
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier: 5jmrbHJZhvQUDGn4eH+xtoFya1F3zeGAMz5zIRCz8LM=
Subject key identifier: DD:66:1B:D1:D3:18:6B:41:27:1F:9F:BB:1D:14:9D:A3:A1:28:CF:36
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer: /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number: 39
Signing time: Mon 05 Oct 2026 08:45:03 +0000
Manifest this update: Mon 05 Oct 2026 08:45:03 +0000
Manifest next update: Mon 12 Oct 2026 08:45:03 +0000
Files and hashes: 1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: pjkTArhbn3jekzHvBQirSZPyfJd15VgHAZScCWHpuGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Validity
Not Before: Oct 5 08:45:03 2026 GMT
Not After : Oct 12 08:45:03 2026 GMT
Subject: CN=6ac3638f-3b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:df:db:ad:7f:3e:ac:de:b2:a2:39:cb:cf:
e5:30:92:44:bb:02:12:9f:89:36:a1:af:c3:a4:e9:
10:70:12:02:9f:77:47:10:72:6d:96:06:b6:e7:41:
96:53:e5:5c:07:3c:20:f4:a4:a4:e0:ec:49:c7:27:
80:2e:c2:45:b1:30:54:f8:98:3c:1f:6b:dd:f2:38:
f8:82:76:51:ba:62:1d:9c:cb:57:ab:3f:ec:a6:bf:
7f:49:63:7c:d3:a2:f5:c0:e6:21:88:87:5e:08:8c:
dc:70:78:f9:93:e6:a1:13:03:3c:74:d8:b5:ee:e8:
d7:91:50:06:8f:7b:ab:f5:60:1a:69:64:a1:0c:d8:
c7:69:be:59:e2:44:cb:92:06:24:40:07:f5:45:5f:
e2:78:bb:96:17:25:c0:e2:de:7e:5a:43:79:bd:53:
3f:28:f3:73:5d:51:a0:e7:98:d3:6e:49:e3:b1:84:
b4:8a:b9:8b:51:b3:d3:41:ad:dd:a1:15:f8:c0:0a:
41:4c:ba:64:80:33:03:72:c4:85:e4:57:04:27:16:
7c:88:2f:f6:77:a8:90:68:96:88:96:37:e5:62:16:
8d:30:14:ef:f3:3c:ff:a4:3e:4b:ae:47:d4:ef:b2:
4f:84:23:58:0c:f6:ab:1b:9e:d8:f7:5d:86:ea:9d:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:1B:D1:D3:18:6B:41:27:1F:9F:BB:1D:14:9D:A3:A1:28:CF:36
X509v3 Authority Key Identifier:
keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:dc:90:4d:2c:6b:5c:14:fb:27:a0:30:55:9a:d9:f5:10:
d8:94:70:51:36:7d:50:e2:ca:f7:61:6f:97:cf:04:f0:70:2a:
4a:fb:cc:8d:d7:05:16:4f:22:d5:ee:13:e6:11:e4:87:9d:19:
22:43:c2:38:b6:dc:82:b1:a4:9b:5c:76:9a:6c:d3:09:96:01:
d2:b3:0b:b4:88:6f:5d:90:43:73:78:bf:8e:7a:0d:4f:6e:27:
69:45:17:b6:d4:78:bb:76:ad:2c:51:21:89:5b:65:8e:7b:a2:
b0:2b:b0:a2:7a:84:04:d7:90:dc:74:0b:23:11:5c:e7:4f:e0:
8c:18:6c:1e:8d:78:04:ec:df:f1:64:6d:38:0d:08:51:46:37:
2b:b4:ee:70:ae:15:69:86:de:95:b0:a1:7d:5b:67:e4:d2:52:
71:5e:54:47:4d:89:3f:d2:f8:50:b5:87:dc:f2:4b:41:fa:36:
a1:1e:63:74:0c:c6:b8:d4:f9:d9:0f:96:4c:56:0a:9d:db:ab:
c9:32:a9:a9:14:e1:9f:59:18:a0:52:80:42:ed:92:f0:db:07:
ee:fb:a7:e1:dd:d1:43:91:fa:4e:f2:79:37:c6:2e:fc:9d:a7:
06:99:99:4f:56:20:cc:a7:f1:ae:e1:66:74:5e:8d:69:17:35:
cb:94:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:49:01 2026 by rpki-client