
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
File: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft (raw, json)
Hash identifier: 17c53uTI7aCxrz6Hbcoi8OQ/f8nT2kGJ/tROefZQt5c=
Subject key identifier: 40:37:6B:01:A7:51:B3:B2:15:D9:3B:73:7F:3C:1D:B0:3E:A9:0A:96
Authority key identifier: 3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
Certificate issuer: /CN=A9174A0F/serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
Manifest number: 33
Signing time: Fri 25 Sep 2026 08:28:49 +0000
Manifest this update: Fri 25 Sep 2026 08:28:48 +0000
Manifest next update: Fri 02 Oct 2026 08:28:48 +0000
Files and hashes: 1: Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl (hash: fNuK5Q9NTf2mU/zOm6qhTyOGIfVMxOulWyxOANN66FE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A0F, serialNumber=3DEF6C28113EF68E6258F0122D7D91257AF806C9
Validity
Not Before: Sep 25 08:28:48 2026 GMT
Not After : Oct 2 08:28:48 2026 GMT
Subject: CN=6ab630c0-13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:49:4f:fa:41:2d:32:e9:83:e7:3d:d7:f1:
0d:09:84:6e:bc:3d:33:87:20:26:b5:bb:96:32:d3:
fc:1c:38:1c:b2:10:6d:53:43:74:f4:13:5e:40:18:
05:4a:66:e6:68:7d:37:bc:da:75:ba:35:55:59:13:
3a:90:1a:a4:3a:45:71:e4:ab:0b:41:e2:9d:7d:d3:
11:fb:12:b7:34:5f:d5:71:de:37:e1:66:90:9a:6b:
bd:fc:0d:38:2d:77:88:9b:62:53:c2:d4:d6:ec:b3:
1b:c8:f0:20:9c:98:74:6a:80:63:8d:33:f3:f6:cd:
ed:ad:e2:29:6f:62:4d:8b:e3:ab:cb:b6:53:73:4f:
58:da:0a:f0:33:f2:25:e5:cf:1b:1e:c7:a9:85:70:
3d:11:64:c5:20:08:6e:d1:7a:e5:71:d5:09:00:bf:
3a:74:13:52:91:4a:fe:7e:db:c9:88:35:48:ba:7b:
59:38:6d:af:50:d0:13:14:eb:28:77:ba:68:a5:a2:
bb:2c:27:46:1a:f6:2b:cd:96:62:ee:bb:db:44:a7:
38:ec:c2:20:cb:50:20:cc:f3:fd:83:bb:7d:d2:87:
a2:cb:e4:45:94:a5:55:4c:57:08:d8:ed:85:32:99:
53:f4:a7:d8:49:fa:77:2a:6a:8a:a3:f7:33:ad:f3:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:6B:01:A7:51:B3:B2:15:D9:3B:73:7F:3C:1D:B0:3E:A9:0A:96
X509v3 Authority Key Identifier:
keyid:3D:EF:6C:28:11:3E:F6:8E:62:58:F0:12:2D:7D:91:25:7A:F8:06:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/5617C9586F5911F192237A477AEE528E/Pe9sKBE-9o5iWPASLX2RJXr4Bsk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:4a:7e:06:43:b1:c3:6b:41:f0:aa:f4:1d:40:b2:88:36:d8:
91:53:5f:d0:65:94:a1:a1:43:9c:a1:b9:e2:88:1a:4c:a8:29:
84:e8:ba:d9:2d:37:77:67:88:3d:71:b4:bd:0b:8a:cc:83:3c:
17:e1:63:e7:96:bf:4d:b0:93:a3:d9:c4:38:8c:db:78:16:fb:
cb:cc:d4:2f:ec:f6:59:5c:ce:32:9e:6d:e8:99:0e:59:91:ad:
88:5a:e5:72:ac:4a:9c:ea:1e:98:b6:a7:13:6b:2d:e6:eb:a0:
53:8c:2a:0b:6d:54:9b:4b:69:36:59:7c:cc:e7:35:25:85:e7:
da:d0:1e:b4:01:3b:d8:1a:96:8a:8b:06:0c:a3:bd:4a:90:54:
a2:b8:04:0e:71:cc:b3:33:8a:76:0d:68:f0:2f:a0:6d:79:f8:
af:fa:4f:b0:3c:78:9a:e8:5e:b9:49:69:b5:c7:c0:2f:ae:0f:
35:01:9b:1f:ba:78:05:43:b0:cb:c2:38:44:72:35:bf:06:c1:
e0:2e:48:ce:dc:76:57:19:0a:e8:e9:41:18:57:6b:6f:22:b5:
a2:f8:59:90:a4:1f:e3:e4:f8:48:55:55:aa:8c:b1:db:98:d7:
8f:b4:20:99:59:4e:68:be:ff:4e:3e:52:c2:c7:84:5b:da:75:
ae:1b:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:55 2026 by rpki-client