
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier: ZkBPS/iJSRSnUQY3byqF30AB+xskt2moHsf2gaqoBsc=
Subject key identifier: 24:4D:DE:CF:57:36:89:2A:29:C4:90:2B:DE:DB:9A:C8:CB:4A:5E:E4
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number: 0134
Signing time: Mon 02 Mar 2026 00:26:35 +0000
Manifest this update: Mon 02 Mar 2026 00:26:34 +0000
Manifest next update: Mon 09 Mar 2026 00:26:34 +0000
Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: 6w77PC7lW2iFd9qTAc4kDpsaidfQ8spd+wxUQ12iccg=)
2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: OgCWnzqkwWEniebxSjCaqKQFGPlBmgsXfq8XVeayY5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Validity
Not Before: Mar 2 00:26:34 2026 GMT
Not After : Mar 9 00:26:34 2026 GMT
Subject: CN=69a4d93b-456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d3:1a:10:dc:55:a3:74:e1:87:1f:de:20:43:
54:38:a9:40:c6:39:26:71:96:84:fa:a8:67:84:ab:
ec:10:db:5c:84:b7:6f:c6:97:6e:55:64:32:b4:17:
09:54:93:6e:ed:0d:c8:87:b3:e3:fa:15:2d:6a:fb:
ed:60:0f:fb:3a:31:4b:33:88:eb:af:64:10:98:a6:
36:c8:90:ef:1c:24:ae:df:3b:09:89:89:f6:ab:d3:
b6:9e:c0:3a:a5:b4:8b:6b:d3:83:fc:9a:fa:d3:7c:
2e:7c:08:28:49:d9:13:11:4c:ad:ec:d8:ab:54:28:
d4:df:12:95:b7:f8:51:fe:0e:8e:c7:5f:38:47:08:
d6:f8:3d:01:0b:80:cd:eb:e1:c5:2b:e8:15:83:1c:
8a:db:41:df:13:06:59:6e:8f:ce:fe:1b:c2:e8:8b:
92:54:6a:e9:bc:99:e8:61:de:ac:93:cc:ae:d8:8a:
bc:9a:cd:c6:0d:1b:79:1d:6b:5f:19:21:04:ce:c7:
6e:6c:52:0e:6d:01:f2:6e:ae:bb:c6:b7:d6:8b:9b:
77:d9:e2:ba:c6:e5:fe:0c:bd:f4:6f:19:16:50:b0:
e2:f2:ea:39:d9:4f:82:2a:36:54:91:ae:32:aa:91:
62:c7:6e:50:77:bf:9e:09:ec:e0:9a:b9:7b:47:4d:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:DE:CF:57:36:89:2A:29:C4:90:2B:DE:DB:9A:C8:CB:4A:5E:E4
X509v3 Authority Key Identifier:
keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:40:2e:2b:c0:24:05:3c:86:29:d3:9c:90:d8:e6:40:91:
b7:b2:4b:49:cd:f2:0d:f7:50:ee:5e:b5:9d:79:f5:9f:5c:58:
ec:8b:b9:31:10:05:83:60:46:7e:3a:59:f3:90:fd:0f:b4:2f:
15:8c:8b:51:de:42:f0:78:0f:e8:28:02:51:7e:06:97:c1:71:
42:95:b5:9c:26:37:d2:9b:c9:79:bb:d3:c4:e3:38:bc:a0:42:
6c:52:3c:2e:42:fc:8c:9e:82:20:64:41:89:c3:fe:4f:e1:28:
2a:54:28:27:cb:41:4a:16:b3:3f:38:e1:18:1f:94:77:c0:4a:
0f:7c:ad:08:74:10:01:9f:dd:fe:3e:4d:33:29:6d:e7:3c:a5:
5c:64:aa:f1:12:fd:55:3e:51:08:04:70:ce:f7:b5:83:05:20:
7a:fb:77:b5:fb:d9:89:42:2e:12:1e:10:fa:1f:ae:0e:88:f9:
08:55:44:5f:b7:87:46:28:1f:32:e8:41:de:e3:c1:51:5e:ef:
6c:c0:64:07:c0:8e:48:83:08:0c:e9:68:4e:64:6a:a9:b7:58:
38:de:70:48:30:54:e1:e7:0a:34:d7:11:57:60:4f:e7:c2:d3:
9a:26:8c:da:cc:83:bb:1e:ae:16:9a:61:ce:98:3f:4b:af:24:
b1:5d:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:58 2026 by rpki-client