
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: 2HieUqJ93zAFk7k0wIaCWoXVwHl4q0sPKRr5XnbnjUg=
Subject key identifier: 6C:40:26:03:CA:18:EF:9C:D7:77:38:BC:EE:18:B7:76:62:9D:D3:38
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 0884
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0878
Signing time: Wed 04 Nov 2026 21:07:57 +0000
Manifest this update: Wed 04 Nov 2026 21:07:56 +0000
Manifest next update: Wed 11 Nov 2026 21:07:56 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: zVcUVkcmzJm5tAVu/9RdN5E6wX/MBCtnrPnLqdlESp4=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 21:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Nov 4 21:07:56 2026 GMT
Not After : Nov 11 21:07:56 2026 GMT
Subject: CN=6aeb9eac-e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:74:9e:bd:c5:1d:18:47:34:78:20:71:f4:
a4:71:78:26:30:c2:2f:c8:72:6f:92:9b:d5:85:e2:
10:e5:f1:3f:7e:96:a1:9a:79:e6:3c:3c:92:cb:67:
1a:7f:0b:20:d8:dd:8f:f0:88:31:81:2f:c5:57:fa:
74:72:2e:7b:9e:95:c4:85:55:74:ce:d7:be:81:bf:
12:89:ee:bb:04:33:05:1a:0b:4d:d9:fe:56:03:b6:
bd:b1:a4:ed:e6:6f:c4:e6:4d:a8:7d:9f:5d:c3:40:
88:42:3b:b0:e3:62:e0:9d:97:5c:a2:13:d8:47:72:
35:be:8e:0e:83:ee:94:ce:74:0b:80:a1:41:c5:2f:
ea:6b:b0:4f:c1:dc:ae:e2:7d:1b:b8:bd:12:c1:47:
a0:ed:ce:0e:98:8e:09:65:1c:eb:0d:3c:61:75:f5:
54:bb:f0:9a:e9:65:c5:51:1c:1f:ae:46:45:0c:bf:
d0:ef:d8:01:82:b7:03:26:b8:f6:56:0b:68:3d:25:
10:48:16:74:d7:e0:8f:e2:29:bf:7f:f3:d4:99:af:
11:1e:8e:d6:1a:bf:f4:54:ff:dc:3e:ec:ac:a9:ab:
ab:f4:ea:75:0d:95:f2:93:a6:75:62:92:4d:13:f4:
71:6c:05:dc:eb:90:3a:53:81:51:15:e0:cb:a7:05:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:26:03:CA:18:EF:9C:D7:77:38:BC:EE:18:B7:76:62:9D:D3:38
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:45:41:cb:1f:32:ef:32:fb:3b:ac:3f:ea:e7:6e:ef:68:
ee:16:83:54:6d:3c:03:40:30:ae:61:e9:6c:19:e9:15:8e:09:
bb:14:a0:bc:d2:ee:23:52:6f:35:44:3c:5f:14:86:80:fc:23:
08:72:a1:c2:3e:a6:55:da:7d:f7:df:02:07:71:b0:2f:6c:19:
82:94:57:e8:e8:3a:9c:c9:06:e1:a5:cd:6e:71:f2:da:b0:5b:
f7:88:a2:62:f5:db:98:08:96:2c:78:55:f2:b5:62:fd:68:31:
b2:cf:a1:5a:0f:43:87:78:72:a0:e2:af:cc:10:34:92:7a:27:
bf:55:cc:37:5b:4a:de:05:93:75:24:a0:5b:9e:ce:07:eb:e9:
d6:4c:5a:49:b1:dc:45:ef:c3:e9:48:e6:34:1b:b4:12:f2:c5:
18:84:2f:2c:5b:dc:c5:c8:28:80:f2:21:5b:fd:ca:e8:52:dd:
1d:30:80:79:18:0d:58:5a:37:8d:8b:20:94:d2:02:ee:da:0c:
19:cf:6b:d6:4b:6c:4d:e2:25:0f:a0:a3:0e:aa:2d:a1:3b:b7:
0e:00:c4:f5:2a:69:24:63:9d:6e:ed:e5:70:d4:fa:b4:01:0c:
84:c6:fb:22:f5:5d:42:2b:df:2f:93:09:42:81:d0:d8:33:c1:
e2:f7:2b:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4
QjNDOTc5QUUwHhcNMjYxMTA0MjEwNzU2WhcNMjYxMTExMjEwNzU2WjAYMRYwFAYD
VQQDEw02YWViOWVhYy1lMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubN0nr3FHRhHNHggcfSkcXgmMMIvyHJvkpvVheIQ5fE/fpahmnnmPDySy2ca
fwsg2N2P8IgxgS/FV/p0ci57npXEhVV0zte+gb8Sie67BDMFGgtN2f5WA7a9saTt
5m/E5k2ofZ9dw0CIQjuw42LgnZdcohPYR3I1vo4Og+6UznQLgKFBxS/qa7BPwdyu
4n0buL0SwUeg7c4OmI4JZRzrDTxhdfVUu/Ca6WXFURwfrkZFDL/Q79gBgrcDJrj2
VgtoPSUQSBZ01+CP4im/f/PUma8RHo7WGr/0VP/cPuysqaur9Op1DZXyk6Z1YpJN
E/RxbAXc65A6U4FRFeDLpwVWCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxAJgPK
GO+c13c4vO4Yt3ZindM4MB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD
MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ
cVNhM2RuYXBpLXlMUEplYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT25FQcsfMu8y+zusP+rnbu9o7haDVG08A0AwrmHpbBnpFY4JuxSgvNLuI1Jv
NUQ8XxSGgPwjCHKhwj6mVdp9998CB3GwL2wZgpRX6Og6nMkG4aXNbnHy2rBb94ii
YvXbmAiWLHhV8rVi/Wgxss+hWg9Dh3hyoOKvzBA0knonv1XMN1tK3gWTdSSgW57O
B+vp1kxaSbHcRe/D6UjmNBu0EvLFGIQvLFvcxcgogPIhW/3K6FLdHTCAeRgNWFo3
jYsglNIC7toMGc9r1ktsTeIlD6CjDqotoTu3DgDE9SppJGOdbu3lcNT6tAEMhMb7
IvVdQivfL5MJQoHQ2DPB4vcrzQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 20:01:40 2026 by rpki-client