
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier: 1ID+pGIBmPvyX1XxSduMZDFtjk1BYcyPaWilzTPE2Wc=
Subject key identifier: 56:AC:EE:5B:C9:BF:47:3D:6B:EF:12:F5:21:77:17:62:A9:EF:00:24
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number: 03A2
Signing time: Tue 29 Sep 2026 00:52:24 +0000
Manifest this update: Tue 29 Sep 2026 00:52:23 +0000
Manifest next update: Tue 06 Oct 2026 00:52:23 +0000
Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: MXjJLyjzenPj5nRvu9mRzo/jf1fHrgFBo20emezFkyw=)
2: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: mf0wGIWAXtcqp5A/STrLzJZxEHdPx6LC7pC19PfOQBM=)
3: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 2nCCBmzmG2InvvOtDCmpe4jEwoKwgbej2xels7IW/q4=)
4: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=)
5: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: Hqy1LRVKHy8Ftub7eFKosjYqL2kysNH4BmXhj25dFeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 00:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Sep 29 00:52:23 2026 GMT
Not After : Oct 6 00:52:23 2026 GMT
Subject: CN=6abb0bc8-93b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:22:b4:c9:f5:9b:08:77:67:6f:18:3e:fd:
ed:5c:70:48:46:d6:95:a4:fe:76:cd:9c:8f:b5:14:
d4:ee:66:86:6b:3d:c6:ad:f2:0b:19:47:40:2e:19:
4d:6f:fc:10:7f:35:64:69:61:c8:fc:3a:3c:39:0c:
c7:78:e7:07:34:de:30:4e:49:9c:bf:a1:0c:cc:90:
1c:38:97:39:77:44:2f:c4:58:23:84:33:ba:61:a4:
6c:09:1a:7c:ea:cd:68:6c:94:52:c0:c1:04:02:5d:
91:10:ba:9a:59:22:05:30:74:e6:ae:27:1a:05:fc:
d7:5c:38:e7:8b:23:32:79:c6:e2:3d:45:2a:0f:06:
f6:5f:4d:c3:09:4a:2a:6b:7a:fc:20:0d:87:15:4f:
a7:72:5b:97:0e:67:cb:7e:89:b9:ed:14:8c:f5:79:
87:d6:81:19:42:9d:78:c6:c6:d1:e7:3b:09:68:ef:
b7:ff:a9:c9:5a:3d:d5:c6:70:f3:ba:0d:50:b8:25:
06:fa:c0:19:27:3b:d7:11:17:5d:87:99:cf:ad:ab:
53:36:f0:ee:e0:47:df:d0:26:9c:6d:9f:21:49:b0:
ac:a4:74:62:21:7a:8d:40:dc:84:41:51:b0:98:cb:
e3:ec:d5:4f:aa:69:f6:83:88:29:81:a3:28:1b:d5:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:EE:5B:C9:BF:47:3D:6B:EF:12:F5:21:77:17:62:A9:EF:00:24
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:d2:01:88:b9:fc:5f:76:71:f5:9c:82:9d:32:0c:43:71:
a9:fd:c6:7b:f9:78:4b:fc:68:60:12:c6:5b:5d:24:e0:4a:7b:
a4:45:bd:72:c3:18:8a:d7:d5:70:ae:52:2d:52:0b:91:5f:7d:
68:ee:dc:74:42:6d:80:46:56:5a:fa:4b:46:cc:ce:06:c3:fd:
e9:8d:c1:0e:95:96:b0:26:9f:8b:51:ad:23:24:e8:92:fa:e0:
90:be:ad:99:4a:29:2f:bb:96:f7:0d:ea:e6:a7:81:14:e0:64:
f3:95:bf:10:99:7c:7d:60:e6:95:a4:4e:ac:8d:2b:e7:d5:9b:
40:83:b5:c7:f3:f5:c9:91:08:5f:62:47:26:0b:bc:7b:4e:cc:
37:98:75:66:81:f3:1e:97:97:0c:8d:d9:9b:e1:1e:7b:3b:d2:
03:dc:85:c5:3c:b9:e7:3c:c2:11:3d:88:21:f3:51:37:91:6f:
6c:21:e9:78:8d:21:ff:8b:83:c6:db:32:7b:7f:7e:0c:ac:82:
d0:fd:55:0b:20:2f:79:fe:f5:f4:af:6e:1d:d2:fa:37:8b:49:
91:9c:ac:04:66:62:2c:c0:cf:f1:50:c8:61:c1:b1:d9:3b:9f:
35:25:32:5d:01:24:f5:e4:c9:04:8c:ed:69:57:bf:41:e1:32:
e5:44:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:15:00 2026 by rpki-client