
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
File: pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json)
Hash identifier: sUJhwPPHl34gADF2HJJqBFnJYo6k4Xht3ioRRYCwrm4=
Subject key identifier: D2:6F:C4:6D:50:3B:80:2D:01:A6:93:D2:6C:AB:A1:D3:24:2C:56:88
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Certificate issuer: /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
Manifest number: 0BFC
Signing time: Sun 20 Sep 2026 18:52:26 +0000
Manifest this update: Sun 20 Sep 2026 18:52:26 +0000
Manifest next update: Sun 27 Sep 2026 18:52:26 +0000
Files and hashes: 1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: RCCHOG/V8gmy8sECSlIJ3VgxFjYGWjCJWjY3fDSB4nU=)
2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: DuaXg8ErIllO7PDms4lKRxOCOp64K0AXe/FcoVLC2mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Validity
Not Before: Sep 20 18:52:26 2026 GMT
Not After : Sep 27 18:52:26 2026 GMT
Subject: CN=6ab02b6a-65bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:f6:2b:f7:48:d7:22:58:d7:22:35:53:6b:
2d:ae:46:38:76:39:ad:64:0f:30:10:5b:10:a3:63:
e7:4e:08:66:fd:f1:b0:a7:02:9e:9c:39:b6:88:a8:
8c:88:37:d5:54:69:9e:aa:2c:e9:fc:ab:f9:40:fb:
f1:6c:9e:73:82:4c:3b:41:ac:a4:01:6b:66:a6:b1:
28:c0:21:73:eb:1d:08:aa:83:62:a3:7e:bd:1e:05:
d0:82:f3:6b:a6:4b:c9:dc:91:00:78:6f:90:c6:a8:
98:6e:fd:4e:3a:12:16:4d:df:fa:ac:ce:76:db:42:
fb:67:2f:a7:a4:c1:57:4e:ba:29:42:d6:5a:eb:7e:
b2:da:c4:bb:fb:25:cb:14:9a:8e:73:7f:be:0a:50:
f6:74:98:b8:94:42:3e:ae:fa:b2:9f:bc:02:6e:67:
66:84:ca:22:b8:cf:a1:1b:52:51:de:d7:4e:6f:13:
f1:2a:61:64:43:e8:ad:5e:89:ec:ed:33:76:05:c3:
37:1b:ff:ca:ad:78:29:70:2f:9b:bc:d8:f2:1c:48:
d0:37:a2:25:63:91:1b:95:23:9b:8d:20:6a:b0:2f:
99:26:89:5c:16:e4:63:ec:6d:31:9c:60:5b:64:42:
4a:6d:79:78:2a:f5:7f:a6:53:ab:e7:53:0e:df:43:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:C4:6D:50:3B:80:2D:01:A6:93:D2:6C:AB:A1:D3:24:2C:56:88
X509v3 Authority Key Identifier:
keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8e:80:1c:e4:ee:23:9d:15:78:77:38:97:ac:4e:38:0e:07:
50:dd:94:96:35:75:67:c3:e8:ad:90:41:34:21:16:98:ca:5b:
17:98:a1:b5:36:74:40:00:bd:fa:cf:af:5c:bd:b4:d7:f4:30:
75:d4:0a:a7:26:48:4e:1a:36:3a:e3:af:24:5e:d4:90:f9:61:
cc:4b:b5:cf:73:6d:d6:7d:c3:b4:5c:ff:49:ac:68:87:e7:cf:
e1:d1:12:e2:90:8c:2e:2f:af:50:c9:a8:82:63:b0:5e:c8:ff:
e1:28:37:6b:b4:97:e0:6d:8e:72:ef:09:de:96:af:2e:d5:a2:
4d:30:f3:87:85:e2:e5:58:14:d6:72:2e:55:86:9a:2c:ea:72:
8a:a8:f7:b6:54:9f:63:a3:e6:a3:72:ac:4e:73:69:85:6e:38:
00:3a:56:de:83:9a:a8:26:aa:a9:e2:ac:3b:60:c5:c5:91:d6:
9c:95:95:ff:b8:19:89:e5:62:a4:22:d7:f2:98:e7:c5:45:d8:
b4:a9:92:ba:94:d2:4c:30:28:e1:de:21:38:30:24:2c:02:89:
91:99:56:60:a5:1b:86:1d:ae:a2:aa:9d:b9:19:c2:75:8a:67:
02:b7:06:e0:64:f2:d6:fc:b4:9b:08:55:7a:06:dc:33:79:95:
ed:d7:a1:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhEOEYxMTAvBgNVBAUTKEE1MkY4Rjk4NTlDQUM0N0Q2ODU0MjcyMzREMjYxNkVC
OUU1Mzk2MzQwHhcNMjYwOTIwMTg1MjI2WhcNMjYwOTI3MTg1MjI2WjAYMRYwFAYD
VQQDEw02YWIwMmI2YS02NWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3d/2K/dI1yJY1yI1U2strkY4djmtZA8wEFsQo2PnTghm/fGwpwKenDm2iKiM
iDfVVGmeqizp/Kv5QPvxbJ5zgkw7QaykAWtmprEowCFz6x0IqoNio369HgXQgvNr
pkvJ3JEAeG+QxqiYbv1OOhIWTd/6rM5220L7Zy+npMFXTropQtZa636y2sS7+yXL
FJqOc3++ClD2dJi4lEI+rvqyn7wCbmdmhMoiuM+hG1JR3tdObxPxKmFkQ+itXons
7TN2BcM3G//KrXgpcC+bvNjyHEjQN6IlY5EblSObjSBqsC+ZJolcFuRj7G0xnGBb
ZEJKbXl4KvV/plOr51MO30Nl9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJvxG1Q
O4AtAaaT0myrodMkLFaIMB8GA1UdIwQYMBaAFKUvj5hZysR9aFQnI00mFuueU5Y0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQ4Ri9CODUyRkIzQzQz
MjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hIMW9WQ2NqVFNZVzY1NVRs
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BTLVBtRm5LeEgxb1ZDY2pUU1lXNjU1VGxqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEQ4Ri9CODUyRkIzQzQzMjQxMUVBOTI2MzI1NEFDNEY5QUUwMi9wUy1QbUZuS3hI
MW9WQ2NqVFNZVzY1NVRsalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP46AHOTuI50VeHc4l6xOOA4HUN2UljV1Z8PorZBBNCEWmMpbF5ihtTZ0QAC9
+s+vXL201/QwddQKpyZITho2OuOvJF7UkPlhzEu1z3Nt1n3DtFz/Saxoh+fP4dES
4pCMLi+vUMmogmOwXsj/4Sg3a7SX4G2Ocu8J3pavLtWiTTDzh4Xi5VgU1nIuVYaa
LOpyiqj3tlSfY6Pmo3KsTnNphW44ADpW3oOaqCaqqeKsO2DFxZHWnJWV/7gZieVi
pCLX8pjnxUXYtKmSupTSTDAo4d4hODAkLAKJkZlWYKUbhh2uoqqduRnCdYpnArcG
4GTy1vy0mwhVegbcM3mV7dehfw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:42:02 2026 by rpki-client