
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier: 5gI47FpmKbd8m++5NcmcEpYPQe4VxkmuAG6YDc+Kskg=
Subject key identifier: 00:E9:38:FD:88:DD:F2:13:97:8F:F2:D6:5B:A0:E5:BE:A5:D8:26:CF
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number: 0280
Signing time: Sat 03 Oct 2026 02:32:48 +0000
Manifest this update: Sat 03 Oct 2026 02:32:47 +0000
Manifest next update: Sat 10 Oct 2026 02:32:47 +0000
Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: NRenRqEWYVPpjNUtJI+qLNeAH2ka4St7uM9fR/3hiH0=)
2: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
3: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Oct 3 02:32:47 2026 GMT
Not After : Oct 10 02:32:47 2026 GMT
Subject: CN=6ac06950-9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:f8:b7:18:53:e7:17:16:87:26:69:13:10:
a4:7c:27:38:8f:99:00:27:19:cf:79:cf:df:cd:9d:
ed:d1:f5:46:d0:4b:d1:be:a1:50:97:29:46:bd:83:
2f:3f:4a:3e:2c:64:2b:7e:b4:2e:65:df:4c:07:bc:
58:a6:f5:01:51:2b:f4:d3:25:8f:bf:47:0d:d3:73:
55:05:87:44:fb:a2:3b:88:db:39:3d:b1:5d:6f:3f:
4b:7e:e1:0d:0e:a7:69:b7:fd:fc:4d:ea:d9:73:f9:
75:4d:6e:4d:22:9f:2d:44:19:27:4e:e3:b1:02:33:
e5:cd:4e:e1:a2:dc:6d:98:cd:3e:88:15:a2:32:59:
36:7f:48:7e:0c:80:36:ca:1c:ce:36:88:89:f0:ef:
7c:e2:d4:50:e3:8d:3b:43:26:65:0c:cc:d0:e9:5e:
f0:e5:43:d7:73:ee:36:61:4d:75:f0:1e:74:56:cb:
dd:24:6a:45:81:f0:72:29:b4:ef:2b:c4:dd:c3:14:
e4:19:88:b2:c7:fa:21:1d:97:c5:9d:57:be:57:68:
2b:18:f9:c8:02:a4:b5:7b:db:7d:88:6f:27:4d:a0:
dc:b7:24:83:db:78:0b:5e:80:cf:08:ac:ab:15:a7:
ea:89:fa:25:37:48:19:7c:a1:0e:b9:6b:8d:83:37:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:38:FD:88:DD:F2:13:97:8F:F2:D6:5B:A0:E5:BE:A5:D8:26:CF
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:b3:b3:77:55:1b:85:d0:2d:fd:ec:58:68:1d:91:ef:c9:2b:
f7:df:e3:d2:bf:b5:11:27:8c:41:8a:c8:fe:35:b6:69:cd:79:
26:a3:ff:47:76:cb:10:ea:81:49:ab:bb:87:e9:ae:b8:b1:52:
dc:78:f5:6e:1c:97:70:1a:31:38:86:28:1d:ba:94:ea:84:71:
86:26:d4:1b:28:a6:b4:f5:5a:a9:bb:96:49:1e:c8:c4:d4:d8:
7b:d1:97:28:0b:13:d6:ec:cf:95:80:0d:d9:20:b0:0b:d3:0d:
dd:f9:77:65:6b:ee:0d:c4:f8:3a:c9:3f:8d:2a:15:1e:e7:a2:
35:61:f6:89:05:ed:dd:e8:e4:a4:d6:12:83:63:51:55:b9:6a:
07:0a:ba:d6:43:ea:e9:49:d6:a3:18:41:41:f4:68:62:57:77:
a3:71:6b:60:c8:38:82:6c:b5:46:23:49:23:30:2a:b5:fe:73:
03:11:90:a3:4e:75:7e:63:b8:62:f3:37:13:9a:49:77:01:ae:
da:c6:58:50:be:57:e7:dd:5d:65:2f:b1:98:1a:9b:cf:ef:99:
a2:8e:b3:ec:6a:fb:11:51:4a:d0:7c:2e:21:a9:93:28:d6:44:
a3:ce:bd:bb:04:82:05:a5:90:b1:fc:d1:38:74:2e:e5:27:95:
7e:c6:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:16:36 2026 by rpki-client