
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File: piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier: XAK8DzdywIseANQQE5dzZUdYJ8pzlo8zNf8gteuuCJE=
Subject key identifier: E5:10:E2:30:EE:03:06:0C:FC:11:EE:1E:8C:A4:4F:C2:4A:0B:D0:D3
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer: /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number: 01A8
Signing time: Wed 23 Sep 2026 04:57:50 +0000
Manifest this update: Wed 23 Sep 2026 04:57:49 +0000
Manifest next update: Wed 30 Sep 2026 04:57:49 +0000
Files and hashes: 1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: JSXdTGIPWNKSQzueWsEXwcLHaZGLFDEp/mKw+FPp+6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Validity
Not Before: Sep 23 04:57:49 2026 GMT
Not After : Sep 30 04:57:49 2026 GMT
Subject: CN=6ab35c4e-fb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:5b:69:cf:97:23:65:85:5c:bc:02:17:9a:
b0:fe:08:17:a5:8e:cf:eb:53:7a:7e:9e:cc:31:f8:
d2:ea:c9:ff:1f:7a:de:42:ff:43:b3:66:d2:49:50:
f8:31:44:1c:5b:3c:5d:4e:c8:51:f6:89:47:9b:b0:
a9:fc:ff:bd:8d:7c:aa:7a:53:47:9c:71:7f:80:b8:
c1:57:0b:af:fa:1e:f4:de:29:c7:db:cf:e9:45:94:
50:5a:f2:c1:3a:c5:b0:3c:2e:fd:e7:a3:18:51:61:
2d:9b:22:20:ca:58:5a:d4:b5:84:0d:dd:cf:da:a8:
9c:0f:ed:14:9b:de:58:6f:7e:a4:8e:1f:88:39:7f:
f2:80:80:9c:2f:25:6d:14:e5:c0:76:93:e0:28:f7:
d0:a2:0d:f7:c5:f6:57:7a:7c:af:c0:9a:e9:3a:bc:
9e:c5:36:69:73:93:80:79:4b:83:4d:9f:fe:7b:54:
ba:11:bf:e8:4f:1d:63:08:b2:10:91:c0:a3:d9:74:
6f:0c:7b:d0:a6:01:80:29:2e:19:39:fb:51:83:11:
01:e2:3a:99:be:61:bb:78:6f:b1:7e:01:8a:60:b1:
41:9f:10:89:d3:5d:11:4c:a5:e9:75:1a:3e:1c:bd:
53:f7:67:96:c3:27:d6:8e:38:00:65:b6:6f:0c:70:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:10:E2:30:EE:03:06:0C:FC:11:EE:1E:8C:A4:4F:C2:4A:0B:D0:D3
X509v3 Authority Key Identifier:
keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:0d:cf:35:3c:12:c8:8e:f8:6c:1f:1f:59:cc:93:15:be:
25:9a:c6:07:a3:b4:81:a9:57:8f:71:ed:0e:11:44:78:d5:1e:
b4:a4:8e:c7:4a:77:7e:f7:85:2b:fb:80:9e:a1:e2:a3:e7:96:
42:3a:0c:9e:5b:ae:40:02:ac:8d:2f:1e:38:9d:6d:0b:6e:5b:
31:df:7d:9d:f1:9f:49:4d:e0:c5:5f:6c:69:7d:7a:be:02:aa:
2f:53:4b:6e:38:48:f4:69:90:18:3c:8d:1f:45:2a:ab:1e:14:
3f:88:56:6d:ef:33:20:00:79:3c:cc:d2:5b:a7:94:f3:b1:d0:
fb:68:e6:50:30:82:69:b2:98:a8:54:97:a4:e1:ca:3f:82:d0:
f6:1e:b8:27:c9:54:75:ee:35:54:e2:0a:1c:9a:ba:fb:eb:95:
f4:36:22:e6:3d:00:d4:44:a2:3a:e0:29:55:26:fd:f8:7a:08:
64:68:36:ba:1d:5c:eb:44:b6:d4:93:e5:05:f3:d4:df:77:e8:
d3:ec:06:a3:fa:85:ad:07:41:e7:e6:ba:45:20:75:f8:cc:9c:
a4:b3:29:fe:cd:3e:0f:80:44:68:bb:5c:4d:16:8b:55:b3:82:
c2:6a:88:b6:8b:f5:d4:d8:c2:14:60:63:d0:ab:1f:bb:26:c5:
d7:8e:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:41:13 2026 by rpki-client