
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json)
Hash identifier: 57ik+y+ZivJp0jdVzqxL63l0FEaG0n5bMCG77cU45EA=
Subject key identifier: D4:68:4E:18:9D:AB:D5:2D:6D:3F:8E:05:94:D6:B1:BC:FF:A5:CB:26
Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
Manifest number: EA
Signing time: Mon 21 Sep 2026 06:24:14 +0000
Manifest this update: Mon 21 Sep 2026 06:24:13 +0000
Manifest next update: Mon 28 Sep 2026 06:24:13 +0000
Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: 4rF/H6lWAq1z0ZY3xICSGVoWlspyA+pgCXlewt57/JA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Validity
Not Before: Sep 21 06:24:13 2026 GMT
Not After : Sep 28 06:24:13 2026 GMT
Subject: CN=6ab0cd8e-6d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:28:a1:4f:5e:43:fe:b6:42:3c:3b:b5:6d:
1c:b3:99:fb:33:bb:23:58:8f:9d:42:51:1a:4c:95:
8f:4f:3b:c8:09:1c:cd:3d:79:68:61:5e:6d:45:42:
64:7f:a5:fd:29:69:c6:8b:5b:91:d2:04:d4:e5:ef:
cb:8c:e5:51:0d:1d:e3:a8:eb:cd:1a:e3:28:96:33:
27:2e:ce:b5:14:ee:3c:e5:70:15:03:dc:b0:84:22:
d5:8c:36:c6:92:af:2e:a2:25:62:c7:d6:fa:ae:e8:
09:01:d7:c1:c9:2f:a4:1d:dc:83:17:f2:82:bd:19:
f9:da:67:e4:74:df:5f:93:a5:b0:12:e0:d5:61:6d:
a7:3c:61:9f:12:29:36:74:77:f6:f5:aa:3d:15:cc:
f2:d2:26:2e:23:88:d4:0f:ba:78:f2:72:7d:cf:91:
48:5b:47:1f:b7:87:e7:e4:68:0e:a7:c3:f2:8d:10:
5a:8e:67:2f:3c:ff:37:dc:c5:e1:b8:5c:9b:cf:cd:
b7:2e:b6:9f:31:70:6f:36:f8:8e:1b:57:ac:e3:87:
a1:a5:96:58:f8:ef:4d:82:0e:8a:86:5f:19:5c:63:
6a:cd:84:10:d2:f3:44:f0:8a:43:f5:62:8b:90:47:
cc:81:ab:a0:f4:f6:91:7a:66:c3:70:65:d6:09:65:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:4E:18:9D:AB:D5:2D:6D:3F:8E:05:94:D6:B1:BC:FF:A5:CB:26
X509v3 Authority Key Identifier:
keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:c7:c6:24:71:9a:95:df:49:74:4a:a1:f8:a9:5c:b4:84:
70:15:7b:97:0d:f2:55:50:bc:e1:ce:7d:3d:88:9b:42:b4:62:
2f:93:6e:a2:69:b5:28:d5:a7:8d:3f:09:1c:30:03:8e:0f:ce:
8e:db:84:b8:f4:d5:66:9d:e8:25:6c:69:94:25:34:f9:da:27:
79:50:87:d1:7e:f4:d6:53:49:68:7c:c1:49:6f:7c:42:93:49:
dc:93:d0:2e:16:0a:26:6e:6b:41:12:31:da:ba:60:cd:a1:4a:
26:b2:68:c9:bd:be:38:2c:15:ee:f4:b1:87:11:15:12:f7:cf:
71:05:0e:50:61:16:85:ea:fc:e6:36:03:59:23:d9:aa:00:b1:
00:7b:ad:20:8c:3d:ea:58:5e:50:36:a9:59:76:9a:fa:9c:8d:
47:6b:84:8c:12:11:de:65:d3:03:03:3a:72:b2:1b:17:e3:80:
24:21:57:c6:c5:60:5d:ac:a5:4f:bc:4c:70:38:43:aa:fd:14:
f3:b8:91:10:ce:89:d9:20:c0:11:a4:5a:49:28:35:34:2a:4d:
3e:fe:e5:36:f3:9e:47:51:83:60:cb:7c:f4:24:d8:3e:6e:71:
7d:e2:c2:f8:95:05:4d:98:4f:57:53:89:65:3a:1e:cf:0e:2b:
b2:b4:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:34:49 2026 by rpki-client