
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier: OlWHhgIn1oio+zIAn1V+jP9xb1QRD0bQyYA1BDbgyx0=
Subject key identifier: C3:48:91:A1:CD:9C:B4:94:8B:77:8F:1E:B5:98:15:4F:C9:82:CC:37
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number: 019E
Signing time: Sun 27 Sep 2026 04:47:25 +0000
Manifest this update: Sun 27 Sep 2026 04:47:24 +0000
Manifest next update: Sun 04 Oct 2026 04:47:24 +0000
Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: b/HLDvKEj+94YoPL+1OCLiR/88l1hstkO88VsAsIV4M=)
2: 4060F6BE9D5F11F1A878B9925711F970.roa (hash: 6JdJKyqGcCbzF91B6vaOPDwZJs8fEwXspV4UcWt3xhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Validity
Not Before: Sep 27 04:47:24 2026 GMT
Not After : Oct 4 04:47:24 2026 GMT
Subject: CN=6ab89fdd-6009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:b4:05:df:b3:be:37:48:39:03:6d:ce:a9:
d3:61:76:c3:10:65:27:71:4d:b8:3f:92:45:74:29:
f2:b6:3b:7f:bb:55:4c:a4:10:aa:b7:0b:02:c0:ac:
ed:7b:22:39:e6:20:8d:ad:58:33:76:7f:52:9f:c3:
43:47:f0:87:c7:da:cb:8e:ef:18:53:9a:60:e2:85:
7b:27:18:a9:67:7a:dc:dc:06:fb:83:e8:29:79:b8:
2d:80:56:a6:f0:59:fb:d5:07:60:fd:e2:82:b1:0f:
58:05:98:40:49:a6:13:24:9c:17:7a:18:ec:df:df:
28:9e:86:10:77:17:f3:48:55:f4:47:76:1b:4a:a8:
3d:79:d7:33:1b:95:10:e8:64:33:06:fb:37:94:25:
4a:53:b3:23:b3:10:06:6d:ef:d2:5f:56:0c:64:90:
6e:20:32:9c:07:ec:f6:c7:d5:c6:d7:c5:16:bb:9c:
b9:00:96:a1:12:a7:d0:60:02:6a:aa:71:50:8e:03:
8a:da:53:c9:28:f4:a6:07:63:81:4d:44:51:d7:26:
09:74:34:d0:4d:35:da:b3:7b:1d:6b:36:e9:9c:f0:
b5:2b:e8:3c:47:b0:d4:61:51:5e:8e:d0:64:e4:d0:
f9:2b:0d:04:c0:ee:3f:f1:b7:45:a2:30:60:16:d3:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:91:A1:CD:9C:B4:94:8B:77:8F:1E:B5:98:15:4F:C9:82:CC:37
X509v3 Authority Key Identifier:
keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:87:2c:e3:90:3f:70:0c:be:c6:80:97:05:d6:08:c2:07:b5:
06:6e:b6:2c:bc:0c:53:53:79:9b:21:5b:a2:ed:04:fa:5f:01:
87:85:81:1d:36:89:10:0b:81:6c:ef:44:49:8a:69:41:15:91:
ff:a8:01:66:b7:f6:e4:ba:f6:99:72:4e:06:c8:5d:af:81:e8:
2f:33:f9:e5:4d:6b:04:39:6a:ae:74:38:df:5b:04:57:cf:86:
87:e0:08:12:70:54:ff:d3:81:5a:16:35:fb:75:81:58:df:b0:
bf:eb:13:2a:a9:26:4d:e1:87:bd:42:d2:b4:62:b3:c6:74:13:
2c:ea:7d:75:3c:a4:e3:7f:a4:6d:24:7f:36:4c:c1:4a:0e:11:
87:b6:94:4f:fc:40:62:c1:8f:aa:cd:0c:b7:39:46:20:8c:e6:
e8:77:eb:eb:1f:3d:7b:11:00:c1:24:3f:1e:df:f0:90:9c:fa:
11:03:94:2b:6b:b9:6f:74:61:0b:a4:86:e3:fd:b6:04:55:9a:
7a:9b:b1:ca:5b:5b:7c:d1:93:57:27:21:87:11:ad:df:cc:7d:
83:a6:cc:3a:e1:47:8d:55:d1:49:de:99:91:24:9f:4d:17:fe:
d6:42:c5:73:f7:99:28:b1:b5:31:95:04:0c:6e:4c:84:4d:c5:
c2:8a:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:41 2026 by rpki-client