
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File: PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier: 98ll9SJsjhf9sAZEwQSt7AP08LOZtswj8eGqL40kyD8=
Subject key identifier: DA:1E:10:24:3E:B6:C9:A7:D8:26:CF:FE:56:BC:DD:11:05:A4:2F:F3
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer: /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number: D4
Signing time: Mon 02 Mar 2026 13:29:28 +0000
Manifest this update: Mon 02 Mar 2026 13:29:28 +0000
Manifest next update: Mon 09 Mar 2026 13:29:28 +0000
Files and hashes: 1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: hHFtWGz5x76bWsYMxqNBVTWuJ1GmY4xfjgs4qq/MJXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Validity
Not Before: Mar 2 13:29:28 2026 GMT
Not After : Mar 9 13:29:28 2026 GMT
Subject: CN=69a590b8-5168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:15:ad:43:7c:04:87:0c:f8:2f:f5:3c:a3:
7b:d7:b0:78:54:0c:f0:5c:c2:2e:d8:d0:2d:af:f4:
f7:74:0b:b1:04:f1:e8:fd:0b:72:2c:b0:aa:af:ce:
17:d1:55:7e:b6:0f:0e:97:e5:bd:f7:15:b6:c6:68:
cf:86:de:05:58:e3:a4:d2:80:02:2a:71:d8:04:64:
65:a2:79:df:b9:5e:2b:aa:41:a7:a8:ee:f3:b0:f1:
d3:01:6d:81:67:94:4f:ae:4d:a6:9e:e3:6a:20:d7:
33:12:8f:b7:05:ac:ce:9e:d3:1b:38:8c:f5:78:8c:
5d:97:99:ed:69:67:b9:3a:4e:9d:2c:1d:99:0f:c5:
8e:42:5f:1a:2e:04:00:4f:b2:5f:19:36:af:11:f1:
c2:57:49:a1:65:b8:11:fb:02:a3:3b:d6:48:28:16:
71:79:10:66:86:d7:9b:5d:e8:c3:0e:1a:09:d3:3e:
1c:16:29:bd:75:ef:fa:1a:5e:62:1a:e6:3b:d5:d4:
28:c8:ec:5b:41:4a:dc:89:c6:ff:d9:3c:d0:10:25:
2e:fd:91:76:93:9f:ac:67:49:72:c0:8e:d7:15:20:
02:83:9a:ba:9f:bf:ea:89:88:97:7a:d6:0e:12:a3:
51:5f:99:53:c1:82:9e:35:85:dd:81:cc:4e:9d:18:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:10:24:3E:B6:C9:A7:D8:26:CF:FE:56:BC:DD:11:05:A4:2F:F3
X509v3 Authority Key Identifier:
keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:80:8d:27:6f:88:48:2f:80:bf:03:41:f2:63:cb:af:de:35:
c1:d9:61:4b:d7:a7:a6:31:66:7a:f3:de:5b:f4:4f:90:b6:b5:
0e:21:88:42:81:20:b4:a1:50:f5:68:7d:cd:66:8e:4f:d3:64:
10:8b:25:d8:84:b8:93:20:77:3d:93:4f:dc:f8:6a:17:c4:7f:
14:f5:5a:e8:e7:58:04:cb:82:78:7e:21:af:4f:22:29:0f:1e:
1f:e8:7d:7b:d2:e7:fd:b6:6c:8d:06:4a:62:dc:83:b6:d0:76:
d8:31:16:fe:c5:fd:9d:ec:5e:16:6f:1a:d1:e9:c2:62:b0:71:
d4:fd:f0:91:3f:1d:4a:7b:46:2e:24:f6:e7:77:58:3f:75:4f:
10:05:1f:ca:5d:81:f4:77:78:f2:02:7d:de:82:44:42:a5:54:
4d:e2:7b:04:f4:f9:7f:72:27:94:bf:a8:da:5a:6f:55:e4:5c:
fd:60:8f:74:ca:61:91:a8:58:c0:55:1b:92:57:b6:1e:94:ad:
16:1f:f1:d7:6b:87:84:7f:e5:37:a9:37:8d:47:ef:b9:ae:a5:
e7:2b:1f:59:ef:d5:59:d5:84:fd:f3:aa:35:7e:c4:30:74:6e:
93:ea:2e:4e:2a:0b:f7:d5:6c:bb:7d:a6:33:32:9a:c5:11:c3:
64:c1:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:43 2026 by rpki-client