
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier: eekVSeYBfs/6SMflKm9/UnKQMpJ3tW5PYNNpbqkj/Qg=
Subject key identifier: 4C:76:F7:58:0B:41:9C:81:0D:2F:C8:B8:0A:28:F0:80:05:63:5B:DD
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial: 0A2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number: 0A0D
Signing time: Sat 10 Oct 2026 19:50:37 +0000
Manifest this update: Sat 10 Oct 2026 19:50:37 +0000
Manifest next update: Sat 17 Oct 2026 19:50:37 +0000
Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: U+fMjJKcRDLedBvM8lx0Ibje2W4/w29EmflIssh3ol0=)
2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=)
3: F663B6DE3F1011F1A8E91BA6CD833773.roa (hash: x5T7NYkz+hUgY/tU53+Hwc/BUR2tGXVOEyssUILN0gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2602 (0xa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Validity
Not Before: Oct 10 19:50:37 2026 GMT
Not After : Oct 17 19:50:37 2026 GMT
Subject: CN=6aca970d-e111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:08:5b:cc:4b:c0:65:c9:c5:dc:43:50:9f:
33:c9:84:e2:53:f5:28:0b:86:cd:dd:cd:d3:0c:f0:
57:d6:2a:d4:14:8e:5c:0e:2f:3b:5d:1e:b1:64:8e:
10:d7:bc:b9:2a:07:10:15:dc:61:f6:c3:ac:33:c6:
21:93:35:4b:a5:63:11:a8:01:ec:75:82:6d:0e:58:
81:f7:b0:93:23:23:fe:87:81:59:e5:c2:0c:80:45:
66:99:a0:36:e4:fd:8a:b8:e5:1d:03:34:ec:bf:4a:
94:50:ac:c9:b7:e1:25:b5:91:45:7f:66:1e:9f:72:
dd:cc:14:1d:50:ca:f7:71:cb:10:40:d6:16:f4:13:
be:41:ef:b3:b8:a6:31:12:61:c3:a9:b7:93:58:af:
ed:76:6c:49:f1:a6:19:da:b4:5f:88:18:64:21:c5:
ee:ca:38:d9:c6:44:9e:35:16:4d:ea:6a:c2:24:01:
71:6b:4d:21:2e:91:06:39:ea:1a:c1:9a:d1:22:9b:
a3:50:b4:36:5c:03:0f:51:1b:a4:ff:6f:48:35:d8:
d3:c0:01:05:7d:fb:f8:f6:7c:9c:a9:53:02:f3:fc:
28:6d:de:d7:e2:cf:24:05:c0:e8:5b:76:c5:f3:7d:
e1:5a:23:d0:35:9f:74:ef:99:e2:a6:02:e1:49:6f:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:F7:58:0B:41:9C:81:0D:2F:C8:B8:0A:28:F0:80:05:63:5B:DD
X509v3 Authority Key Identifier:
keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:e0:64:7a:bb:dd:82:19:4e:02:97:ef:55:d7:d9:3e:e9:
a7:f3:33:59:88:48:92:aa:71:d2:82:b4:f0:e7:77:ed:32:3f:
ec:39:92:72:7e:d9:03:a1:77:16:26:bb:97:d6:69:67:b1:b2:
24:51:fe:3c:22:c5:f4:27:44:a8:18:2c:d4:c1:09:8c:63:99:
e9:60:f7:c9:b9:26:d9:6c:0f:a4:f8:7e:da:d5:24:f8:cf:7e:
ec:85:b3:12:84:b5:85:3e:87:e0:cc:da:da:12:19:7c:64:bf:
9c:5b:36:5b:80:c6:a8:75:59:e6:1e:f5:4b:b3:f6:26:a4:96:
85:7c:d2:69:32:fb:2f:fa:e8:3f:63:4c:2f:12:3f:02:1f:17:
a4:5c:e0:dc:90:4f:83:d7:ce:b3:f6:6d:bf:45:f9:66:8c:96:
cd:c8:36:ce:4d:41:f3:42:7b:2a:1f:97:d7:9a:61:eb:89:c1:
4e:55:8a:e2:42:02:15:dc:69:9e:ad:12:94:88:cc:7e:a6:a9:
37:ec:e0:4a:9d:a7:3b:6d:fe:8a:a4:eb:c8:1d:18:cf:2a:46:
77:36:33:84:93:d5:b3:10:60:da:59:eb:0a:c2:e9:26:ba:dd:
3a:8e:a5:93:8e:40:e1:ab:66:01:62:d3:a9:fc:3a:7b:06:85:
5b:44:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:31:09 2026 by rpki-client