
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
File: PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json)
Hash identifier: ZzVOZCXHRfbdjIihBdVl7Bmqh25lNOyqGzhD/ySWITY=
Subject key identifier: B3:79:D4:4A:CC:08:47:40:6C:F6:03:4D:01:74:33:AD:E0:E8:61:54
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
Manifest number: 58
Signing time: Mon 21 Sep 2026 08:12:49 +0000
Manifest this update: Mon 21 Sep 2026 08:12:49 +0000
Manifest next update: Mon 28 Sep 2026 08:12:49 +0000
Files and hashes: 1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: FPYyEtY6p5ZBnfwXr4GuIe8LiR2gi5rXh78GjV5nwtY=)
2: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=)
3: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Validity
Not Before: Sep 21 08:12:49 2026 GMT
Not After : Sep 28 08:12:49 2026 GMT
Subject: CN=6ab0e701-bc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:6c:6e:5b:53:b0:ba:b1:4c:90:86:4b:3d:
69:8b:bc:4b:83:4c:39:fb:3b:84:cb:91:8d:57:24:
c4:14:7c:35:a2:9e:19:8b:b6:e7:3c:32:fc:bc:ae:
e6:a0:bc:91:d8:ee:99:e9:c5:37:3c:20:54:c5:de:
4a:52:63:bd:22:21:ab:86:a9:2a:2b:8e:d6:f9:0b:
41:16:8f:67:a4:21:cb:88:d5:ac:18:9a:86:cc:2f:
62:6b:d2:be:1f:14:f9:53:40:d3:4a:42:ba:cb:e9:
55:b5:22:da:5f:c4:79:9b:6d:68:5a:51:75:ab:10:
03:92:2c:bf:b5:54:e4:25:f7:5c:1f:9b:df:27:b7:
fe:00:33:3e:a1:a7:d1:7a:39:c0:ae:17:18:b5:10:
3c:23:48:1e:81:1e:2a:62:00:f9:7f:89:b5:1a:6d:
63:a4:60:0a:2b:ca:d5:c3:88:3e:7d:8d:dc:e8:6c:
9a:5c:4c:97:05:75:b9:1d:f6:48:50:20:7c:b5:a0:
80:e3:2c:bc:ff:af:cb:6f:be:61:a8:76:d3:75:e3:
34:ca:bf:f5:a0:a7:f0:4c:05:66:85:8c:86:eb:e1:
4f:38:7b:2e:34:1a:12:e3:50:9c:cd:bf:5f:49:4e:
9e:f0:9b:16:1b:ee:47:82:0c:3e:b1:04:39:ec:7a:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:D4:4A:CC:08:47:40:6C:F6:03:4D:01:74:33:AD:E0:E8:61:54
X509v3 Authority Key Identifier:
keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:9f:27:1a:7f:14:55:e6:79:16:81:19:d4:04:3a:77:80:4f:
14:84:16:d5:db:79:22:7a:1d:bd:bb:03:4f:00:e9:80:9a:03:
09:e5:fb:05:b7:79:93:ec:b1:f6:15:ff:8e:54:30:1c:ca:cb:
d7:f2:58:dc:6e:b3:b4:3d:f8:58:b4:00:17:e5:60:6e:3c:79:
54:47:30:e0:cb:ca:7f:21:08:22:6a:3c:1a:aa:c8:14:a1:8d:
e6:de:26:80:9f:84:86:fb:df:74:e1:58:ec:5d:ca:91:b4:4c:
87:60:e3:c6:44:01:ee:2a:7c:d6:45:21:5e:75:91:31:70:9b:
91:09:23:c7:d3:56:6d:64:6f:70:13:ef:e0:34:6d:cb:20:e3:
7a:3d:45:60:7e:56:ee:02:bd:02:7a:cb:ac:a3:b9:43:c4:5f:
a2:6a:77:ea:c7:54:8d:38:7c:29:26:d4:13:f2:60:e1:b6:e1:
7b:dc:c1:c0:02:9b:e8:9f:b8:23:e5:8e:0e:6c:5d:78:3e:b6:
c7:16:02:ca:30:84:b3:e7:33:0e:05:0e:32:fd:bd:c5:33:d4:
99:ff:c6:a8:d9:da:67:c5:67:e6:dc:b1:90:8e:82:70:ac:20:
e0:d4:53:5e:6d:54:7c:f4:4d:38:32:49:79:65:9d:0c:eb:8a:
88:79:f9:98
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MkQ4NTExMC8GA1UEBRMoM0RCMzRDQjhCNUJENkE5OUVDRjdENTI5Mjg5MTNFNjUy
NUE3MUM1RjAeFw0yNjA5MjEwODEyNDlaFw0yNjA5MjgwODEyNDlaMBgxFjAUBgNV
BAMTDTZhYjBlNzAxLWJjMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCSKWxuW1OwurFMkIZLPWmLvEuDTDn7O4TLkY1XJMQUfDWinhmLtuc8Mvy8ruag
vJHY7pnpxTc8IFTF3kpSY70iIauGqSorjtb5C0EWj2ekIcuI1awYmobML2Jr0r4f
FPlTQNNKQrrL6VW1ItpfxHmbbWhaUXWrEAOSLL+1VOQl91wfm98nt/4AMz6hp9F6
OcCuFxi1EDwjSB6BHipiAPl/ibUabWOkYAorytXDiD59jdzobJpcTJcFdbkd9khQ
IHy1oIDjLLz/r8tvvmGodtN14zTKv/Wgp/BMBWaFjIbr4U84ey40GhLjUJzNv19J
Tp7wmxYb7keCDD6xBDnseu2jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs3nUSswI
R0Bs9gNNAXQzreDoYVQwHwYDVR0jBBgwFoAUPbNMuLW9apns99UpKJE+ZSWnHF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDg1LzlDMjFGRTBDMzQ3
OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBuczk5VXBLSkUtWlNXbkhG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGJOTXVMVzlhcG5zOTlVcEtKRS1aU1duSEY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy
RDg1LzlDMjFGRTBDMzQ3OTExRjE4QTVEMUYzQkE4ODMzNzczL1BiTk11TFc5YXBu
czk5VXBLSkUtWlNXbkhGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAGnycafxRV5nkWgRnUBDp3gE8UhBbV23kieh29uwNPAOmAmgMJ5fsFt3mT7LH2
Ff+OVDAcysvX8ljcbrO0PfhYtAAX5WBuPHlURzDgy8p/IQgiajwaqsgUoY3m3iaA
n4SG+9904VjsXcqRtEyHYOPGRAHuKnzWRSFedZExcJuRCSPH01ZtZG9wE+/gNG3L
ION6PUVgflbuAr0Cesuso7lDxF+ianfqx1SNOHwpJtQT8mDhtuF73MHAApvon7gj
5Y4ObF14PrbHFgLKMISz5zMOBQ4y/b3FM9SZ/8ao2dpnxWfm3LGQjoJwrCDg1FNe
bVR89E04Mkl5ZZ0M64qIefmY
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:27:31 2026 by rpki-client