
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
File: P4oQ_sbERHjWPTOyV_BEXQKopIw.mft (raw, json)
Hash identifier: MNfMdWA21X2pWl/Km1tt4SjOvWz1lmu4/sUaQuXS4hM=
Subject key identifier: 21:ED:0D:91:6D:65:FC:89:76:6E:A4:57:04:9E:22:8C:13:CD:0F:A4
Authority key identifier: 3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
Certificate issuer: /CN=A9176701/serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
Manifest number: 65
Signing time: Sun 11 Oct 2026 08:40:39 +0000
Manifest this update: Sun 11 Oct 2026 08:40:39 +0000
Manifest next update: Sun 18 Oct 2026 08:40:39 +0000
Files and hashes: 1: P4oQ_sbERHjWPTOyV_BEXQKopIw.crl (hash: YEOl7eJY7OXpEL+ds9MdcyLhyhOQkWfpkDsKQT9N900=)
2: 59228E922D7F11F1BBAF3E2694833773.roa (hash: hwPX1z9+sFftkkARtagNuykdrGLd2buhU5oVRyewcCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176701, serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C
Validity
Not Before: Oct 11 08:40:39 2026 GMT
Not After : Oct 18 08:40:39 2026 GMT
Subject: CN=6acb4b87-7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:08:14:90:b8:5b:e5:5f:34:a5:33:7d:41:
55:5e:2b:27:f0:a9:17:81:b1:e5:df:59:a5:fa:ca:
59:20:87:17:38:87:39:1e:00:c6:f4:3d:28:a6:e7:
5f:84:6e:75:4a:06:63:fe:07:26:f9:b2:60:47:b8:
7a:29:df:d2:7e:fa:da:51:91:49:a7:2d:a3:e7:ee:
f1:73:49:d6:e0:96:ce:82:f2:ac:5b:c4:22:85:5f:
34:1f:a8:ad:50:d0:b7:e0:f7:08:c5:bb:b6:49:80:
fb:37:4d:47:a5:6b:50:63:c4:d8:1c:11:93:01:05:
c4:b5:2b:c6:78:77:15:82:28:6d:fe:03:f2:78:04:
c8:70:fa:73:30:d3:4a:67:bd:71:16:44:a0:d9:0e:
49:56:d4:78:11:77:7c:68:84:fd:73:a4:69:89:9a:
e6:3e:7e:bf:45:50:0d:84:c2:66:97:de:81:b0:d7:
73:36:fb:4c:12:9b:93:04:71:2c:40:79:a3:29:10:
fd:48:80:fd:c0:d8:c8:b6:75:6a:30:53:ae:12:25:
26:d9:7f:5f:6d:dd:68:7a:46:46:7c:c9:3e:20:08:
89:e0:fe:35:a2:67:3a:fb:0f:43:8b:5d:1c:54:d7:
42:a1:79:92:ef:d2:7b:3c:15:e9:b1:fc:fb:02:40:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:0D:91:6D:65:FC:89:76:6E:A4:57:04:9E:22:8C:13:CD:0F:A4
X509v3 Authority Key Identifier:
keyid:3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:19:4c:4e:7e:7e:f7:53:81:68:e2:84:95:81:21:2e:4c:
d4:55:36:f1:94:d3:06:a7:a5:05:1d:1b:a2:5f:f5:52:70:74:
e9:50:ab:ca:8a:2d:a4:f6:b9:d5:2e:ef:7e:7c:22:ca:1b:4e:
5a:66:22:5f:e3:bf:2c:8b:ad:73:b1:f7:af:5a:fd:7d:c4:19:
0b:dc:24:12:07:89:8d:09:fc:63:1c:e0:95:c1:ab:e5:ba:e5:
18:90:71:44:5c:18:25:ef:51:bf:ea:89:ec:66:41:1b:d4:1a:
01:88:c8:f1:44:cd:e5:98:6f:c1:99:44:36:cd:9d:ef:bb:a3:
5b:92:e2:74:4b:b6:89:51:cf:40:cf:d4:bd:9a:93:20:23:47:
fe:6e:b4:00:0b:e4:f0:d1:90:db:26:85:50:74:ff:61:b2:95:
ce:9d:5a:3d:30:8f:f5:b2:16:89:27:5d:a0:f6:d6:19:da:ae:
00:63:92:45:e2:a8:60:76:16:c6:26:47:6c:95:11:a8:55:96:
9c:2e:3f:0c:7d:3e:5e:74:de:89:fd:ca:8e:13:16:e4:e5:b8:
85:9b:1a:14:8a:f8:9b:bc:b3:93:af:43:5b:99:39:42:b2:fc:
c6:16:da:d0:ea:f9:23:81:df:42:8b:6f:60:20:56:5e:99:45:
70:0f:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:23:28 2026 by rpki-client