
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier: 3Pvyqsx4teqI79Sv4Lcxqhfrw4N4uhYZK/5TVOdBfGE=
Subject key identifier: 83:B0:BC:57:4B:1E:FA:B1:E6:15:C8:52:65:92:87:39:33:DD:D9:C0
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial: 0640
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number: 0639
Signing time: Tue 22 Sep 2026 22:23:28 +0000
Manifest this update: Tue 22 Sep 2026 22:23:27 +0000
Manifest next update: Tue 29 Sep 2026 22:23:27 +0000
Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: zMKgZsROW9pOl9ATt0eGujV4Jy9IKFn6a0gBoEKmsJk=)
2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: YDIYwh8IZsocldDrNfzej1ZrNQO57DlnoJZAAXQRlpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1600 (0x640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Validity
Not Before: Sep 22 22:23:27 2026 GMT
Not After : Sep 29 22:23:27 2026 GMT
Subject: CN=6ab2ffe0-5c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:9f:3f:79:54:d8:ca:d4:81:e5:5b:ac:1f:
f2:a7:2e:8e:46:28:85:d0:80:d5:e2:1d:63:e1:08:
cf:12:a2:35:5d:be:9f:26:c2:4b:c9:27:67:01:62:
03:7b:c2:fd:df:e5:9a:9c:5e:5f:af:83:9b:15:fc:
57:f1:51:df:48:95:64:08:38:af:f0:ea:ab:87:57:
9f:91:e3:b3:8f:f8:b1:24:f6:27:77:5a:f4:07:0e:
f6:23:9e:78:82:51:54:af:63:76:a8:94:27:81:5c:
ab:61:a9:1d:30:6b:c5:3c:1a:cb:e8:4e:b4:32:21:
6a:58:3a:05:7f:d8:f2:d1:e2:97:73:cd:4f:5b:00:
2b:29:70:b6:ed:a5:6c:7a:ae:db:73:a1:49:0c:5d:
c3:38:2a:82:23:44:d8:ae:00:bf:ee:6f:7b:6a:6c:
17:17:0f:01:d3:97:c1:7d:4d:09:69:b8:db:ec:4e:
f4:d3:d7:5f:7e:59:92:4c:c5:28:ff:de:78:9c:95:
3d:3a:70:65:a9:db:c7:39:c3:87:4e:27:bd:37:a7:
60:2b:40:91:4d:70:82:f2:7b:5a:b2:d8:4e:a5:d9:
4c:93:32:7a:f6:7f:a2:8b:60:88:99:f2:77:0c:93:
6f:af:07:bc:21:d2:76:41:49:a1:18:a5:46:55:66:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:BC:57:4B:1E:FA:B1:E6:15:C8:52:65:92:87:39:33:DD:D9:C0
X509v3 Authority Key Identifier:
keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e2:06:d9:60:c9:38:ce:d9:c0:e2:ca:05:e2:5f:e9:a2:1a:
4f:c6:2e:06:bd:59:49:e1:da:96:b0:dc:b6:23:21:c0:ea:c7:
fe:d9:0f:5a:a2:bc:9e:c4:f6:39:c6:2d:8e:b8:98:50:bd:9c:
48:9d:16:1a:42:12:43:73:d3:c3:05:d5:b1:37:45:ec:c1:c5:
dd:12:25:cc:a6:c0:bf:64:21:84:f9:88:7a:6c:6d:00:e6:b2:
be:3c:6f:87:db:08:43:36:ae:b9:ec:60:2c:e4:85:8f:52:9a:
05:f2:38:08:7f:e7:8f:99:02:3b:20:16:76:12:33:b3:a2:e5:
f3:7b:75:00:1e:ec:94:06:65:17:9d:7c:58:6e:4a:24:d6:db:
24:04:d8:43:d4:36:b1:a0:0a:9f:5e:cb:7c:85:a4:52:17:8a:
4c:92:96:6e:61:34:da:c0:46:1e:97:e9:b8:7d:72:40:24:11:
3b:73:65:a0:93:20:ea:fa:53:a3:18:b1:2d:43:05:9f:24:95:
1c:6e:23:1b:3e:88:8b:0b:bc:ed:25:dd:f3:ec:12:29:3f:5e:
5b:13:39:e2:b3:67:79:e3:e4:a2:f3:f7:79:57:c5:e0:db:b8:
14:a3:11:29:c3:ca:06:0c:a4:fa:0b:20:81:79:ee:da:f9:71:
d2:93:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:30:38 2026 by rpki-client