
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier: NB23Hau2XFoWs52fmt+z5Jr7LhV2LEKKMRltVUsnr1I=
Subject key identifier: D6:7C:2D:82:52:A2:03:5B:5B:74:A9:DA:CF:A4:F7:9E:8A:46:17:66
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial: 09A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number: 0990
Signing time: Mon 12 Oct 2026 20:09:13 +0000
Manifest this update: Mon 12 Oct 2026 20:09:12 +0000
Manifest next update: Mon 19 Oct 2026 20:09:12 +0000
Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 4a3n1U3S3CNdOGctIHnO6s5YOTmoh3bHgQrMRSv0CjM=)
2: D41A51DE20C311F197B90590083D8C67.roa (hash: dKPEHvEXlheUH6KmSU9/eB38o9t5KYQIp5NmXFvQZKk=)
3: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: q9LAdQP4pbK6C2KkR/sjb3Jr08te9azMTAwrksN5OUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Validity
Not Before: Oct 12 20:09:12 2026 GMT
Not After : Oct 19 20:09:12 2026 GMT
Subject: CN=6acd3e69-7eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:4a:65:9d:f6:ea:9c:1c:13:d7:27:f9:78:
ac:74:49:b6:85:e7:86:89:c9:3e:d1:fb:50:59:67:
57:0f:fb:bc:83:cd:ff:5d:0c:c5:85:40:7d:b3:14:
06:61:1b:58:f0:05:f2:c8:e1:c1:b3:fc:f3:e7:74:
c6:55:b6:8a:1c:34:8e:85:5c:17:0a:f8:0d:b6:7f:
c0:af:28:d7:f8:cf:cc:68:35:b1:a9:18:6a:77:8b:
58:a3:fa:bb:8c:85:19:8f:b0:e8:0c:d5:84:bf:ee:
c5:71:90:b7:ca:e0:ad:c4:5e:7e:f8:d9:55:dc:c7:
22:6d:09:9d:74:69:09:15:d5:03:e4:01:3d:23:c3:
13:91:62:4c:bc:66:e8:59:45:db:25:32:1e:00:72:
60:cf:6f:1d:dc:87:8e:7a:89:2f:33:d4:5a:b2:da:
e1:db:e0:87:c5:7a:2c:c5:7a:0f:c1:7f:36:69:f3:
94:9a:25:f2:ed:16:50:2e:11:d5:25:53:af:ec:3d:
56:76:8e:d9:0b:87:16:d1:45:ea:ab:55:1b:9c:40:
8b:38:51:ea:07:e3:e7:1c:c6:e2:7c:51:e7:33:9d:
30:66:ce:fa:e4:96:ad:c3:d6:2c:44:d4:47:c5:ea:
43:4b:47:7e:79:77:28:2c:9e:5d:90:a0:7a:70:89:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:2D:82:52:A2:03:5B:5B:74:A9:DA:CF:A4:F7:9E:8A:46:17:66
X509v3 Authority Key Identifier:
keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e0:0c:a7:cd:1f:8a:ca:d9:b7:f9:7b:87:19:62:2a:22:42:
08:12:47:e2:6f:f9:3b:8f:bd:36:9c:a5:41:9e:28:45:b2:23:
ac:1d:f6:27:c9:f0:e0:6f:00:e9:4d:e3:a9:c1:08:58:64:6e:
6b:d4:db:ae:83:f9:f9:eb:31:a4:b1:ba:59:36:cd:dc:cd:bb:
4d:5e:cd:2d:21:18:67:7f:40:c8:3d:26:24:5f:73:17:ca:b8:
01:c3:d4:c2:15:5e:8d:44:0e:e3:2a:9c:91:fb:f4:c4:69:20:
c6:f1:26:39:3a:53:ac:b0:42:e8:5f:12:f6:f0:20:9e:d6:17:
a2:70:2e:eb:0e:61:9e:97:a5:73:bf:b4:d2:ff:ae:e0:f2:30:
2e:8b:a7:f6:d8:4c:84:9c:4f:52:d4:21:ab:b8:09:51:10:85:
45:55:d6:8b:f4:0d:a8:b6:21:4c:68:e5:94:82:b9:1e:5f:0e:
14:8c:10:40:f2:a4:95:ca:c2:27:c7:89:a1:4e:8c:a6:33:a2:
47:c1:09:53:7e:68:15:d9:9f:39:e6:28:57:d1:62:41:d5:a7:
f5:3e:b9:b2:bb:a4:f0:e2:ce:6a:ee:4e:04:73:fb:3e:f2:f7:
77:55:25:d7:5e:1b:b6:4e:a5:38:14:89:6d:b5:34:48:e3:c8:
55:a8:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:04:13 2026 by rpki-client