
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier: lq93bfNVdXK57vX9zBpb4d/FWE8XxPwtQTM5vfsmB0E=
Subject key identifier: DB:8C:DA:FF:CE:08:B6:86:2E:69:88:9F:CE:E7:D3:C9:90:6A:C7:66
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number: 0818
Signing time: Tue 12 May 2026 21:14:02 +0000
Manifest this update: Tue 12 May 2026 21:14:01 +0000
Manifest next update: Tue 19 May 2026 21:14:01 +0000
Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: pUyBpSHhUIJgO+v3d/AkZoEz85Sq3A2q2gAr43Hz+8c=)
2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: May 12 21:14:01 2026 GMT
Not After : May 19 21:14:01 2026 GMT
Subject: CN=6a03981a-841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:7f:57:d2:1e:5f:9d:67:2b:cb:2a:07:68:
73:79:35:c3:26:f8:22:c9:5d:c7:23:d9:e8:2e:d9:
22:54:ab:e1:df:24:82:6c:5f:06:c1:2e:54:66:dd:
83:51:62:30:ef:8f:c2:99:ce:2a:3f:93:cc:eb:d0:
a1:1e:40:1a:94:da:50:c8:cc:cc:ad:79:18:a4:f3:
13:30:c8:aa:aa:78:f1:64:2f:f9:ca:86:0a:7b:69:
93:0d:89:5d:da:9a:be:0f:8a:e0:d7:3e:f0:5c:5e:
c7:5a:78:85:b5:99:6f:e4:f5:5f:41:64:88:72:78:
5f:15:b5:f4:32:af:8f:31:f1:e7:da:77:28:74:a4:
28:d3:65:d7:c9:4b:7e:03:ff:4f:d2:99:75:17:b6:
de:e6:14:ec:45:c6:d2:6b:64:25:6b:4c:55:45:a6:
59:aa:e2:b4:a3:26:97:c6:5c:7a:62:fc:5d:0e:33:
e2:0b:60:52:66:56:4e:a6:4b:be:f1:3c:41:03:0f:
71:5c:4c:22:5d:1b:0e:9e:91:e7:b5:86:e5:60:7c:
ec:97:83:af:d3:c1:30:01:72:eb:57:8e:bc:b5:32:
ab:2c:9a:55:13:66:4f:25:ee:b8:68:1a:66:fc:63:
b4:cd:a1:70:dd:a9:f6:a5:28:ff:71:a7:96:f5:43:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:DA:FF:CE:08:B6:86:2E:69:88:9F:CE:E7:D3:C9:90:6A:C7:66
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:eb:04:5f:84:5a:58:2a:2f:77:fd:69:88:ff:22:01:1f:
fc:65:71:ac:18:89:55:fa:16:3c:9b:fc:a7:e5:73:01:bb:6c:
dd:40:61:c2:a1:de:a3:29:03:cd:73:36:ce:b3:c7:76:5a:fa:
53:b4:16:b3:05:11:f9:a8:49:9c:9f:83:06:22:d6:74:ff:c1:
ef:f5:4d:63:4c:47:94:7e:9a:ac:d9:60:02:22:84:ba:7b:0a:
79:6b:d0:a3:dc:92:e9:4e:41:e5:e7:b7:31:fb:e1:d9:a6:aa:
9c:01:b8:1a:42:57:49:eb:1a:54:70:36:0d:bd:a9:84:1c:fb:
81:a4:b9:85:12:76:a9:35:45:9c:84:69:99:96:67:d0:e9:aa:
b7:99:e2:40:17:b9:1f:04:93:e0:2c:f8:a8:55:35:75:38:a2:
68:a2:69:aa:45:7f:25:27:50:d1:a4:e8:5d:cb:b6:20:8f:17:
14:39:49:91:0b:f6:13:52:af:43:0c:57:7c:59:01:c7:6e:46:
f0:78:fc:cc:ac:00:e1:e9:5e:5c:9f:65:97:eb:4c:b7:6e:3d:
18:b5:43:2a:25:c0:93:a1:5a:d4:b5:9d:a6:00:94:e1:dd:4f:
8b:5b:21:63:34:f3:f1:23:1d:cc:7e:7d:47:9b:38:2e:ec:0f:
00:8e:1c:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy
NjdFQkFFRUMwHhcNMjYwNTEyMjExNDAxWhcNMjYwNTE5MjExNDAxWjAYMRYwFAYD
VQQDEw02YTAzOTgxYS04NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVJ/V9IeX51nK8sqB2hzeTXDJvgiyV3HI9noLtkiVKvh3ySCbF8GwS5UZt2D
UWIw74/Cmc4qP5PM69ChHkAalNpQyMzMrXkYpPMTMMiqqnjxZC/5yoYKe2mTDYld
2pq+D4rg1z7wXF7HWniFtZlv5PVfQWSIcnhfFbX0Mq+PMfHn2ncodKQo02XXyUt+
A/9P0pl1F7be5hTsRcbSa2Qla0xVRaZZquK0oyaXxlx6YvxdDjPiC2BSZlZOpku+
8TxBAw9xXEwiXRsOnpHntYblYHzsl4Ov08EwAXLrV468tTKrLJpVE2ZPJe64aBpm
/GO0zaFw3an2pSj/caeW9UNWSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuM2v/O
CLaGLmmIn87n08mQasdmMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz
M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy
b0Rra1lXalRKNHNtZnJydXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkoXrBF+EWlgqL3f9aYj/IgEf/GVxrBiJVfoWPJv8p+VzAbts3UBhwqHeoykD
zXM2zrPHdlr6U7QWswUR+ahJnJ+DBiLWdP/B7/VNY0xHlH6arNlgAiKEunsKeWvQ
o9yS6U5B5ee3Mfvh2aaqnAG4GkJXSesaVHA2Db2phBz7gaS5hRJ2qTVFnIRpmZZn
0Omqt5niQBe5HwST4Cz4qFU1dTiiaKJpqkV/JSdQ0aToXcu2II8XFDlJkQv2E1Kv
QwxXfFkBx25G8Hj8zKwA4eleXJ9ll+tMt249GLVDKiXAk6Fa1LWdpgCU4d1Pi1sh
YzTz8SMdzH59R5s4LuwPAI4crA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:55 2026 by rpki-client