
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
File: PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json)
Hash identifier: K5BpHuFIFCA/+LHV8Q+/zhv2OvqIiEIsek3o3tGm97Q=
Subject key identifier: 62:A7:35:8B:E0:31:A0:EE:15:AE:21:BB:82:5E:74:93:31:20:AC:84
Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
Certificate issuer: /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
Manifest number: 46
Signing time: Mon 21 Sep 2026 08:25:35 +0000
Manifest this update: Mon 21 Sep 2026 08:25:35 +0000
Manifest next update: Mon 28 Sep 2026 08:25:35 +0000
Files and hashes: 1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: 8oMNT/ZMpciBWuRFsMHVC16z8JJrX7FBwBEHM/+wGg8=)
2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl
rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Validity
Not Before: Sep 21 08:25:35 2026 GMT
Not After : Sep 28 08:25:35 2026 GMT
Subject: CN=6ab0e9ff-568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:d5:69:cd:94:29:5f:a3:56:75:27:08:fc:
75:71:08:cd:25:31:95:ba:4a:7d:a1:1d:6c:12:6c:
7a:f4:09:d7:55:ac:da:1e:c7:58:93:98:5f:d7:9b:
b1:8f:49:15:fb:fa:1d:a4:83:7d:b0:4c:21:d9:e6:
9e:bc:fe:cd:50:93:09:e4:ba:d2:22:22:70:0c:6b:
9d:b8:73:ce:15:93:29:59:05:22:0d:35:45:82:22:
8d:00:4f:73:e2:c2:f8:60:4c:bf:37:9e:23:87:2f:
9f:ca:7b:8e:d6:db:70:5e:87:b4:b1:93:9b:d4:86:
ca:d6:58:00:1c:86:c6:5d:d4:c9:2e:04:a7:c4:15:
72:9c:15:da:6e:23:6c:20:52:f3:56:35:a9:65:02:
36:70:eb:73:6b:97:bd:c8:15:63:51:d5:7c:e0:68:
63:99:e6:26:38:06:fa:f7:c3:79:18:43:6d:69:ef:
fe:00:09:f6:7c:84:c0:16:7a:ed:10:29:d9:b2:16:
fa:60:e3:e0:e5:b7:26:73:db:eb:c5:93:71:e3:44:
dc:13:90:6e:18:cf:36:ca:02:04:a3:65:eb:df:da:
0a:31:ff:56:6b:e2:be:6f:56:f9:eb:f0:5d:87:01:
41:68:37:dd:25:86:9f:31:cb:7f:f9:61:b8:ff:0e:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:35:8B:E0:31:A0:EE:15:AE:21:BB:82:5E:74:93:31:20:AC:84
X509v3 Authority Key Identifier:
keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:4a:db:33:7e:f2:1e:0a:3c:97:4a:51:2d:0a:b1:00:04:
8f:71:51:d2:9e:5f:28:05:1f:67:06:db:e6:66:0b:8c:92:96:
63:c4:c6:cf:21:c1:51:06:76:f6:c5:90:59:18:ed:f0:83:66:
b8:66:fc:cd:86:40:b8:e7:44:9f:49:a3:6f:08:47:d8:d1:6c:
37:2e:ca:cc:a2:a0:ee:18:29:c2:46:6c:fa:67:a7:07:06:ff:
b4:31:1c:71:c5:72:eb:fe:3e:2e:d9:f8:51:57:c7:d1:84:f5:
ad:52:05:3e:81:0d:5f:4f:36:97:79:2d:e3:eb:94:be:2a:23:
c4:eb:23:9b:d4:f8:c4:32:b0:ba:dc:ca:f1:35:e5:9f:27:88:
d2:58:85:52:9a:93:53:1a:3d:b4:d9:dd:e1:88:0a:e8:d4:3d:
20:b9:d0:11:33:03:18:59:ca:e5:69:af:64:75:40:c6:ab:44:
ae:4d:cc:8a:3c:29:2c:d1:2c:a4:fd:95:b9:a3:ab:16:66:cc:
15:21:b6:05:c2:60:c6:1c:80:83:df:5e:43:69:e6:da:dd:d9:
fb:a0:94:11:ac:12:ce:d4:6d:72:65:3b:74:7d:a4:6e:2a:40:
33:9b:d2:90:12:ed:f1:0e:51:fb:b2:08:6e:52:bf:02:73:09:
98:1c:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:20 2026 by rpki-client