
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier: DCD9g972fzYsNS3JX1lORCsdQuuVFFuyysX00QEUK1I=
Subject key identifier: 58:BE:5F:B0:D9:73:9E:0C:73:F5:0D:3F:CC:FB:6E:9F:0A:12:84:F9
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial: 08B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number: 08AB
Signing time: Thu 24 Sep 2026 20:31:06 +0000
Manifest this update: Thu 24 Sep 2026 20:31:05 +0000
Manifest next update: Thu 01 Oct 2026 20:31:05 +0000
Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: 2kbf/cMz1s3oYO2B6yCP5nFGin2PtPkzodmyhmyYaFw=)
2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: XH4VYu53iAjrrjdTY4lzAuAVa7gNtCanU3skjDFNBQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Validity
Not Before: Sep 24 20:31:05 2026 GMT
Not After : Oct 1 20:31:05 2026 GMT
Subject: CN=6ab5888a-c6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:ea:4c:d4:66:15:0f:40:8e:2b:1e:e4:e6:
df:13:9e:22:5c:78:06:de:b8:ae:66:85:54:1a:0b:
e1:4d:53:01:1e:cf:8c:9e:7c:6c:9f:bd:4a:77:cd:
0a:ad:96:07:71:7c:5f:11:52:3a:6d:c5:e0:44:97:
a5:cc:6a:02:9b:57:f4:94:98:2a:b4:05:c2:5b:df:
82:89:18:5c:58:f5:88:c5:87:e4:2c:8b:56:19:f3:
78:7a:af:22:9a:f2:e6:70:b9:a7:0b:48:d6:4a:c8:
1f:5d:96:79:15:0b:87:44:97:bc:c8:1e:a6:2b:4f:
d9:a2:bf:09:55:5a:66:20:45:8d:9f:c3:b8:38:52:
91:a5:6f:98:00:a8:8b:8c:01:29:a8:c7:2e:b0:4a:
81:01:07:bb:89:43:e5:e8:95:75:31:57:0b:05:f4:
73:04:97:4c:42:27:e6:4a:e7:90:55:57:88:ed:11:
97:ca:fc:75:df:c1:a2:0d:19:cb:13:fc:79:a5:0c:
a8:f9:ff:cb:28:d0:29:ff:ff:64:8a:d4:72:45:bc:
a8:5f:2f:cf:e9:73:03:88:b5:f7:4d:93:79:ad:e8:
88:b4:61:24:ac:56:17:61:46:7c:0b:a8:a2:bc:5e:
1e:c5:39:7f:8e:eb:4e:dc:07:86:23:5e:10:5f:77:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:5F:B0:D9:73:9E:0C:73:F5:0D:3F:CC:FB:6E:9F:0A:12:84:F9
X509v3 Authority Key Identifier:
keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cf:fb:29:f9:b9:ee:c0:9f:de:82:aa:54:77:08:b8:ea:29:
d6:05:1b:1d:9d:f8:59:e7:5f:36:89:37:e8:67:29:e9:b9:23:
d0:23:ea:95:b9:29:47:0f:d5:7a:48:23:b5:86:ca:30:20:e6:
03:14:4c:8c:8a:6e:14:61:06:32:5a:0f:fc:99:ab:7f:3f:f0:
81:2d:0f:e0:92:29:a8:7f:68:86:c3:fb:e9:a6:69:59:f1:a2:
f3:4e:48:4d:df:14:68:ff:f2:d5:ef:0e:a4:c8:65:47:d2:a0:
92:bd:6a:3c:14:a4:6e:45:72:7c:c7:62:a5:4c:05:57:23:5a:
46:3a:07:c2:7a:dd:3d:50:c9:15:e5:8a:9d:0b:91:9c:1b:99:
65:00:b1:20:72:e2:1c:1f:a3:ba:6a:31:2d:59:d7:05:00:ee:
d8:97:d1:9b:e5:1f:6b:6b:e4:16:65:c3:93:2e:c1:23:91:85:
f6:c4:30:82:91:26:af:09:de:34:ff:69:6a:ed:ac:36:5d:73:
8c:de:47:44:cf:01:3c:f9:f8:0c:6e:bd:6e:7b:ae:97:91:a0:
15:cc:3a:5d:7e:85:15:33:28:a6:66:3c:3f:49:87:41:f4:80:
13:2a:10:84:40:dd:3b:83:36:7c:62:c3:45:0b:e0:6f:19:23:
33:c3:4b:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE
NkNERDVBRUUwHhcNMjYwOTI0MjAzMTA1WhcNMjYxMDAxMjAzMTA1WjAYMRYwFAYD
VQQDEw02YWI1ODg4YS1jNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdXqTNRmFQ9Ajise5ObfE54iXHgG3riuZoVUGgvhTVMBHs+Mnnxsn71Kd80K
rZYHcXxfEVI6bcXgRJelzGoCm1f0lJgqtAXCW9+CiRhcWPWIxYfkLItWGfN4eq8i
mvLmcLmnC0jWSsgfXZZ5FQuHRJe8yB6mK0/Zor8JVVpmIEWNn8O4OFKRpW+YAKiL
jAEpqMcusEqBAQe7iUPl6JV1MVcLBfRzBJdMQifmSueQVVeI7RGXyvx138GiDRnL
E/x5pQyo+f/LKNAp//9kitRyRbyoXy/P6XMDiLX3TZN5reiItGEkrFYXYUZ8C6ii
vF4exTl/jutO3AeGI14QX3eLmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFi+X7DZ
c54Mc/UNP8z7bp8KEoT5MB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG
ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3
MjlQbFgwd3J6eWpXemRXdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqc/7Kfm57sCf3oKqVHcIuOop1gUbHZ34WedfNok36Gcp6bkj0CPqlbkpRw/V
ekgjtYbKMCDmAxRMjIpuFGEGMloP/Jmrfz/wgS0P4JIpqH9ohsP76aZpWfGi805I
Td8UaP/y1e8OpMhlR9Kgkr1qPBSkbkVyfMdipUwFVyNaRjoHwnrdPVDJFeWKnQuR
nBuZZQCxIHLiHB+jumoxLVnXBQDu2JfRm+Ufa2vkFmXDky7BI5GF9sQwgpEmrwne
NP9pau2sNl1zjN5HRM8BPPn4DG69bnuul5GgFcw6XX6FFTMopmY8P0mHQfSAEyoQ
hEDdO4M2fGLDRQvgbxkjM8NLqQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:58:43 2026 by rpki-client