
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier: Tl8N7OaKcKhRz8ipFT2CZS2SPdAxXfeUfZcoCpxXRek=
Subject key identifier: EE:45:A0:45:1D:08:7D:43:35:7F:C4:5A:AE:B7:5C:D0:28:35:E1:DA
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number: 025E
Signing time: Mon 27 Jul 2026 03:37:54 +0000
Manifest this update: Mon 27 Jul 2026 03:37:54 +0000
Manifest next update: Mon 03 Aug 2026 03:37:54 +0000
Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: kdu9u79ig3VC/tTrK9NFo5BWtT1vPCPj3DzPb/Z54zs=)
2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: GRfiEr9OW2Ontk4PlK6wpEk+JDayOUZ5GJhS4LRNf8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Validity
Not Before: Jul 27 03:37:54 2026 GMT
Not After : Aug 3 03:37:54 2026 GMT
Subject: CN=6a66d292-5801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:83:a4:19:99:54:58:11:11:1e:21:66:f3:
98:3b:c9:c6:9c:3a:a9:a4:98:f1:10:2d:27:3e:77:
5d:97:28:d8:14:a4:08:86:26:a2:8f:db:cd:b4:e3:
81:d7:51:87:4d:09:87:65:78:e8:8b:03:f4:9f:8a:
3d:92:14:f8:2f:4c:d3:b0:07:24:4a:95:2a:9b:bc:
85:18:7a:ee:1d:57:8f:27:bb:b8:de:5a:5d:fc:5b:
bf:5b:82:8a:c9:84:82:5c:92:85:de:1e:bb:e5:47:
e7:83:78:cd:2d:63:9b:79:ee:d4:a5:c6:7d:72:b5:
9e:89:0a:a4:34:1a:52:92:ad:e1:98:f2:51:fc:c2:
7c:23:23:1d:5f:80:78:4b:46:6d:60:fa:b0:5e:cd:
66:f3:b1:b9:a1:8c:28:75:d7:1a:d1:a8:d0:5a:c9:
61:22:f8:44:08:b2:e0:fc:7d:25:2d:f6:0a:1b:5e:
94:47:35:e9:a7:3b:89:fa:bc:af:7e:d4:25:11:41:
8f:0e:81:39:fb:00:f2:5e:76:d9:08:b0:39:9d:53:
ef:34:9c:92:d3:f5:79:8b:f1:eb:80:a5:f4:9b:c4:
14:69:45:ea:b5:46:13:73:49:e8:e1:45:eb:91:ba:
1c:0f:49:55:ea:5f:49:7f:51:7e:0e:60:45:50:20:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:A0:45:1D:08:7D:43:35:7F:C4:5A:AE:B7:5C:D0:28:35:E1:DA
X509v3 Authority Key Identifier:
keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:ac:8a:22:49:5f:f3:cf:56:3e:ec:56:af:26:3b:8c:52:
74:c9:81:2f:01:f8:07:7f:fb:2a:3a:13:a8:49:d2:b2:c9:de:
89:33:7e:ab:0a:ea:c7:e2:a3:27:a9:7d:2b:7d:07:85:89:57:
c7:20:04:ed:a1:2a:a3:55:b1:e8:db:60:57:56:df:1d:e9:cd:
b1:43:92:57:c3:22:e0:16:6b:d8:cb:6d:c4:a8:c3:41:ec:d1:
de:82:df:2c:ff:cd:55:c3:6c:c1:71:86:9b:fe:ca:ec:d4:5b:
2c:63:2e:cd:3f:e9:0c:91:1a:fa:c7:89:ca:78:5e:fe:4a:5f:
e3:cf:8c:ec:56:28:56:80:56:16:7a:91:51:e6:ee:20:6f:46:
00:a9:84:75:c1:fb:c2:45:29:f5:90:0c:ad:3a:ca:51:6e:c1:
3b:36:45:f2:61:a2:ee:aa:07:93:1d:f2:e9:34:24:5a:d4:d8:
f3:e3:a1:b2:5b:98:27:47:2a:ff:31:9a:18:7b:e1:f0:65:72:
37:34:35:b2:bb:f3:27:e0:6f:ce:a4:2b:8e:4e:e0:b4:ea:d8:
7b:6e:eb:25:3f:13:c0:05:6c:49:c4:98:9a:53:cb:dc:e8:8a:
97:2f:42:9a:7e:a8:37:e6:d0:01:1d:25:8d:cb:1b:66:ff:1d:
5e:7a:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:55 2026 by rpki-client