
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier: MZzKVR+39biv79YPEEvTXSQ/FOP9tbI+gk0OH86dzqM=
Subject key identifier: 7C:9B:28:FF:52:DD:37:DA:83:94:B9:C9:01:B7:75:AE:C1:19:EC:E2
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial: 036F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number: 036F
Signing time: Fri 25 Sep 2026 00:37:57 +0000
Manifest this update: Fri 25 Sep 2026 00:37:57 +0000
Manifest next update: Fri 02 Oct 2026 00:37:57 +0000
Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: T7JcHcGz032fLpu+inw9ZRGR87MXELQtfg8QxxGC7Us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879 (0x36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Validity
Not Before: Sep 25 00:37:57 2026 GMT
Not After : Oct 2 00:37:57 2026 GMT
Subject: CN=6ab5c265-be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:1a:cc:1b:10:8e:37:96:88:56:60:2d:a6:
28:87:3b:0c:1f:bc:ae:64:cd:90:6c:e6:07:70:7d:
f2:8c:bc:4b:10:26:a5:12:74:d8:7c:89:dd:a0:0e:
b6:8b:d8:40:7e:84:86:96:c8:19:50:3e:96:8c:2e:
51:07:ad:fa:e7:6f:e7:40:4e:05:cf:5b:0b:9d:13:
33:4f:05:4c:68:03:7d:57:68:12:64:d8:e1:ba:a9:
bf:17:8d:8d:4c:94:ea:d4:39:45:51:a6:87:a5:43:
87:d2:4b:fb:5d:f6:79:4e:1e:0a:fb:9b:e2:9f:7c:
33:c6:35:7d:a3:2b:c0:4d:b0:6a:60:ad:be:95:b7:
b0:bc:85:e2:3e:41:b0:d9:fe:5d:6a:82:2f:ef:4a:
fa:34:80:f7:56:90:d4:6e:6f:de:aa:ba:1d:44:69:
97:68:fd:e1:90:d5:2b:e6:ef:22:05:49:b2:df:13:
9b:3e:5d:0e:57:01:dd:35:bb:d8:22:ef:9a:23:3d:
56:bf:d8:9a:7c:1b:c1:80:2c:c5:f2:67:2b:75:71:
22:f5:29:41:86:9d:f4:97:79:09:67:1e:06:f9:7f:
77:e4:18:74:67:e8:07:ba:5c:c3:fa:21:c9:be:c8:
aa:eb:1f:a9:21:ad:e2:39:8e:c3:22:1b:2b:85:6a:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9B:28:FF:52:DD:37:DA:83:94:B9:C9:01:B7:75:AE:C1:19:EC:E2
X509v3 Authority Key Identifier:
keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:bd:08:63:3e:3c:d4:ef:df:7f:a7:ec:a2:52:40:e9:65:
c3:7a:8f:d0:4c:cf:f5:e7:40:8c:14:56:85:a7:8e:25:c5:6b:
31:d5:62:a6:ef:86:21:8d:58:67:49:ac:96:4d:9a:68:2d:8d:
e5:00:10:f0:6c:9b:96:b2:7b:9f:6b:88:e0:b8:08:24:c4:9c:
c1:d5:9d:33:bb:29:1e:9b:69:20:28:7d:30:64:3a:99:2e:07:
89:7c:4c:b3:eb:cc:5b:ba:fa:72:10:49:7b:6e:8b:a5:4e:3f:
18:80:0d:c8:9c:f3:24:7d:96:0f:9a:5a:c9:9e:09:42:c2:b3:
4f:9a:3f:8e:26:3a:69:12:11:62:58:c1:4c:5b:2f:d0:79:a0:
10:f4:9f:de:4a:1f:38:b4:ee:a9:7f:69:42:c0:4f:d0:24:c2:
32:fa:3c:ea:f2:be:a4:93:4b:0a:fd:72:d4:d6:95:ab:5c:a3:
9c:fc:d2:73:ef:cc:b0:51:b7:1d:6b:b0:89:3d:04:6a:f0:a2:
2c:74:0f:d1:16:79:89:22:ec:03:9f:29:24:13:38:c6:b5:17:
12:95:5f:35:50:27:43:2e:30:de:c2:7d:69:fe:60:bb:67:65:
23:22:7e:ba:66:f8:85:ec:1d:d0:56:9a:ea:d1:fa:a3:3b:50:
e2:98:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:24:34 2026 by rpki-client