
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier: scTYzIU/IAxmmnC5/jguK7uNLzWkM4ZEvkLbaH1yrBo=
Subject key identifier: 9F:7F:E8:0B:E0:43:1D:21:27:5A:E8:0A:31:3D:3A:00:A5:7F:87:39
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 047D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number: 046B
Signing time: Tue 22 Sep 2026 23:45:24 +0000
Manifest this update: Tue 22 Sep 2026 23:45:24 +0000
Manifest next update: Tue 29 Sep 2026 23:45:24 +0000
Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: oT8mooIHaptEJLxxFE3CXMSm9SqDTxzQ8UmmAJAsloM=)
2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: Sep 22 23:45:24 2026 GMT
Not After : Sep 29 23:45:24 2026 GMT
Subject: CN=6ab31314-a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:66:92:b0:72:01:7d:be:dc:9f:e9:3b:95:
87:bd:af:e8:5e:3d:6c:5b:9f:8e:35:7d:45:c3:8a:
c3:68:eb:41:12:bf:68:1b:ef:f1:ea:06:75:98:38:
58:58:0f:37:57:2d:c5:05:a2:e4:88:b3:80:a6:b2:
5a:11:da:79:e5:e4:24:bd:32:db:f7:a6:cc:99:03:
2b:c5:df:5e:27:3b:fb:92:d7:1b:cb:4a:b6:ac:7e:
f2:60:07:9c:87:7e:2b:0d:76:5b:d7:0a:0f:ec:50:
df:87:61:d2:7c:3d:56:5c:e6:fb:4d:b5:51:5d:29:
ac:b3:bf:b0:0c:dd:a5:26:da:5e:be:4b:6d:a1:54:
54:cb:f3:34:fc:0b:2a:1a:20:c1:5b:7f:66:dd:7e:
5d:92:c1:c6:3f:a6:c5:bc:40:2e:db:46:33:17:09:
cf:9b:26:42:55:42:bb:2e:61:1f:7b:25:1d:0d:40:
84:3d:40:fb:45:61:c5:30:41:7f:84:72:bc:b2:9e:
74:82:c7:a5:2a:4c:4d:e3:4b:06:4f:13:1c:04:37:
62:9c:29:fc:90:53:80:dc:44:23:a9:f2:e2:85:6d:
44:a7:ee:62:7f:5d:78:64:e1:64:57:28:4f:f2:a4:
8b:46:6a:45:5b:b5:c5:df:21:10:4f:31:1b:95:93:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7F:E8:0B:E0:43:1D:21:27:5A:E8:0A:31:3D:3A:00:A5:7F:87:39
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:18:22:3d:45:af:c3:24:ac:f5:67:8d:5c:a4:bf:e8:2b:b3:
de:9a:0a:f6:4e:6b:b0:06:5d:15:54:df:c1:cc:14:c5:e6:62:
0d:7c:54:25:aa:17:b1:df:11:33:8d:32:a3:a3:a4:4b:f1:49:
e6:66:5a:5e:aa:be:3f:00:8f:a6:c7:fb:35:89:d2:60:a7:fb:
b8:3c:d5:9a:d8:c1:da:1e:da:a9:f7:37:39:90:66:14:72:bb:
31:22:28:10:3c:29:30:3b:fc:7b:d5:cc:2e:44:79:f6:5a:bc:
07:90:65:2d:8d:3d:e4:67:a7:19:0b:f5:0c:a8:88:4c:78:53:
e0:ee:bc:d8:ac:ba:a8:1f:cf:09:97:37:9d:bf:9a:dd:78:75:
8c:18:68:7b:69:a2:60:67:fd:b1:80:2c:7b:d3:34:79:2d:be:
56:95:56:56:d4:50:93:a2:cb:1b:f7:59:15:2b:54:a6:b3:4b:
33:69:ce:b1:58:7c:8f:85:fc:9d:b6:9b:d6:7f:df:8d:48:55:
e6:a2:2b:28:06:ea:3c:ac:e0:f4:cb:b9:6e:44:05:f7:f9:ba:
92:3b:c1:fb:56:8c:c9:af:f3:fb:c8:d0:1c:fc:0e:be:05:36:
a2:22:ba:6f:25:cc:8d:11:53:f3:d6:54:5f:64:39:40:18:ff:
8b:e1:42:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0
OEU5NURGNzAwHhcNMjYwOTIyMjM0NTI0WhcNMjYwOTI5MjM0NTI0WjAYMRYwFAYD
VQQDEw02YWIzMTMxNC1hODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMtmkrByAX2+3J/pO5WHva/oXj1sW5+ONX1Fw4rDaOtBEr9oG+/x6gZ1mDhY
WA83Vy3FBaLkiLOAprJaEdp55eQkvTLb96bMmQMrxd9eJzv7ktcby0q2rH7yYAec
h34rDXZb1woP7FDfh2HSfD1WXOb7TbVRXSmss7+wDN2lJtpevkttoVRUy/M0/Asq
GiDBW39m3X5dksHGP6bFvEAu20YzFwnPmyZCVUK7LmEfeyUdDUCEPUD7RWHFMEF/
hHK8sp50gselKkxN40sGTxMcBDdinCn8kFOA3EQjqfLihW1Ep+5if114ZOFkVyhP
8qSLRmpFW7XF3yEQTzEblZMaQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9/6Avg
Qx0hJ1roCjE9OgClf4c5MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF
NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj
YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxgiPUWvwySs9WeNXKS/6Cuz3poK9k5rsAZdFVTfwcwUxeZiDXxUJaoXsd8R
M40yo6OkS/FJ5mZaXqq+PwCPpsf7NYnSYKf7uDzVmtjB2h7aqfc3OZBmFHK7MSIo
EDwpMDv8e9XMLkR59lq8B5BlLY095GenGQv1DKiITHhT4O682Ky6qB/PCZc3nb+a
3Xh1jBhoe2miYGf9sYAse9M0eS2+VpVWVtRQk6LLG/dZFStUprNLM2nOsVh8j4X8
nbab1n/fjUhV5qIrKAbqPKzg9Mu5bkQF9/m6kjvB+1aMya/z+8jQHPwOvgU2oiK6
byXMjRFT89ZUX2Q5QBj/i+FCnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:42 2026 by rpki-client