
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
File: pSAa7m9KXB64p-HHhTv7srp1y9I.mft (raw, json)
Hash identifier: cg7IKO8oqG1lcTSae72D6bfY7trDAE071Ld1998oFuI=
Subject key identifier: 4D:03:A6:80:EB:60:09:F0:F5:82:D8:C7:5F:DE:4D:BD:18:59:E0:1E
Authority key identifier: A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2
Certificate issuer: /CN=A91D1003/serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
Certificate serial: 0C68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
Manifest number: 0C5B
Signing time: Thu 24 Sep 2026 18:40:02 +0000
Manifest this update: Thu 24 Sep 2026 18:40:01 +0000
Manifest next update: Thu 01 Oct 2026 18:40:01 +0000
Files and hashes: 1: pSAa7m9KXB64p-HHhTv7srp1y9I.crl (hash: +g0rWsZcgk3HXKtVablL/fhHhrir4m/yl9EpV+00flM=)
2: 0DC2568E320511EA8CF6B72DC4F9AE02.roa (hash: lrXJAG9pwB68/9ymul53XjFddHdzlUams6o2moAtAtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl
rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1003, serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2
Validity
Not Before: Sep 24 18:40:01 2026 GMT
Not After : Oct 1 18:40:01 2026 GMT
Subject: CN=6ab56e82-0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:b5:bc:27:6b:35:1b:ca:19:cf:f8:e7:52:
8b:59:71:80:b1:98:da:54:1d:32:7b:70:74:f6:0a:
99:d0:db:e4:7b:fe:13:7c:f6:a1:d6:98:6b:00:dd:
1e:a2:4e:c4:8e:11:f2:63:59:38:b6:b7:11:63:42:
23:32:95:28:ea:96:53:bb:4e:e7:f8:81:c9:0c:e5:
f0:de:d1:82:1d:33:d2:25:6b:5a:4e:92:de:09:4a:
39:3b:ef:17:06:26:10:2f:07:42:62:a2:45:fb:81:
b0:05:a9:65:d1:f4:da:46:c8:8e:a3:f0:e4:df:d4:
1e:80:70:be:e1:5b:90:f6:51:ae:55:1d:19:28:32:
5c:61:3b:38:0b:16:54:b0:71:37:d3:8b:6c:3b:a6:
6c:00:74:88:4f:b5:7c:bf:db:92:28:aa:ba:13:69:
9f:32:e0:43:71:15:61:55:eb:d3:83:b9:05:c0:b5:
bd:0a:c4:dd:77:c7:f8:85:e6:19:8c:9e:08:e7:32:
70:4a:c4:ba:31:80:d2:bc:03:26:9d:e4:0a:2e:6d:
cb:9a:e9:32:4d:57:b3:91:d8:9c:f1:db:42:c5:9a:
e0:b4:4d:a6:e3:c7:6b:11:97:9a:91:5d:2b:2a:54:
64:9b:db:ac:89:14:87:b0:f9:2d:27:32:ac:fb:da:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:03:A6:80:EB:60:09:F0:F5:82:D8:C7:5F:DE:4D:BD:18:59:E0:1E
X509v3 Authority Key Identifier:
keyid:A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1e:ca:54:41:a7:fa:06:57:2e:6a:fa:74:68:2e:7f:54:07:
29:aa:67:11:bf:a6:60:39:cb:36:70:05:2e:3e:ef:60:2e:89:
02:99:e3:c6:51:76:46:48:b9:85:76:c6:f0:57:99:c4:14:7c:
95:83:6c:cd:66:a5:b3:c2:f8:4d:d2:c2:05:7b:3c:c5:81:a9:
43:9a:8d:b8:fd:34:e3:0f:74:6a:37:b7:1c:4d:09:ad:fd:cf:
54:83:3e:f6:1d:a9:a8:1b:6e:d1:93:85:90:25:be:fb:7a:2d:
d0:de:f4:70:3f:ab:fe:80:d5:de:13:70:c4:d8:fb:ac:0e:c3:
77:94:6e:56:4a:59:27:c6:9d:77:fd:82:b5:bf:5f:d5:88:84:
3c:ef:c1:e9:b7:8e:e7:98:be:e7:e5:38:c4:40:91:c3:49:c8:
36:8e:fa:47:8a:00:d5:79:db:2f:e8:d5:69:ab:0b:8b:ca:61:
e3:a2:eb:a3:ba:12:7b:6c:2a:f2:87:b7:46:0a:72:99:bd:0d:
61:ba:4e:6e:fb:d0:25:7d:25:9e:10:61:52:82:8a:88:fd:84:
10:d4:4e:02:28:ad:49:cc:be:11:c8:f1:fc:b7:a3:fa:f7:9a:
c1:45:63:d0:7c:c7:78:72:04:da:7d:11:16:40:0d:04:ff:8c:
de:73:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:37:35 2026 by rpki-client