
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier: jYYHjEBSY5FEMOCeB83NHSeuFeiQNZMP1JD0rzZ4cEY=
Subject key identifier: 97:32:DB:1C:7E:87:B5:B6:58:CE:04:6B:A1:04:2A:74:D4:AE:68:14
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number: 0506
Signing time: Mon 02 Mar 2026 01:23:15 +0000
Manifest this update: Mon 02 Mar 2026 01:23:14 +0000
Manifest next update: Mon 09 Mar 2026 01:23:14 +0000
Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: 8LNijTXsl08j9kqKHCosp+PjlLJCEuuDQPQgBxb9nqU=)
2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: uq3qtCkijF1dNlFAZoloAGHiYFpS21Zc+zHvHpeXG3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Validity
Not Before: Mar 2 01:23:14 2026 GMT
Not After : Mar 9 01:23:14 2026 GMT
Subject: CN=69a4e683-5fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:b7:45:60:a9:35:f3:dd:00:64:9a:03:d6:
b2:29:0c:9d:e2:72:ff:73:aa:1e:7e:ea:90:53:d8:
5c:e4:01:d5:7a:0d:74:7a:80:95:f5:58:ab:34:15:
ec:0c:27:d2:7b:63:58:4b:68:26:a8:6c:c5:90:5d:
bf:6b:44:e0:30:a1:23:01:dc:0c:fd:20:22:a6:62:
72:ef:0a:58:f6:5e:70:7a:43:ba:0d:4f:45:d0:fa:
1c:19:16:36:06:d6:67:47:28:15:7a:37:7b:d3:4f:
6b:06:25:a0:ea:b8:16:94:d8:43:19:d1:2b:ce:2a:
92:6f:9c:cf:d9:8f:9b:f4:7f:72:d9:1b:87:6a:38:
9b:cc:86:c9:34:27:67:97:b5:55:24:b6:0b:fb:1c:
4a:ab:fb:e6:6f:2b:bd:61:83:a1:b2:ed:f4:4c:2d:
49:21:e8:9b:44:91:9f:38:37:72:99:fe:d0:f1:1d:
e3:34:bf:89:52:99:b3:86:6b:05:56:69:8f:7c:bd:
2f:b5:e1:e1:78:d4:c4:d6:56:df:d4:23:81:0f:6d:
28:4e:89:be:8f:1c:68:c4:fc:6c:3f:cc:e4:5d:6c:
c6:65:44:46:f5:8a:c8:02:63:7d:98:7b:f6:bd:bd:
9f:00:a1:c5:26:a5:a9:ee:16:2a:d0:a6:49:4e:e6:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:32:DB:1C:7E:87:B5:B6:58:CE:04:6B:A1:04:2A:74:D4:AE:68:14
X509v3 Authority Key Identifier:
keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:f3:15:7f:6c:30:28:24:ab:d1:74:99:40:2b:de:91:18:
c0:b6:09:a6:a5:6d:32:31:52:96:ae:ac:ca:d4:b3:9f:38:05:
f2:ad:ac:6b:88:4e:f6:fd:a6:69:94:5f:9a:1f:b6:be:ca:66:
c0:6e:c8:a6:22:19:c4:46:d3:46:c9:cd:7f:26:51:9a:9d:27:
bc:ac:ce:2d:c7:32:3d:b1:71:8c:2e:0d:f6:d4:18:82:79:8d:
fd:37:23:6b:d7:3f:79:96:b6:40:56:a4:c8:96:9f:64:9f:d5:
2b:62:a9:0a:5b:5a:9b:c2:a2:2f:95:72:03:59:49:26:bf:ce:
f1:da:3b:2b:13:f7:48:a8:1d:4a:12:42:65:ef:5b:d0:d6:e8:
84:ed:7e:04:d8:50:74:c8:27:62:50:14:aa:99:48:28:ae:29:
db:43:c3:9f:f5:16:50:aa:6b:1e:6e:70:de:b4:5c:76:a0:2d:
9c:f1:d5:af:0b:5f:76:fe:79:88:66:93:f4:e4:fe:8e:0c:79:
c4:e2:41:71:30:1a:86:a3:57:fd:61:ae:44:57:8c:b6:0a:de:
e6:a8:ef:e2:f7:10:f0:ea:88:bc:36:bf:22:f7:0a:72:31:cb:
50:29:ea:58:5c:c0:61:68:10:68:b6:c8:5d:b5:cd:cc:a0:b4:
f2:6f:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:32 2026 by rpki-client