
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier: dT4wVOAkZSOLSzIJpbnCYK4BXhcgd+zG2kVG/RADieE=
Subject key identifier: A2:95:EF:AA:61:FB:29:C0:1C:BB:62:67:86:5F:3E:F7:CA:F5:33:A3
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number: 01A1
Signing time: Sat 03 Oct 2026 04:54:29 +0000
Manifest this update: Sat 03 Oct 2026 04:54:28 +0000
Manifest next update: Sat 10 Oct 2026 04:54:28 +0000
Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: X+le/pmaeHe+x6EBAQA420lCtapjsQ43QAKDp7OHKtQ=)
2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 04:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Validity
Not Before: Oct 3 04:54:28 2026 GMT
Not After : Oct 10 04:54:28 2026 GMT
Subject: CN=6ac08a84-9aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:b7:01:89:b3:c3:26:04:f3:9c:c2:4e:0b:
4b:25:e7:37:d0:9c:40:d6:ad:a1:91:34:b7:22:2e:
78:7a:52:0c:8a:21:e3:fa:4c:df:47:99:49:78:58:
21:d5:80:4c:c4:b4:aa:0f:28:c2:d0:f0:f1:c5:25:
b8:d1:e4:0a:96:5b:b5:d4:ef:b8:60:d5:89:07:85:
4f:a0:f0:69:8f:63:00:2e:2f:bd:69:7f:24:92:ca:
10:02:82:68:dd:9b:85:f1:ff:15:79:b0:89:3d:53:
42:be:04:0e:61:0f:87:4f:b9:b1:65:d0:a7:03:29:
02:01:a4:6d:f3:c0:7e:07:46:71:f5:99:63:5e:52:
e4:e8:fd:dd:c3:d5:23:b7:d9:13:76:50:8d:36:d8:
bc:8f:52:01:6a:f8:1b:90:81:41:81:ce:85:41:62:
95:15:82:74:9f:0d:5c:8d:e3:0e:97:83:aa:3d:9c:
a5:6e:19:a4:03:a2:46:2f:e5:e1:2e:ee:6e:ec:f8:
e4:da:34:5c:0f:03:d7:b3:b1:92:9b:28:17:51:b4:
1a:20:2d:59:ae:98:92:7b:52:9b:2f:d8:91:06:8b:
26:5c:05:7d:a1:92:54:f9:05:ff:a9:f1:e8:ef:de:
8f:a7:5c:5c:1b:a7:08:0c:20:82:30:e7:75:b8:29:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:EF:AA:61:FB:29:C0:1C:BB:62:67:86:5F:3E:F7:CA:F5:33:A3
X509v3 Authority Key Identifier:
keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:17:b2:1c:a3:34:fd:bd:71:65:ff:ec:f3:a5:74:25:7e:35:
14:e7:b1:52:9a:99:60:e5:50:99:55:10:e2:1c:c3:04:e7:b9:
b0:a6:1e:24:21:d6:27:28:6b:fc:23:aa:24:84:37:c1:dc:88:
54:31:78:14:e4:8e:41:cc:96:33:06:7d:df:61:86:b6:fc:20:
9e:6e:2a:25:eb:c8:10:52:aa:26:88:af:e4:ae:67:e7:0a:49:
37:76:7b:7e:60:bc:64:a1:6c:e7:81:5b:ad:c5:29:58:24:e5:
b4:4e:bc:27:34:c7:e7:ee:17:2b:e2:14:16:21:b0:99:93:58:
0c:ae:7b:af:98:c7:32:28:7a:21:fa:03:17:78:83:f8:47:41:
19:14:16:a2:6a:c9:70:74:9c:ea:3f:4b:0d:8d:e8:c3:92:08:
91:38:9f:67:5a:43:9d:79:a2:87:1b:1a:81:03:b9:4a:a8:a7:
b5:4a:93:d1:56:e4:22:d9:7d:6d:e5:9a:7a:11:72:d3:76:65:
3b:77:aa:aa:89:7f:20:2f:eb:64:52:28:49:45:48:07:18:d6:
7b:47:73:1d:e1:02:fa:5c:6c:c7:00:b4:cd:82:a9:1c:41:88:
c3:33:02:2e:86:99:90:e8:55:74:32:be:28:c9:3c:2f:07:c0:
34:18:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:55:14 2026 by rpki-client