:03:33:6a:50:4e:8b:52:57:a7:ca:d6:e7:77:
76:31:14:fc:19:4c:08:f6:0a:9e:b8:3e:92:f9:cd:
e6:30:aa:86:15:5f:27:0b:7a:5f:b4:98:28:80:42:
4f:14:96:c7:17:08:90:c3:52:73:2a:f7:6b:63:01:
63:de:48:94:94:dd:5e:61:21:b4:90:a4:99:55:89:
bb:06:19:ad:6d:14:c5:8b:6e:29:4c:68:4f:b7:63:
cc:aa:b1:8b:8b:67:4d:fd:4e:02:ed:ab:d4:f1:7d:
1d:d8:47:58:00:24:59:ad:33:06:df:60:bb:0c:80:
32:1a:c8:b3:70:7c:85:f9:79:e9:96:82:f4:b2:f8:
0a:68:8a:cc:b9:78:57:a0:ba:79:5d:6e:63:55:b3:
0e:49:6c:8d:a1:bf:a5:6b:96:42:de:d9:3a:48:de:
44:c0:a9:06:3e:87:5f:f2:d2:b7:ab:ad:7a:9e:ff:
0a:0c:c1:df:80:50:75:6a:c0:64:e9:03:39:58:cb:
53:0b:80:13:a2:a5:81:07:4f:7f:88:98:6c:64:05:
f1:a6:4c:19:bc:57:0e:3a:1b:a7:a8:12:8d:ac:cd:
89:dd:2e:c6:2a:0f:6a:d3:5c:40:9e:db:72:d3:99:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:CA:E1:18:56:BF:09:EC:9A:57:28:16:3B:28:AC:55:66:30:10
X509v3 Authority Key Identifier:
keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e6:b7:84:d5:a1:42:91:86:89:ba:7d:ea:9e:61:b8:15:ab:e2:
3c:dd:4a:ab:1c:67:d8:15:01:2e:48:b8:75:67:7b:43:36:05:
0c:f8:fe:b6:21:15:6d:35:b9:d5:7c:8f:60:7b:09:fe:86:da:
3b:e4:9d:e4:b5:a5:0b:d2:93:33:8f:5a:b1:98:87:95:b2:61:
6c:3e:f9:26:da:02:79:06:da:28:56:6c:10:ee:1f:e4:ae:30:
f8:ff:45:dc:3f:4c:99:b4:f4:01:25:0e:80:36:30:67:3d:f0:
74:c5:6f:ac:7f:ea:d4:2f:a5:e0:e1:fd:e3:0d:cb:0e:5f:34:
a4:e1:c1:ac:11:72:f1:a1:b2:ab:28:43:21:db:23:27:25:59:
58:4a:ef:24:c6:cb:5d:25:5f:9f:f2:3e:68:6a:11:66:16:d9:
30:78:ff:8c:e0:53:f0:de:ca:1b:da:77:86:56:16:f5:1b:60:
26:38:c0:36:c1:a2:c1:a0:c7:af:6f:77:28:1a:47:a5:1b:d9:
ec:bb:0c:36:51:45:b5:2d:32:06:df:b9:22:ed:c3:2b:82:49:
a1:d3:62:b1:9b:48:de:54:6a:43:ee:6f:da:a0:58:a4:08:18:
e0:e9:eb:d5:ad:ad:97:21:92:a1:01:cf:c3:08:d9:6b:9c:98:
ed:f3:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:40 2026 by rpki-client