
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json)
Hash identifier: puebz+flxF1nz3/At5axf/f2gvH6724YxVZTiqT4F7w=
Subject key identifier: DD:20:7B:FB:15:0A:60:62:9F:69:B7:27:31:2E:99:1B:11:B3:E5:A4
Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
Manifest number: 0194
Signing time: Sun 01 Mar 2026 05:16:46 +0000
Manifest this update: Sun 01 Mar 2026 05:16:45 +0000
Manifest next update: Sun 08 Mar 2026 05:16:45 +0000
Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: MHKiYyOtHn0RHn+cgYgnhYxae/1NT1wX66ISkTcvbHk=)
2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=)
3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372
Validity
Not Before: Mar 1 05:16:45 2026 GMT
Not After : Mar 8 05:16:45 2026 GMT
Subject: CN=69a3cbbd-d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:68:a7:d5:c2:61:8f:dd:da:c2:16:77:05:
45:69:ee:7b:05:9f:b8:05:6c:29:91:a6:2c:53:c2:
07:b2:be:e5:eb:5c:f4:8a:60:23:aa:cc:13:61:a7:
d7:1a:01:14:12:73:be:a4:c6:25:ab:c8:b2:75:ba:
28:e3:bf:4d:4d:f2:ad:d9:81:13:2e:26:23:de:41:
48:c3:9d:f0:0f:4d:cb:e5:99:76:f8:73:3b:29:29:
bb:f0:28:db:d1:a6:55:15:9e:1b:15:e3:95:f8:01:
7f:1b:df:bc:87:0c:ea:c5:15:16:db:ad:a1:77:12:
00:17:4b:68:00:fe:13:90:0a:73:97:77:9e:86:cb:
3a:df:bb:0a:dd:1f:f9:a7:55:d8:42:6d:6b:4f:35:
fb:24:cb:2d:15:89:38:a4:63:5e:55:b3:b4:04:41:
21:f9:6a:80:c1:e3:41:15:1f:e8:d1:2d:07:50:75:
b3:ff:10:1c:77:1f:71:9c:e6:b5:54:15:3e:27:62:
f5:b4:2b:16:94:6c:9b:53:75:86:b9:cd:67:61:35:
87:90:66:35:16:ee:c4:41:8e:a2:d3:97:86:4a:99:
f4:5b:bf:f0:30:cb:68:d5:3f:9c:91:5d:82:be:32:
6d:95:b4:0b:e3:d4:0d:89:02:83:5f:3b:ac:fe:88:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:7B:FB:15:0A:60:62:9F:69:B7:27:31:2E:99:1B:11:B3:E5:A4
X509v3 Authority Key Identifier:
keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:25:85:20:13:1b:49:46:46:d1:7d:44:02:c8:dd:ad:74:d5:
78:fd:69:0b:d8:e1:5f:df:ac:df:3f:6b:77:26:6b:b9:27:a8:
64:2c:59:3e:e1:4e:ec:38:74:f9:27:2b:95:7c:a2:63:25:4d:
9f:8d:b4:2f:01:e3:41:25:15:53:bc:14:7f:f7:cc:01:de:91:
92:f6:cc:bd:8a:ae:04:8d:57:9f:6e:e2:46:14:59:7d:34:d9:
4e:4e:ef:1d:cc:ff:ba:28:bb:bb:5c:01:f3:82:52:33:03:10:
09:7a:9c:43:49:04:4c:89:94:6f:48:02:e9:ff:64:67:81:29:
58:75:45:9c:02:f7:6c:01:ac:77:60:e1:fc:19:89:30:64:43:
a9:69:5a:73:56:a5:51:45:c1:31:2a:15:ee:6a:8b:ca:ab:aa:
4d:10:38:1a:56:a9:20:a7:59:4f:7c:6c:ab:49:21:cc:3f:83:
ce:80:04:90:18:dc:e6:6e:79:8a:3f:60:f5:47:c3:83:83:53:
48:a9:2c:c3:6f:8d:54:42:37:c2:b0:f2:ab:56:17:ff:4f:be:
66:6e:25:26:b3:23:dc:77:8b:8c:46:52:29:e7:77:c6:41:d0:
12:54:5d:8e:4e:2d:cc:dd:ca:c4:60:73:90:d4:9d:e0:51:96:
c1:d7:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:05 2026 by rpki-client