
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: lcWz6atwN2Bg+CHzK9jr2y1CKVuflKtdreNvb0g1P90=
Subject key identifier: 20:E4:7C:04:0A:47:0E:49:95:78:1D:B5:67:E6:49:36:50:30:24:4E
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 356C
Signing time: Tue 28 Jul 2026 15:12:00 +0000
Manifest this update: Tue 28 Jul 2026 15:11:59 +0000
Manifest next update: Tue 04 Aug 2026 15:11:59 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: 9m9UvUkl9mTEhrnXH+Gi2D/sPLlO1PS4chXLeuBJ4bk=)
2: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
3: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Jul 28 15:11:59 2026 GMT
Not After : Aug 4 15:11:59 2026 GMT
Subject: CN=6a68c6c0-3605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:50:a7:fe:3d:0f:a5:2b:42:66:90:b6:69:
67:b8:f3:36:a6:b1:15:96:74:b5:0e:21:6a:15:b6:
06:9e:30:a5:90:85:7c:38:40:b1:8c:b3:5e:e1:9d:
79:6a:80:e7:ab:bd:4d:4b:45:5b:40:11:79:8d:a5:
91:0d:5f:de:85:53:c7:03:9b:a3:ea:55:42:21:3a:
be:be:95:c5:94:3f:62:d5:79:46:14:aa:c7:ee:73:
ed:2e:a0:d0:4c:60:d7:11:19:ad:23:8d:16:ea:3f:
d2:01:f7:fb:d8:c0:73:f6:9f:ca:e1:31:6a:02:0a:
17:e5:e1:b4:14:c7:82:12:25:58:54:53:32:8a:d0:
48:3c:4a:e1:19:ba:bb:b0:1e:7c:a3:14:d2:96:7d:
c6:45:bf:9a:ba:14:f7:ff:90:47:50:dd:93:cb:1b:
39:a1:75:f3:33:53:14:dd:8a:e5:8a:fe:4f:44:10:
9f:c6:af:9a:91:98:d8:0a:45:7e:0a:bf:2c:84:50:
15:4a:1b:41:c6:ee:71:22:3a:ac:87:8f:65:77:2d:
f8:15:3d:67:3a:46:99:6a:aa:34:c3:6d:5a:2f:8f:
14:37:25:56:0b:67:2a:e5:44:59:c1:89:8e:e2:d6:
2a:3f:81:98:db:5f:c2:4b:63:87:a2:33:1b:26:d1:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:7C:04:0A:47:0E:49:95:78:1D:B5:67:E6:49:36:50:30:24:4E
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:53:b3:f1:37:8c:65:aa:04:78:04:0a:2c:d5:9d:5b:87:
8e:94:05:b3:28:d9:95:fa:58:e2:69:e6:4b:c4:81:80:c4:dd:
0c:91:a2:57:06:02:4c:85:21:9c:8f:18:39:9a:ec:02:0c:75:
bb:12:19:e5:8b:7b:97:e7:65:94:2c:13:3b:96:7b:1c:bf:b8:
fa:e4:b6:4d:02:fe:25:97:1c:9d:eb:24:ce:55:27:a8:14:8f:
31:2d:91:c3:5f:e1:76:0e:cb:c6:49:ef:96:f8:a7:1c:67:02:
45:70:bf:eb:aa:32:05:21:c8:32:3e:c2:85:f5:c3:3e:d8:40:
2e:47:21:81:cd:39:a8:ca:a8:f7:13:53:58:2b:40:03:17:6c:
f6:3e:d1:fc:98:c9:53:7f:6e:b2:88:1e:e3:28:62:ac:d0:bc:
eb:c1:28:03:83:14:81:b3:45:f3:a6:f4:a1:24:75:25:9b:cb:
4f:c8:e1:b0:68:4a:0f:4a:6a:b9:47:38:2e:04:b1:83:49:ed:
0e:e9:ac:86:96:78:dc:f0:53:67:38:a7:8b:4a:44:66:d0:6c:
a0:2d:f4:60:75:4a:3d:c5:00:b1:04:2e:34:07:a3:82:12:4a:
c7:fd:e3:b0:81:22:6f:96:93:f0:5c:c2:d6:09:34:af:2a:1b:
b2:96:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:24 2026 by rpki-client