
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier: yC4vummLEyR2h8XpD2B0cYIMzAEOmDPLqhs1fpb/gdI=
Subject key identifier: 5C:CC:BB:A9:1E:9A:21:F4:CA:DC:8B:BD:95:BB:03:1E:7A:F4:EE:A5
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number: 0141
Signing time: Fri 17 Apr 2026 04:59:27 +0000
Manifest this update: Fri 17 Apr 2026 04:59:26 +0000
Manifest next update: Fri 24 Apr 2026 04:59:26 +0000
Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: KUcWMCYoofjyVfxVtJMrwD230MTjKA60nrfwqGNHkaM=)
2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: AJTS1uac5xr56izQXzMX4fYwq+Z9F06HUjaUX+s4Dl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Validity
Not Before: Apr 17 04:59:26 2026 GMT
Not After : Apr 24 04:59:26 2026 GMT
Subject: CN=69e1be2e-612b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:d2:ff:c1:93:fd:a3:1e:6e:4e:c5:0a:1c:
f0:d5:ad:ed:75:5f:7f:27:14:60:b5:16:9e:51:7c:
80:bf:a9:b4:ef:f1:25:da:0e:4a:36:17:01:bc:12:
4d:e0:15:bb:21:d0:3d:e8:7b:48:74:4e:cd:ac:8d:
5e:42:1b:ff:82:1d:0f:e6:35:02:03:20:63:8f:cf:
dc:e1:5c:3d:55:90:d0:f8:c1:ac:e1:fe:c9:af:57:
3d:ed:88:56:b5:71:cd:0d:14:3f:e9:e1:3e:fd:f4:
27:19:93:fb:f3:f6:87:90:b8:cf:d7:57:cd:98:8a:
ca:4c:ee:fe:bc:0d:da:c2:eb:a8:37:a3:ed:ac:ad:
d8:20:40:88:ea:88:b0:54:5d:ef:e3:50:94:05:66:
b2:56:54:ac:ff:03:d3:60:8e:4c:c3:b2:14:f0:52:
2d:a8:fd:90:19:8b:de:b8:42:c3:88:92:a4:0b:88:
2b:ce:f4:bd:a0:fc:ba:a4:58:d3:06:95:a9:86:0b:
6e:d0:62:dc:f3:63:fc:66:ca:a3:da:44:4e:52:f2:
32:25:c9:79:50:8c:22:c9:a6:07:94:1c:43:fa:b5:
60:09:47:eb:19:25:09:96:72:48:aa:93:19:ac:eb:
c3:8b:96:65:a5:3f:2f:70:ff:e3:ce:e3:de:e4:09:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:BB:A9:1E:9A:21:F4:CA:DC:8B:BD:95:BB:03:1E:7A:F4:EE:A5
X509v3 Authority Key Identifier:
keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:4b:01:c7:79:92:43:2a:92:2a:f5:74:39:e4:7f:70:de:
49:51:30:5e:e9:32:4a:46:8d:00:a9:bd:8f:b7:e5:45:74:a7:
f8:74:ac:fc:ed:94:62:86:8a:6e:6a:0d:75:76:58:1a:19:1e:
28:00:eb:b2:fb:65:5b:42:99:5a:12:1c:39:b0:12:34:42:82:
2f:a1:e6:3f:0a:c9:80:f1:9a:1f:4c:a2:02:de:26:d9:58:23:
97:c5:46:9b:f3:ff:69:d3:29:cd:15:bf:ba:9e:ad:4d:9f:9e:
8e:ed:20:39:60:6b:fd:77:5a:6f:a7:f4:50:98:32:6c:00:56:
e5:82:0e:cb:98:6e:8d:4b:a4:d6:c3:a3:40:a2:3d:e0:98:2c:
a4:b3:c7:3f:26:eb:b2:72:b6:7d:29:89:d7:d5:e6:41:fd:b2:
97:6d:7a:7f:0a:e6:8a:2c:62:7b:21:c2:4e:b6:fa:00:a8:2e:
9a:75:92:b6:0c:12:65:b1:c7:fe:5b:37:b6:3a:06:1e:fe:25:
87:2a:e6:20:9c:ad:35:eb:0a:dc:9c:17:de:36:5b:52:ae:df:
0d:3c:fa:e1:e2:ae:ed:c0:a5:34:69:ca:2a:d7:6c:8b:97:d1:
7e:1b:93:7e:3c:13:a4:46:03:2a:fb:d5:24:b5:86:a9:fb:d0:
dc:cb:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:16 2026 by rpki-client