
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier: +SAMvV6ld99tHzt/GubE2Vnn+YvI/WbPj+XhTXeC2w8=
Subject key identifier: 81:3E:BC:73:A2:E0:67:30:1D:42:44:59:E4:82:9F:BA:B0:80:A2:74
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial: 01CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number: 01C9
Signing time: Wed 15 Apr 2026 03:20:24 +0000
Manifest this update: Wed 15 Apr 2026 03:20:23 +0000
Manifest next update: Wed 22 Apr 2026 03:20:23 +0000
Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: CUdPOLfyiGcudi71J6+EAK0yE7KWyFafpBlLAiiU3MA=)
2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Validity
Not Before: Apr 15 03:20:23 2026 GMT
Not After : Apr 22 03:20:23 2026 GMT
Subject: CN=69df03f8-96a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:06:2f:ab:d8:02:f9:d4:eb:f0:8b:c5:a6:
6c:61:a2:f4:6f:d5:61:27:14:f6:d8:8e:ca:f4:93:
62:e4:4f:6a:72:c1:30:03:87:b2:1d:09:7f:6c:5f:
c5:6d:12:9c:cd:51:14:97:a9:f0:cd:c4:e6:61:b4:
46:4d:b1:39:43:17:04:26:03:00:2f:d0:19:bc:09:
ee:59:c8:40:dc:60:8c:75:69:ba:4d:fa:17:5b:ad:
9f:f1:d2:43:a7:72:6a:b0:0d:ee:77:75:46:9c:a9:
33:13:14:7c:31:b6:87:3c:d0:fa:21:d8:eb:f8:06:
b1:6b:4f:15:24:71:59:51:db:90:a7:8f:ea:fb:e2:
77:27:e9:8b:25:da:ea:67:7f:fc:2a:ab:6e:83:9e:
83:e1:d7:ce:5f:19:af:4f:72:77:46:5d:00:b7:38:
50:e2:01:2a:49:6e:cf:86:7c:b6:c8:c1:08:c3:4b:
8a:3f:da:53:7b:28:69:8d:d8:72:14:c5:25:4a:d6:
7e:1d:69:45:d0:18:20:c2:e4:8b:d9:e8:4b:a8:5d:
76:af:ba:a6:b5:2e:0e:82:d8:5d:34:84:69:de:d4:
e3:16:97:e9:9e:ea:37:0b:41:7e:08:4d:2d:c6:53:
ae:5c:6c:a7:13:10:5e:c9:16:f7:61:de:3c:32:89:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:BC:73:A2:E0:67:30:1D:42:44:59:E4:82:9F:BA:B0:80:A2:74
X509v3 Authority Key Identifier:
keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cc:0a:03:ec:34:f5:9f:af:51:11:10:4e:95:1f:3e:2d:dd:
df:c1:15:21:1e:7c:7f:87:36:70:55:23:32:bd:42:e3:e0:90:
fe:eb:b1:de:11:d0:23:17:f2:34:f6:f5:cf:56:25:31:1d:d7:
0b:e4:eb:62:66:96:c4:66:70:8c:08:86:4f:41:42:bc:b2:a3:
fd:59:0b:d3:25:9d:1c:d6:53:9d:fe:53:34:ce:b0:eb:da:eb:
5b:62:68:17:ba:c3:60:d5:a7:e8:91:d5:53:f4:ff:4f:71:a4:
3d:4d:70:11:24:e9:32:14:07:ee:b3:2c:06:6f:f2:57:cf:67:
59:0b:ab:f9:ff:98:34:e5:8d:30:59:a8:b1:b9:e3:df:06:dd:
c9:54:a5:f0:d3:f2:60:26:e8:34:47:07:cc:19:5c:b6:43:46:
25:1a:40:b6:af:3c:1b:d0:fb:a4:aa:de:fd:e7:b8:6e:99:67:
5a:eb:d2:60:37:22:8f:3c:4f:c0:45:eb:60:53:83:9c:76:e3:
ac:8c:19:89:75:6b:4a:b2:17:6e:75:65:d1:8a:0e:91:18:69:
3e:18:a8:dc:e5:76:86:89:5c:ef:a0:e2:e9:3f:43:5a:c4:56:
6e:b1:63:15:0c:30:b5:9f:59:59:2c:c3:04:73:88:fd:b3:ae:
98:8b:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:08 2026 by rpki-client