
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier: BzArrAs1x0/BMFuXvPs7dCbAi2Shd3zrFox9pCGUh0c=
Subject key identifier: 53:2F:C0:C5:FF:3F:46:7E:88:E6:F1:04:8F:EE:AA:8E:09:79:19:DB
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number: 0219
Signing time: Mon 21 Sep 2026 02:54:12 +0000
Manifest this update: Mon 21 Sep 2026 02:54:11 +0000
Manifest next update: Mon 28 Sep 2026 02:54:11 +0000
Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: Z57N8LWYRjm+RQO+s5jF+JgaapnxUVtw4eS16UY0x1E=)
2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Validity
Not Before: Sep 21 02:54:11 2026 GMT
Not After : Sep 28 02:54:11 2026 GMT
Subject: CN=6ab09c53-1361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:5f:63:5a:83:8d:c2:42:50:db:ea:b6:1a:
a8:b1:c1:67:c9:7e:20:1f:c5:7f:ac:af:f4:47:df:
05:90:95:02:d6:bc:b2:2b:b4:17:69:32:73:1d:04:
ae:17:fa:18:91:d6:60:c8:4f:54:f5:5e:f0:5c:db:
84:2c:26:b7:eb:5f:c4:35:b5:ea:c1:c1:20:53:41:
79:a4:04:fa:d9:03:bd:da:09:93:9c:5b:7f:f7:ee:
b5:36:cd:ba:fb:08:6e:56:4e:c3:85:b9:a1:e3:73:
61:8e:cd:18:09:77:b2:06:12:2c:f3:99:93:f7:05:
2d:52:11:77:79:cc:fe:66:07:ab:45:f3:b5:86:e7:
01:da:4e:e7:7d:79:99:1a:3e:13:54:3e:bd:f2:c7:
cd:f1:b2:25:4c:ad:14:0e:69:e3:cf:9a:2e:06:e0:
e1:84:6d:3c:0b:04:52:b1:b9:80:db:bb:64:ea:55:
80:33:b3:ad:6f:f6:34:09:52:d2:8f:87:77:c9:3a:
e6:40:0a:24:c7:b6:bb:6b:d6:04:55:da:88:49:de:
d4:89:82:e4:e4:92:bd:31:a2:5d:7e:60:5f:fc:c3:
44:8f:c3:a4:1d:31:b6:45:8b:6e:40:c0:91:bc:36:
e7:9e:be:c8:49:23:5b:a6:a6:13:a7:0f:04:13:17:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:C0:C5:FF:3F:46:7E:88:E6:F1:04:8F:EE:AA:8E:09:79:19:DB
X509v3 Authority Key Identifier:
keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:dd:d5:ed:9b:ff:fc:5c:ab:c5:2b:28:8a:bd:4e:0a:57:
f3:52:a8:b7:32:68:92:30:85:69:9c:c7:c9:66:dd:2a:b8:d0:
e5:e5:1f:90:9b:2d:46:4c:63:7e:86:80:19:5d:7a:54:17:33:
bb:a3:79:e7:22:4e:67:9d:98:49:c8:c0:c6:dc:fe:f9:f8:ad:
33:4a:2b:ef:89:ab:a7:76:4b:8d:e8:a0:d4:37:9c:5d:d8:e2:
0a:e4:be:63:fc:e9:46:f6:a4:62:71:c5:52:0b:fa:a1:00:f6:
d0:de:62:8f:3c:5c:d0:9f:5f:0d:06:5a:53:d8:2f:78:3e:dd:
5f:9d:21:95:a7:33:c7:7b:19:81:ad:32:18:8a:5a:36:ef:1a:
40:bd:f0:a9:d0:a2:1d:cb:11:5b:3f:e8:59:e9:16:a8:97:2b:
77:34:a5:89:57:16:56:95:ce:ab:a0:ce:69:34:90:a5:53:72:
bf:3c:3d:ea:35:83:10:2d:63:50:f4:fe:64:f4:13:8b:c0:11:
c3:0f:72:e0:68:2e:f7:e5:20:41:3a:87:72:2d:10:92:81:59:
92:18:5d:c4:e6:5c:9c:37:f9:40:36:e3:6d:99:cf:f5:cc:63:
78:5a:4d:77:3c:82:1b:39:05:db:a2:b8:18:21:f0:66:91:6c:
7c:ff:5a:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE
N0QzNUQwNzQwHhcNMjYwOTIxMDI1NDExWhcNMjYwOTI4MDI1NDExWjAYMRYwFAYD
VQQDEw02YWIwOWM1My0xMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA519fY1qDjcJCUNvqthqoscFnyX4gH8V/rK/0R98FkJUC1ryyK7QXaTJzHQSu
F/oYkdZgyE9U9V7wXNuELCa361/ENbXqwcEgU0F5pAT62QO92gmTnFt/9+61Ns26
+whuVk7Dhbmh43Nhjs0YCXeyBhIs85mT9wUtUhF3ecz+ZgerRfO1hucB2k7nfXmZ
Gj4TVD698sfN8bIlTK0UDmnjz5ouBuDhhG08CwRSsbmA27tk6lWAM7Otb/Y0CVLS
j4d3yTrmQAokx7a7a9YEVdqISd7UiYLk5JK9MaJdfmBf/MNEj8OkHTG2RYtuQMCR
vDbnnr7ISSNbpqYTpw8EExcm4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMvwMX/
P0Z+iObxBI/uqo4JeRnbMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE
NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs
Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvvd1e2b//xcq8UrKIq9TgpX81KotzJokjCFaZzHyWbdKrjQ5eUfkJstRkxj
foaAGV16VBczu6N55yJOZ52YScjAxtz++fitM0or74mrp3ZLjeig1DecXdjiCuS+
Y/zpRvakYnHFUgv6oQD20N5ijzxc0J9fDQZaU9gveD7dX50hlaczx3sZga0yGIpa
Nu8aQL3wqdCiHcsRWz/oWekWqJcrdzSliVcWVpXOq6DOaTSQpVNyvzw96jWDEC1j
UPT+ZPQTi8ARww9y4Ggu9+UgQTqHci0QkoFZkhhdxOZcnDf5QDbjbZnP9cxjeFpN
dzyCGzkF26K4GCHwZpFsfP9a0w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:05 2026 by rpki-client