
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: IUjM0MRMBgr7TTWpx8ataXdaMdLQD8EH4hY0fo6iFFo=
Subject key identifier: C6:A7:8D:28:81:E3:5A:29:00:A6:A4:6F:6A:A1:12:DC:46:0D:07:55
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0862
Signing time: Tue 22 Sep 2026 20:42:33 +0000
Manifest this update: Tue 22 Sep 2026 20:42:33 +0000
Manifest next update: Tue 29 Sep 2026 20:42:33 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: +IqH8cVEEvnBvN/11jeSAChQ7ZyoRg1pejuheJeljuI=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Sep 22 20:42:33 2026 GMT
Not After : Sep 29 20:42:33 2026 GMT
Subject: CN=6ab2e839-a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:8f:79:4a:78:99:ba:a0:01:be:51:4a:09:
6b:db:1b:3e:21:94:88:5a:43:d7:2e:79:98:85:05:
ce:89:a3:81:5e:ca:b2:16:11:89:48:ce:11:2e:22:
5e:b2:26:34:6c:63:d6:73:e4:43:14:cd:c7:42:1f:
3c:7c:ed:00:1e:d9:f9:4b:be:48:c7:c3:8c:23:28:
66:62:e3:63:73:f4:29:ae:6f:43:e1:c9:bf:59:c7:
85:61:48:6a:7c:ce:b3:72:a1:e8:41:24:b3:d0:08:
b2:35:3c:5d:cf:dd:0d:47:19:6f:bf:6e:00:f3:10:
ab:0a:e9:6a:08:1c:81:64:8a:78:e0:42:5a:c5:cc:
17:bf:31:b0:d6:40:c7:ae:d0:f3:5b:f0:95:28:35:
05:7d:c8:ab:45:cc:d2:4e:2a:fe:b4:26:b1:00:10:
7f:76:00:bd:df:bd:9b:ce:23:08:37:6b:e0:2d:6b:
a1:96:11:3e:29:d3:d4:bc:42:c7:87:21:1b:6b:0d:
a9:6c:05:0b:22:ce:41:bd:72:76:fd:82:d6:07:7a:
f8:e0:4c:f4:a4:38:42:b8:a0:cb:d1:43:bb:8d:a4:
1b:aa:25:76:ee:e5:b6:a4:e2:88:9b:15:df:34:95:
ec:2f:f7:90:88:f3:dd:5c:79:51:18:94:54:41:7a:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A7:8D:28:81:E3:5A:29:00:A6:A4:6F:6A:A1:12:DC:46:0D:07:55
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:e4:21:06:a8:ec:4c:c9:d8:24:d4:cf:a5:4e:47:36:66:
fd:6c:6c:07:86:66:ed:42:8a:87:49:39:20:d4:86:ae:a4:45:
52:37:c7:2e:96:4c:d1:b2:f8:e4:06:6e:c7:77:ab:d0:0d:3c:
f5:cd:10:a0:00:27:f9:b9:b5:84:81:81:ba:57:0e:d8:52:df:
82:48:0c:e5:ac:8d:82:82:9b:6a:38:34:5a:3f:85:27:34:76:
11:cb:fa:9f:40:b8:c9:a5:6f:63:70:41:be:3c:fb:32:dd:9e:
9d:d3:7a:e2:1a:ec:a6:cc:58:1a:0b:35:cb:10:95:a2:05:59:
a7:43:e8:30:77:55:a6:5f:9e:72:21:d0:5d:fe:e0:30:56:ea:
ac:17:6e:4c:f8:65:d8:fc:e8:a4:b8:b5:54:de:b9:a9:7b:b1:
ae:e7:1d:d2:37:a9:40:2a:ee:52:7f:ee:d0:60:14:1c:20:8e:
a9:44:93:cd:0a:ed:0e:1c:c4:77:1c:a1:9b:17:3d:2d:24:20:
eb:db:64:14:7f:70:02:81:5f:31:a0:f8:78:82:93:cc:42:60:
17:e5:64:13:52:cd:b7:b7:10:92:99:ef:ec:ef:be:80:1f:91:
ef:97:1e:c8:bb:99:4c:4e:a1:42:3f:c4:88:5f:c0:75:73:2b:
ef:f7:7f:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4
QjNDOTc5QUUwHhcNMjYwOTIyMjA0MjMzWhcNMjYwOTI5MjA0MjMzWjAYMRYwFAYD
VQQDEw02YWIyZTgzOS1hMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl8WPeUp4mbqgAb5RSglr2xs+IZSIWkPXLnmYhQXOiaOBXsqyFhGJSM4RLiJe
siY0bGPWc+RDFM3HQh88fO0AHtn5S75Ix8OMIyhmYuNjc/Qprm9D4cm/WceFYUhq
fM6zcqHoQSSz0AiyNTxdz90NRxlvv24A8xCrCulqCByBZIp44EJaxcwXvzGw1kDH
rtDzW/CVKDUFfcirRczSTir+tCaxABB/dgC9372bziMIN2vgLWuhlhE+KdPUvELH
hyEbaw2pbAULIs5BvXJ2/YLWB3r44Ez0pDhCuKDL0UO7jaQbqiV27uW2pOKImxXf
NJXsL/eQiPPdXHlRGJRUQXpMSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFManjSiB
41opAKakb2qhEtxGDQdVMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD
MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ
cVNhM2RuYXBpLXlMUEplYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFRvkIQao7EzJ2CTUz6VORzZm/WxsB4Zm7UKKh0k5INSGrqRFUjfHLpZM0bL4
5AZux3er0A089c0QoAAn+bm1hIGBulcO2FLfgkgM5ayNgoKbajg0Wj+FJzR2Ecv6
n0C4yaVvY3BBvjz7Mt2endN64hrspsxYGgs1yxCVogVZp0PoMHdVpl+eciHQXf7g
MFbqrBduTPhl2PzopLi1VN65qXuxrucd0jepQCruUn/u0GAUHCCOqUSTzQrtDhzE
dxyhmxc9LSQg69tkFH9wAoFfMaD4eIKTzEJgF+VkE1LNt7cQkpnv7O++gB+R75ce
yLuZTE6hQj/EiF/AdXMr7/d/gg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:17:43 2026 by rpki-client