
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json)
Hash identifier: weYozmloFtujIcYUKk3sZC+3GVXKo+sUPeR2p3iT0fU=
Subject key identifier: 9A:F0:26:92:06:89:FA:7F:2A:99:A6:B4:DA:B2:71:CB:41:1C:00:C8
Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
Manifest number: 01BF
Signing time: Fri 09 Oct 2026 04:35:35 +0000
Manifest this update: Fri 09 Oct 2026 04:35:34 +0000
Manifest next update: Fri 16 Oct 2026 04:35:34 +0000
Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: YaJORmv2OmfcRtO2/evhL1jz/vch5hoAZQTNHy/wzQQ=)
2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: CSNhoZkKt729AJAsDVCNWknT1CnJ47gjrYdcuOI20TM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B
Validity
Not Before: Oct 9 04:35:34 2026 GMT
Not After : Oct 16 04:35:34 2026 GMT
Subject: CN=6ac86f17-066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:11:b2:03:84:a8:92:6b:b0:21:d4:fe:70:0b:
dd:55:15:09:f3:88:7a:61:4f:a8:f4:be:a1:12:b8:
0c:b1:cc:e8:9a:d4:80:8a:17:f5:d2:91:9c:42:e6:
dd:3b:4c:f2:73:70:79:1f:b2:c2:4e:41:a4:80:9f:
73:ef:d2:47:19:9b:e1:19:ea:61:78:ee:47:d2:27:
99:0b:4c:37:a7:07:44:2a:2b:dc:cd:4e:ba:d3:f8:
1b:3b:97:00:38:48:1d:3e:a7:5c:06:3a:82:3a:55:
dd:a3:a2:82:fa:48:b8:0c:79:bf:6e:1f:19:3e:cd:
be:b6:7a:76:18:61:e7:40:74:b0:7a:16:f9:8f:77:
87:60:da:78:fa:6b:94:e3:b9:e7:81:6b:cf:ef:82:
bb:88:d3:ed:32:03:1d:5c:73:49:f5:17:2b:21:e2:
90:09:9d:49:e2:45:aa:ed:ac:7e:6b:18:55:a3:36:
59:2a:3b:51:37:73:1f:11:f2:f2:9f:8b:2f:24:db:
fb:f1:f3:ca:19:ae:15:0b:5b:e3:b8:ca:14:da:29:
67:0f:2e:a4:c0:b5:ab:e6:74:ae:f4:95:f6:47:bc:
51:e9:9d:3c:1b:f8:bf:bc:48:8e:c4:9c:2a:a7:03:
02:6e:d9:73:b8:f2:2f:10:fa:d2:6f:cd:02:b6:43:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:26:92:06:89:FA:7F:2A:99:A6:B4:DA:B2:71:CB:41:1C:00:C8
X509v3 Authority Key Identifier:
keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:8b:26:d6:59:d9:33:52:cf:e8:ee:65:da:96:a3:7f:22:
4d:15:21:96:f2:0f:22:14:86:f8:c2:e9:a4:34:e8:a7:e2:02:
d3:9b:39:f4:59:7e:aa:f0:b7:3d:53:8b:cf:28:7f:a4:04:f2:
99:85:2a:d3:4f:fa:03:50:88:9c:6f:ec:3c:67:dc:e5:fe:1e:
8d:8c:19:20:28:19:1c:3b:a5:aa:83:9f:b3:7b:7c:50:cd:18:
2b:49:5a:7f:4f:dc:84:b4:e6:83:3c:b3:c4:d9:a7:16:e6:0b:
cf:86:04:71:61:a1:c5:b3:31:1a:78:6a:1f:65:4f:5b:37:ce:
d9:00:ee:ca:c4:24:4e:99:6a:63:44:d6:f5:46:e6:23:97:1f:
ee:25:c8:e3:3a:b4:25:19:a6:13:89:41:9f:1e:18:34:fe:63:
c8:d2:8c:a7:4f:8d:4c:f3:6c:b4:c5:2a:c9:e3:43:1b:bb:89:
ab:71:65:cb:b1:ed:58:16:90:90:5f:54:47:a7:8a:78:04:24:
f8:14:39:45:e3:8c:b3:1c:48:f5:5d:12:a4:26:16:7d:90:67:
89:b0:b0:62:ef:6d:b6:0a:59:f4:27:a9:eb:cf:9d:f0:61:e9:
a5:ef:05:f5:90:a7:c1:b2:56:fb:53:ba:e5:0d:db:b0:19:bb:
90:38:30:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRCNEExMTAvBgNVBAUTKDNDMzU4N0RDM0FGMkU5MzdFQ0RCNjVBODM4OTI3NTlB
NDFDODg1MEIwHhcNMjYxMDA5MDQzNTM0WhcNMjYxMDE2MDQzNTM0WjAYMRYwFAYD
VQQDEw02YWM4NmYxNy0wNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RGyA4SokmuwIdT+cAvdVRUJ84h6YU+o9L6hErgMsczomtSAihf10pGcQubd
O0zyc3B5H7LCTkGkgJ9z79JHGZvhGepheO5H0ieZC0w3pwdEKivczU660/gbO5cA
OEgdPqdcBjqCOlXdo6KC+ki4DHm/bh8ZPs2+tnp2GGHnQHSwehb5j3eHYNp4+muU
47nngWvP74K7iNPtMgMdXHNJ9RcrIeKQCZ1J4kWq7ax+axhVozZZKjtRN3MfEfLy
n4svJNv78fPKGa4VC1vjuMoU2ilnDy6kwLWr5nSu9JX2R7xR6Z08G/i/vEiOxJwq
pwMCbtlzuPIvEPrSb80CtkNscwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrwJpIG
ifp/KpmmtNqycctBHADIMB8GA1UdIwQYMBaAFDw1h9w68uk37NtlqDiSdZpByIUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FMjY0OTlBMjJG
ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZUZnMyMldvT0pKMW1rSElo
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BEV0gzRHJ5NlRmczIyV29PSkoxbWtISWhRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEI0QS9FMjY0OTlBMjJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZU
ZnMyMldvT0pKMW1rSEloUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp1CLJtZZ2TNSz+juZdqWo38iTRUhlvIPIhSG+MLppDTop+IC05s59Fl+qvC3
PVOLzyh/pATymYUq00/6A1CInG/sPGfc5f4ejYwZICgZHDulqoOfs3t8UM0YK0la
f0/chLTmgzyzxNmnFuYLz4YEcWGhxbMxGnhqH2VPWzfO2QDuysQkTplqY0TW9Ubm
I5cf7iXI4zq0JRmmE4lBnx4YNP5jyNKMp0+NTPNstMUqyeNDG7uJq3Fly7HtWBaQ
kF9UR6eKeAQk+BQ5ReOMsxxI9V0SpCYWfZBnibCwYu9ttgpZ9Cep68+d8GHppe8F
9ZCnwbJW+1O65Q3bsBm7kDgwgQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:10 2026 by rpki-client