
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
File: pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json)
Hash identifier: XDK4X0nCChGe6fxbvBM6HinmRYZ6q3IjgNCu+UQ+RCM=
Subject key identifier: 51:3C:CD:B5:D3:78:C4:B3:85:50:28:E0:CC:97:31:F0:B8:81:18:D3
Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Certificate issuer: /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
Manifest number: 04D0
Signing time: Mon 12 Oct 2026 23:57:26 +0000
Manifest this update: Mon 12 Oct 2026 23:57:25 +0000
Manifest next update: Mon 19 Oct 2026 23:57:25 +0000
Files and hashes: 1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: gzqxliZZqAbuymlY8y7sF46+3vlcDdDdtTlJ0w3r/0Y=)
2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: CmwyNOMcxqbsaQQe+naR5AW1qBeX6twl6NXVPLR2NpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Validity
Not Before: Oct 12 23:57:25 2026 GMT
Not After : Oct 19 23:57:25 2026 GMT
Subject: CN=6acd73e6-03a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:ae:b2:19:3b:4b:00:3a:42:ad:26:9d:7a:
b5:d3:71:bc:21:71:e8:14:fc:a5:64:d6:65:72:f7:
e4:ea:9a:00:d7:2d:70:aa:da:99:8e:fe:06:d2:78:
da:ad:63:bf:e7:67:49:19:40:f7:fc:86:56:40:6e:
01:38:fd:11:cb:58:9a:64:1b:bb:a3:d2:c0:2b:b7:
16:82:bd:4a:67:64:bd:79:c4:ee:6d:fe:74:41:22:
6b:f7:b3:29:85:15:ef:ba:bd:db:1d:a9:93:7a:67:
41:8f:30:a0:30:b3:4d:f7:5e:a7:d8:c3:64:ae:f8:
0b:78:10:9c:4f:de:0e:51:d6:fb:18:aa:3a:e1:1f:
99:2b:ee:d9:99:2c:5d:2e:eb:49:17:43:a0:30:e1:
8c:62:83:45:02:77:ef:28:31:6a:93:82:3d:c6:34:
68:18:79:1d:d4:67:cc:b6:4b:96:43:1c:78:8a:50:
32:21:57:00:36:be:a6:bf:dd:bb:18:6a:f7:d8:80:
64:12:1f:9a:d1:93:5d:1e:62:72:5a:50:8b:22:16:
6e:24:7b:76:5f:ce:0b:52:0f:4a:52:cc:71:16:b1:
8f:c8:26:9e:8b:82:6f:4e:40:35:16:69:5c:05:eb:
f6:d4:7e:87:7e:e2:e7:2c:74:2e:df:51:cc:aa:fa:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:CD:B5:D3:78:C4:B3:85:50:28:E0:CC:97:31:F0:B8:81:18:D3
X509v3 Authority Key Identifier:
keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:42:25:6a:31:b6:48:c3:da:c9:5e:84:9a:4e:a1:85:e3:ea:
9e:01:c6:d4:60:f7:05:15:6a:5d:93:cf:e8:01:65:55:12:f1:
d1:c7:90:bf:bc:51:f5:80:e8:d9:e3:01:a8:ae:b2:ec:6e:cb:
fb:9b:e7:38:00:ed:7d:03:22:f9:9d:fc:22:75:de:2d:00:86:
c9:7b:2b:6d:d6:92:aa:7a:74:57:3d:1f:8f:bd:77:1c:0d:d8:
38:bf:e9:a8:79:b1:b7:63:5b:61:11:3f:84:e1:f5:6b:34:01:
cc:88:d7:85:3f:37:7e:ae:c4:93:ac:be:6b:78:35:af:7c:29:
64:ba:dd:8e:f0:9b:33:52:81:e9:79:fc:0b:66:00:52:d7:05:
3c:30:a6:68:f3:b4:9c:ce:8c:1f:6c:f0:3a:73:09:02:af:9d:
f1:be:65:58:be:89:85:23:a2:49:f2:54:f2:25:51:53:38:38:
cd:c7:48:bd:6d:5e:15:4d:a9:08:7b:b3:eb:ea:23:7b:70:36:
2c:1f:c1:6d:27:82:f1:3d:2c:08:60:cb:3e:8d:08:df:37:91:
78:af:4a:bf:89:d4:41:78:24:49:b6:ad:50:31:d1:4e:62:04:
f6:d6:92:d1:2e:2b:19:7a:37:75:98:e3:2d:d9:d3:d8:af:e3:
a1:80:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:55:02 2026 by rpki-client