
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier: L0TAIibI7xYsHRjXkrw3Md2jaQVBYtpL/jpNiIKjXOs=
Subject key identifier: BD:15:9E:0C:45:36:C3:EE:C8:4D:32:71:C2:B9:42:8C:CD:BB:15:AF
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number: 0512
Signing time: Tue 24 Mar 2026 23:18:29 +0000
Manifest this update: Tue 24 Mar 2026 23:18:28 +0000
Manifest next update: Tue 31 Mar 2026 23:18:28 +0000
Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: CyznFgqUTr20iNaVvTVQoLZuFLpVX2fjtis97fR3veA=)
2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: uq3qtCkijF1dNlFAZoloAGHiYFpS21Zc+zHvHpeXG3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Validity
Not Before: Mar 24 23:18:28 2026 GMT
Not After : Mar 31 23:18:28 2026 GMT
Subject: CN=69c31bc5-d23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:59:43:cc:26:72:8e:88:62:3f:83:04:67:
41:c9:e6:39:49:5c:dd:1c:8d:12:9f:51:9d:e9:9f:
9b:22:69:44:79:e8:95:56:32:e0:e6:54:86:35:ff:
84:15:38:dd:27:56:df:ec:b3:a1:52:47:d6:5c:fe:
d9:fc:59:0d:41:cc:97:6d:89:cd:bd:be:a8:df:38:
a0:60:e1:34:8c:eb:81:28:8e:df:8a:9c:c6:7a:c7:
2f:b9:94:a2:cb:68:3c:2e:6f:d6:19:c3:7e:27:3d:
7b:8c:4f:0f:9a:62:c3:89:de:c0:f6:19:f0:c7:04:
c0:26:29:2e:26:70:2c:04:22:98:62:a7:f5:e6:68:
6b:66:45:33:ed:72:f3:b0:c2:de:96:f2:8b:58:84:
46:0e:00:19:d1:dd:82:27:41:5c:d2:28:87:9a:ba:
30:c4:ba:bb:6c:b4:fa:e9:d5:99:40:b8:28:89:e3:
24:f8:72:6a:73:d0:70:f5:91:b1:dd:f5:1d:f8:8e:
6c:31:f0:9d:94:69:9e:e2:79:fd:f2:5b:c3:90:24:
d4:97:ce:26:07:e1:45:bd:20:95:1b:31:57:2d:39:
db:7c:c6:15:7a:b3:1f:d1:95:2c:f5:29:7c:79:81:
88:51:33:e8:74:96:db:92:2c:e5:a9:7d:b1:e3:dc:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:9E:0C:45:36:C3:EE:C8:4D:32:71:C2:B9:42:8C:CD:BB:15:AF
X509v3 Authority Key Identifier:
keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:87:19:12:ed:de:24:2d:f5:fd:bb:40:b4:c4:3d:a5:f1:
c8:88:e2:95:c4:b5:d3:51:83:7b:d7:a1:bb:fa:61:fd:67:73:
14:a0:64:58:be:d0:97:e2:14:9b:16:b0:f5:01:1c:33:2c:7d:
45:96:a6:0f:0b:30:75:e4:cd:b7:9d:c9:27:f3:36:b5:e2:35:
25:96:fe:6d:6f:f1:ee:d1:23:f7:7a:f0:c1:b7:67:84:2c:3c:
16:a8:f3:c9:df:e2:cd:76:02:65:8a:a3:62:f8:7e:d5:86:8d:
4c:d9:80:7a:1c:77:8c:79:4e:1c:a6:eb:50:68:20:ef:b8:98:
d7:09:84:1e:8b:b3:28:6f:3b:23:81:fe:c1:c0:8e:b0:5d:c9:
71:af:a3:5b:f6:c9:6b:f2:f4:2d:f7:70:03:04:50:28:0a:52:
41:8b:9c:72:66:cf:e3:62:ac:d3:03:27:c8:60:19:b5:f0:d0:
b6:6e:a2:ae:24:ab:07:31:7d:55:ec:1e:df:21:aa:1e:cf:82:
74:39:c0:31:01:bd:8d:f1:fe:d0:ff:9f:8b:69:cb:0b:df:dd:
0b:90:95:45:91:44:0e:74:5f:d3:3a:13:b1:6d:3a:bb:ce:78:
01:72:c7:d3:78:cb:32:95:2a:5a:18:7b:b7:12:7e:47:22:20:
7a:a3:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:14 2026 by rpki-client