
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier: U+Py8CU61g6DhkxJutH0l9BvWTOMsHR87ZfCN/Q8mJs=
Subject key identifier: 24:6A:0F:0A:33:37:50:1D:F3:FC:8A:6E:93:82:0B:FC:A5:2D:08:2D
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial: 2D18
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number: 2D15
Signing time: Wed 22 Jul 2026 14:27:19 +0000
Manifest this update: Wed 22 Jul 2026 14:27:18 +0000
Manifest next update: Wed 29 Jul 2026 14:27:18 +0000
Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: n63h6Y1uNb0GHH1CSmmHRbjYVIu3vwH2si/8YxVHVrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11544 (0x2d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Validity
Not Before: Jul 22 14:27:18 2026 GMT
Not After : Jul 29 14:27:18 2026 GMT
Subject: CN=6a60d347-9c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:73:40:e9:3d:67:c0:8b:ca:21:3f:7d:7c:
c5:d6:7c:39:cc:59:99:63:81:e7:85:3b:56:a7:18:
96:25:1e:07:4e:e6:3b:b1:4e:31:53:ca:60:66:7b:
a1:52:40:3e:27:f0:4d:9b:a5:94:04:50:c3:f1:be:
52:a2:bc:4c:de:55:0a:2d:a8:af:51:3f:51:4d:0e:
38:a7:ff:96:a4:59:9e:54:fc:c9:a7:1e:a6:a8:19:
7f:9e:2e:e7:6c:72:08:c1:35:e7:9e:f2:70:af:be:
ae:0f:b7:3a:70:18:a3:f9:b4:8f:20:4b:3f:7b:ee:
d3:3d:18:e3:aa:78:4d:38:64:fc:25:40:2e:e1:56:
3d:f2:d5:c3:23:b4:62:bd:fb:09:e8:91:4b:e0:86:
1a:af:c5:78:c1:ac:74:f7:18:c4:3f:d8:27:36:68:
c9:13:b9:35:55:c7:a8:64:c9:f1:b0:7a:78:52:ad:
a8:72:f0:d8:3c:7b:58:54:b2:0b:10:67:a5:0c:d6:
d5:20:c9:58:8c:27:08:f5:3f:6e:9d:96:62:18:fd:
f0:de:80:f6:87:5d:5e:8d:6f:59:1e:b3:ff:ca:54:
d6:30:a4:22:05:90:45:84:9c:a1:6c:8c:2e:a3:05:
32:0c:ef:7c:f6:db:74:d0:2e:bd:34:c2:84:22:94:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6A:0F:0A:33:37:50:1D:F3:FC:8A:6E:93:82:0B:FC:A5:2D:08:2D
X509v3 Authority Key Identifier:
keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:94:44:67:19:96:a9:c3:37:66:83:bb:dd:42:b0:2f:a1:47:
8b:db:43:87:c8:95:10:df:5f:95:57:8e:ed:de:03:29:9d:c9:
17:27:60:de:6f:de:d6:f2:2d:2f:05:f8:b2:82:22:2d:5a:a1:
1e:3c:a1:9c:91:fc:59:16:f4:b2:22:32:48:d8:68:d7:d1:88:
e7:f0:7d:8a:f7:98:85:ae:19:61:fa:e6:f4:69:b7:ef:3a:b5:
15:7a:5a:4d:39:05:e1:f2:f7:35:7e:3b:f4:63:94:76:df:80:
58:de:7c:54:c4:8b:8e:44:6b:55:65:48:58:53:4f:c1:c4:aa:
c9:46:59:45:bb:65:d6:4f:55:50:46:b2:be:b1:a8:d7:6d:df:
10:e7:b0:df:e1:0b:b2:fa:2d:a6:8a:85:a6:99:6c:05:f3:b8:
5e:73:cf:84:4e:0f:9f:0c:16:d1:ce:f8:85:9c:bc:86:e4:18:
74:25:ea:8f:b3:b7:fb:89:18:ca:66:24:2d:f2:ce:30:21:4a:
57:af:0b:fb:8e:68:a9:a4:8b:d5:9e:a4:5e:85:d4:ac:d0:e1:
ce:35:35:90:9e:88:6c:0f:be:35:0f:b7:f0:07:9a:72:a0:5b:
bb:98:fd:bc:74:5a:9e:23:35:e1:6a:72:17:5f:96:4f:b2:e1:
b8:e9:24:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdFNEQxMTAvBgNVBAUTKEE0RTk1NzZDRTg2MEM4RkY1Rjk3MkFGNTkzQjQwNTRF
NzgyM0U2NDIwHhcNMjYwNzIyMTQyNzE4WhcNMjYwNzI5MTQyNzE4WjAYMRYwFAYD
VQQDEw02YTYwZDM0Ny05YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9VzQOk9Z8CLyiE/fXzF1nw5zFmZY4HnhTtWpxiWJR4HTuY7sU4xU8pgZnuh
UkA+J/BNm6WUBFDD8b5SorxM3lUKLaivUT9RTQ44p/+WpFmeVPzJpx6mqBl/ni7n
bHIIwTXnnvJwr76uD7c6cBij+bSPIEs/e+7TPRjjqnhNOGT8JUAu4VY98tXDI7Ri
vfsJ6JFL4IYar8V4wax09xjEP9gnNmjJE7k1VceoZMnxsHp4Uq2ocvDYPHtYVLIL
EGelDNbVIMlYjCcI9T9unZZiGP3w3oD2h11ejW9ZHrP/ylTWMKQiBZBFhJyhbIwu
owUyDO989tt00C69NMKEIpQXuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRqDwoz
N1Ad8/yKbpOCC/ylLQgtMB8GA1UdIwQYMBaAFKTpV2zoYMj/X5cq9ZO0BU54I+ZC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9BNjRGQkNFMEMw
NTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQOWZseXIxazdRRlRuZ2o1
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3BPbFhiT2hneVA5Zmx5cjFrN1FGVG5najVrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0U0RC9BNjRGQkNFMEMwNTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQ
OWZseXIxazdRRlRuZ2o1a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALJREZxmWqcM3ZoO73UKwL6FHi9tDh8iVEN9flVeO7d4DKZ3JFydg3m/e1vIt
LwX4soIiLVqhHjyhnJH8WRb0siIySNho19GI5/B9iveYha4ZYfrm9Gm37zq1FXpa
TTkF4fL3NX479GOUdt+AWN58VMSLjkRrVWVIWFNPwcSqyUZZRbtl1k9VUEayvrGo
123fEOew3+ELsvotpoqFpplsBfO4XnPPhE4PnwwW0c74hZy8huQYdCXqj7O3+4kY
ymYkLfLOMCFKV68L+45oqaSL1Z6kXoXUrNDhzjU1kJ6IbA++NQ+38AeacqBbu5j9
vHRaniM14WpyF1+WT7LhuOkkug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:44 2026 by rpki-client