
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier: wHpv6fA7DPJ/ktobHK1Z6Uy+Afq392XfJi8H08dDnd0=
Subject key identifier: 2A:39:3F:3F:16:69:93:16:FF:F5:AE:A8:D9:75:E0:3A:84:9A:0B:E7
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number: 01FB
Signing time: Wed 23 Sep 2026 03:04:15 +0000
Manifest this update: Wed 23 Sep 2026 03:04:15 +0000
Manifest next update: Wed 30 Sep 2026 03:04:15 +0000
Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: vOp40EHrGR/r4x+MVCMAQ9kGWnDBLiaIfYvkC+5XhVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Validity
Not Before: Sep 23 03:04:15 2026 GMT
Not After : Sep 30 03:04:15 2026 GMT
Subject: CN=6ab341af-0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:6a:bc:44:5c:48:ea:28:c9:cb:63:73:fe:
19:55:6e:44:48:2a:58:3d:f7:06:57:ff:2c:d6:c8:
05:5d:65:e6:a2:19:53:55:14:52:31:9f:e3:72:bd:
c0:57:38:97:9a:0f:46:51:8d:ef:f4:35:46:1e:f2:
42:dc:9b:7a:85:91:9b:26:84:c9:c8:80:62:12:d1:
4d:24:c7:63:c4:eb:f7:12:0a:01:11:82:7b:f4:8f:
a4:27:c3:d0:a6:4a:eb:02:1d:35:b1:6b:af:3b:cc:
cc:70:47:06:8d:3d:6e:d7:6a:b2:ea:f2:a8:b0:9d:
72:bf:e3:d4:de:48:b9:c8:d4:ed:be:13:78:2e:34:
e4:bb:2b:66:fa:bb:bb:4e:5f:13:46:40:c7:54:a9:
90:c0:5a:ec:e1:d2:de:28:c5:1a:10:b1:14:a5:02:
22:2e:c9:4a:19:5b:7e:b5:24:59:0c:60:09:1f:27:
1c:75:e3:ba:62:e9:d0:7a:5c:d3:a2:73:fc:0a:6e:
1c:01:ba:5c:df:f4:71:e3:08:84:9e:a2:01:84:4c:
39:6b:21:8c:d8:b3:90:1c:0d:94:c4:76:9d:c1:84:
be:82:2b:fe:42:c3:cf:1f:53:cb:0e:72:f5:2c:a2:
ad:30:84:41:a7:7b:f0:e1:82:47:bd:bc:9b:54:c4:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:39:3F:3F:16:69:93:16:FF:F5:AE:A8:D9:75:E0:3A:84:9A:0B:E7
X509v3 Authority Key Identifier:
keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:be:40:29:68:7a:03:cd:f0:6c:67:d8:ce:36:5c:c6:6a:c3:
f2:02:c9:bf:f8:2a:db:93:4c:a8:41:5f:b0:1d:e3:a0:03:d9:
29:88:35:4a:b2:35:e1:fc:af:3b:a5:23:4e:9a:a9:ab:8b:77:
dd:39:ef:17:4f:88:0a:aa:a2:65:3b:3a:79:bd:58:89:07:6e:
74:c0:c5:16:44:53:3a:93:d6:ad:81:31:e9:af:ae:ad:b1:c4:
5f:b3:0f:cf:7e:bf:68:d4:10:45:51:80:d8:fe:69:8b:73:f9:
3b:20:a2:9c:ad:bb:c0:e4:0b:e3:5d:de:50:6b:c8:5e:41:70:
88:4f:c5:7f:ae:44:4f:c1:d2:8a:d0:47:cc:9d:75:f2:6d:b2:
23:b5:93:eb:73:bd:68:f2:9b:cf:5f:3a:83:25:55:af:d0:1d:
c4:52:bb:6a:3d:ec:af:77:2b:47:0a:1b:5f:f3:aa:43:6d:6b:
cf:e5:7f:67:a6:c3:46:9f:00:b7:01:d7:f9:44:72:c9:f7:09:
cf:9f:5c:2c:32:e0:b3:7a:15:66:03:64:f8:e0:35:35:d8:57:
e0:f9:b3:bb:58:cf:fa:35:21:bf:93:0f:f6:fb:73:09:39:d3:
18:3f:84:50:43:fb:56:60:cb:93:c8:6e:d0:1b:97:81:e7:22:
f1:b0:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:12 2026 by rpki-client