
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier: SBgOuOcqqgdoIdkVUj9pRbGCA/CAhyhtRKQUvejMAB8=
Subject key identifier: F8:69:29:D0:6B:CF:E8:09:C2:DD:09:26:A6:5B:DC:1B:C8:93:B6:67
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number: 0221
Signing time: Sat 03 Oct 2026 03:29:03 +0000
Manifest this update: Sat 03 Oct 2026 03:29:03 +0000
Manifest next update: Sat 10 Oct 2026 03:29:03 +0000
Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: 6SgvGNwF8X3T/49XAeSkFeBJft+diTV7TawabWgPjy4=)
2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: Oct 3 03:29:03 2026 GMT
Not After : Oct 10 03:29:03 2026 GMT
Subject: CN=6ac0767f-3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:33:df:a5:a8:f4:1d:a9:3c:c8:cf:d3:aa:
e6:ef:34:d0:1d:9d:7d:16:b6:36:ef:b8:ad:4c:54:
4d:15:4f:d8:9a:c2:c3:4c:1a:96:1e:a6:b6:af:07:
ed:37:68:f1:d7:e0:23:8c:75:3d:3e:d1:e0:8c:65:
9e:d6:e4:be:e5:0f:2f:20:ef:84:52:9e:5e:4d:cc:
a5:fa:37:98:15:99:eb:25:3f:6e:0c:84:8c:2d:e5:
16:1c:1f:d0:5d:bb:98:20:9a:12:45:f9:5e:6c:95:
44:c1:16:cf:10:fb:34:79:d1:c6:e6:17:ac:1e:9e:
7a:e0:23:00:7e:72:bb:50:59:b1:66:c7:39:84:de:
73:8e:53:c7:bc:48:cc:e9:11:4f:22:ee:ff:f9:35:
ee:2f:a2:a9:c6:53:4f:36:d2:51:c7:36:e0:49:ba:
ce:45:23:bc:74:de:d0:87:94:e3:3e:a4:8b:db:5a:
74:0b:3a:9b:2e:78:9c:7b:72:40:18:3a:13:ef:1e:
60:84:02:74:ff:5a:08:3f:4b:26:3a:cc:b9:7f:d6:
12:d2:b1:81:c4:3f:21:39:43:92:19:65:b5:1a:78:
00:78:98:f5:96:3b:8b:50:19:12:83:5b:45:17:a8:
25:be:19:3f:5c:f3:a2:f6:89:4d:cc:53:4b:22:94:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:29:D0:6B:CF:E8:09:C2:DD:09:26:A6:5B:DC:1B:C8:93:B6:67
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ad:ab:0e:dc:90:fc:ec:68:4f:2e:95:14:e3:81:de:6b:3c:
f1:fb:8b:f9:29:21:17:50:ff:d4:f2:76:80:26:88:86:b4:3c:
0a:2a:23:1e:49:fe:97:a0:b1:b1:33:4e:e8:88:bc:08:aa:e4:
96:19:70:02:18:c6:7a:f4:51:ac:3d:f8:9e:bc:ef:08:59:50:
d5:05:bf:10:f5:1a:b6:49:1b:16:61:d4:5a:5e:7b:c6:d1:25:
3a:df:51:8f:86:8c:0a:09:b3:2e:13:3c:99:10:bf:be:c1:7c:
ce:8a:75:d1:35:16:0d:b6:98:49:21:ba:57:26:58:dd:63:3a:
0c:2a:9a:ac:d7:ff:e5:ea:5f:c7:de:e0:42:1e:6b:3c:ea:c8:
c1:03:65:03:b3:b2:33:3b:d1:c2:fd:c6:61:3b:78:fb:67:e1:
3b:a4:a5:30:dd:90:9c:8e:a0:10:38:b5:fd:a5:74:a7:a5:32:
6d:7d:2f:33:52:59:dd:43:eb:75:99:05:30:ef:dd:a4:b9:f2:
9c:42:35:02:dc:7e:e5:f0:df:57:a5:d7:c0:a5:7f:c6:c8:4b:
42:58:7d:f8:4b:a1:7a:c8:a3:ca:a8:8d:38:9d:10:69:21:d0:
5a:e8:5e:b1:34:c3:53:53:19:9d:bc:2f:43:19:34:e7:02:d4:
56:fe:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:43:28 2026 by rpki-client