
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier: w/QHEgl916cc8WM6fK2VulT5qLm7ZraRie9fgUAwORE=
Subject key identifier: 60:C2:24:D0:61:FC:6A:E9:49:9E:E0:7F:E4:77:36:C5:8B:2C:3E:0E
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial: 012A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number: 0127
Signing time: Sun 01 Mar 2026 06:37:52 +0000
Manifest this update: Sun 01 Mar 2026 06:37:52 +0000
Manifest next update: Sun 08 Mar 2026 06:37:52 +0000
Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: q/SbArvSz3WAvOihdV6AnVhVXF4ameJklXjc7ofvMjM=)
2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: Hdt3DT88wjtxw1TUKGFWHT6pNsnIEUfha62M8xw528A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Validity
Not Before: Mar 1 06:37:52 2026 GMT
Not After : Mar 8 06:37:52 2026 GMT
Subject: CN=69a3dec0-082c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:50:58:e1:8b:1e:6c:49:02:28:2c:6f:20:
aa:22:b7:fb:fe:c3:1e:a8:e1:6e:22:9f:87:f6:09:
85:c4:9e:80:28:f2:c1:b7:42:ea:c2:d3:9f:e6:d2:
c6:a9:3c:b0:2b:64:c6:d2:99:4a:73:bc:0f:6c:b9:
a6:e9:ca:99:2f:ea:88:13:e1:34:55:ad:44:0e:d1:
22:df:cd:8d:f8:b3:c6:71:2a:a2:04:ac:28:50:f3:
80:e0:f4:bb:78:84:d4:40:bc:68:b2:48:df:bd:42:
80:06:60:a5:e1:bb:34:2b:cf:41:3a:66:29:8a:10:
8f:fd:69:49:dd:8b:5f:66:a1:3c:5c:ec:52:d0:ba:
6e:04:57:c0:57:c2:3f:04:58:c8:c6:25:76:01:56:
17:c1:6b:34:79:00:08:30:dd:5e:98:29:0a:c3:d5:
02:25:00:58:2f:7d:52:e5:a5:c3:ce:b5:47:a2:9f:
5a:95:c6:e7:39:99:19:00:42:c8:14:61:e0:77:47:
03:11:a1:72:51:57:61:98:dc:c7:c4:15:da:09:ba:
79:19:ee:e1:71:23:17:15:aa:83:4d:12:e6:be:f6:
cd:d4:77:ed:eb:e1:98:44:ff:bf:f4:fb:ee:de:81:
eb:94:c1:46:19:88:a3:00:0b:8e:71:54:be:c6:2f:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:24:D0:61:FC:6A:E9:49:9E:E0:7F:E4:77:36:C5:8B:2C:3E:0E
X509v3 Authority Key Identifier:
keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e9:5e:ac:75:ea:86:0a:ab:16:0b:f6:56:19:09:06:ae:8d:
5a:97:e5:86:4c:d8:3f:6a:b3:3e:44:35:56:fe:78:ea:8b:e8:
03:b7:1f:dd:b6:88:d7:b4:6f:92:a5:5a:3e:f5:c1:62:ac:e0:
9d:82:90:e3:42:d2:24:1e:b7:0e:45:4a:f1:36:5e:11:f9:db:
be:53:31:eb:da:b6:8c:86:73:dd:9d:4f:28:3b:26:e0:a2:6b:
a4:fc:ff:cc:b9:d5:f9:47:b9:5a:8b:38:5d:b0:15:80:a6:e4:
24:ae:88:48:ea:6c:ce:b4:76:78:e3:f0:61:18:ba:1a:59:7c:
04:83:ae:33:6f:97:05:fb:fd:cd:12:68:99:a5:75:19:44:03:
9f:fc:0f:68:84:1a:bb:52:29:68:cc:bc:8d:1c:41:c7:29:34:
70:4d:dd:30:9b:5f:a2:7a:2c:db:b4:10:82:86:1f:be:9e:72:
4c:e8:e1:8d:86:e2:a1:19:19:83:ff:ef:c2:91:c6:be:8b:47:
9f:74:78:0a:47:2d:a1:3f:29:4f:cc:25:43:dd:d7:7a:41:6c:
52:a2:11:af:cb:cf:2b:0f:76:5d:06:29:9e:5c:61:7f:c5:51:
3c:d7:68:d9:71:ad:c7:4f:df:97:46:6e:73:0f:0a:21:e6:a1:
54:c9:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:31 2026 by rpki-client