
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier: 8G529p0aART5PaVCRzqG/XgJIxycS6ywUftW8GPFnx8=
Subject key identifier: 99:0A:3C:7C:81:02:E1:D9:78:91:CF:B3:88:50:B0:BC:86:2A:4F:6B
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial: 2D07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number: 2CDF
Signing time: Thu 24 Sep 2026 15:29:06 +0000
Manifest this update: Thu 24 Sep 2026 15:29:05 +0000
Manifest next update: Thu 01 Oct 2026 15:29:05 +0000
Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: BVjM6BSW+nJ5SWZCYLsNGTNWqB07u9pPnrUwIhcpgAE=)
2: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: m42CkLhr+GKHo0TtapwYGoLo4QIiXG0fyh2xqAw/LvU=)
3: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: SANw9dLH9bXdcBVHXUebGfCRir+vdFPmPdYxlp8aviU=)
4: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: YAU3ILtOw6FXLUFev8JWBOKxyiChialBJy1oqxPurUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11527 (0x2d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Validity
Not Before: Sep 24 15:29:05 2026 GMT
Not After : Oct 1 15:29:05 2026 GMT
Subject: CN=6ab541c2-9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:0f:02:77:6d:dd:ce:5d:ab:c5:dc:42:2e:
41:9e:e1:eb:66:83:b0:f2:6c:74:a7:ba:a1:78:2a:
49:36:a9:ef:5e:7f:99:e0:17:5e:06:0c:ac:52:e7:
3e:c1:a6:1d:03:b2:bb:83:85:9a:4e:2d:b7:66:58:
54:44:9d:41:45:5e:26:00:d6:ba:68:61:f9:62:91:
38:cd:2c:d8:33:58:4d:45:51:47:a8:ed:8d:aa:fd:
99:35:82:0f:63:96:d9:7b:b1:f3:1f:b6:a8:a8:9f:
81:11:3b:a0:b1:2a:5c:06:3d:86:51:36:93:12:93:
7c:80:7b:47:ba:f2:37:3f:a2:ea:1c:0d:c5:39:e5:
dc:6e:f5:ac:9b:90:01:06:b6:15:d1:96:a6:b9:b7:
b5:db:e3:40:91:32:8a:f9:0d:3c:21:91:84:5b:e3:
30:21:f4:f8:cf:dc:14:c3:84:a4:74:1b:f9:4b:8e:
b1:9e:76:4f:47:08:f4:8f:f8:43:42:0d:15:da:76:
f5:75:b9:96:c8:2a:9d:04:49:cb:a7:82:4a:64:36:
2c:a9:87:7f:bd:84:52:05:0e:fa:d3:57:2a:5e:f1:
10:85:e2:bc:e2:1f:73:7a:15:09:b4:7f:38:14:e0:
fc:b4:86:07:24:66:7b:49:36:1f:e7:40:df:85:8b:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:3C:7C:81:02:E1:D9:78:91:CF:B3:88:50:B0:BC:86:2A:4F:6B
X509v3 Authority Key Identifier:
keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:39:b9:d0:6a:e6:a0:ba:db:d4:98:d8:c1:ee:be:b6:c6:
be:a9:a9:15:b8:46:6f:c7:b1:19:d4:76:d9:88:92:b7:4e:8a:
8b:04:7d:ad:f0:4b:13:98:9c:56:66:53:37:96:68:24:64:52:
e4:c6:d8:10:e1:e6:56:82:fa:8b:70:20:61:f3:b7:a2:0f:f7:
53:24:07:2b:e9:e6:6d:f2:83:de:89:ff:41:b0:7a:4f:03:8f:
57:41:f4:0e:f6:63:ce:8c:1a:6b:d7:e7:c8:34:f3:45:df:a9:
e1:45:ce:d9:de:40:34:cc:3c:53:e0:88:33:79:e3:a4:22:35:
99:17:96:7e:80:d0:e8:94:08:2a:42:6a:c4:d5:ca:2b:a4:33:
6f:ea:2f:a0:f4:6d:be:c8:47:27:18:76:d3:a5:fd:bd:ec:8d:
b2:82:07:e5:cc:83:09:f0:95:1c:41:c5:f3:49:b7:86:6f:7d:
17:1c:9c:61:91:45:da:a3:f8:6b:c4:e4:92:8f:d4:fd:1a:fe:
18:1a:f0:36:3b:39:ac:c8:2d:75:48:58:4b:0c:c2:c8:0e:8e:
ba:d6:76:4e:0c:86:73:39:57:27:da:a5:bb:a5:08:16:91:52:
94:b4:d6:56:13:94:cb:04:0a:41:39:85:37:41:40:c8:a7:41:
13:b6:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:35:26 2026 by rpki-client