
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json)
Hash identifier: kvs++V+4CBdgYNTgFc4+GhftqS2zrngDeg4mL1t7h8A=
Subject key identifier: AA:6E:35:9B:21:A4:48:73:1C:B6:4E:00:5D:23:4C:03:A0:60:D3:64
Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Certificate serial: 03EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
Manifest number: 03E3
Signing time: Wed 13 May 2026 00:39:30 +0000
Manifest this update: Wed 13 May 2026 00:39:30 +0000
Manifest next update: Wed 20 May 2026 00:39:30 +0000
Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: se+0pfz3qZfd2cnAUhIpxlu8vxrkAPp85zGtnjfBUWE=)
2: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=)
3: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Validity
Not Before: May 13 00:39:30 2026 GMT
Not After : May 20 00:39:30 2026 GMT
Subject: CN=6a03c842-5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:70:fd:3d:cd:f9:cf:7b:4f:27:70:15:30:
cc:ef:6b:61:45:3e:e7:1d:59:1d:81:21:c5:c8:89:
56:7e:de:c9:5c:fb:25:15:c7:62:31:aa:18:f0:a2:
45:06:aa:5f:dc:fb:48:d0:04:81:e0:13:6b:6b:d4:
f9:a1:5c:5f:b3:4c:c6:99:d4:1b:39:20:a8:ae:c2:
ac:37:97:4f:4e:16:16:0e:97:d2:6f:58:00:6c:d7:
88:bd:a3:55:13:90:a5:91:45:44:cd:39:08:b1:56:
63:e5:1f:28:77:4a:6d:11:0d:26:19:b3:d6:d6:a2:
56:02:e0:a5:65:30:e4:43:2b:3d:93:58:fa:0b:15:
df:21:62:c6:e9:eb:c5:76:f5:0d:07:37:3f:14:a2:
4d:f1:36:3f:b2:2b:47:83:f4:2d:ed:37:60:a3:04:
d0:84:39:56:04:c8:86:6d:b3:06:6f:6d:39:09:b0:
16:ca:91:a9:ba:44:47:61:c5:cf:b8:5c:83:3e:26:
34:c2:8e:56:05:48:fe:8c:63:29:d9:aa:b7:7b:b7:
8b:66:eb:5e:eb:a9:8f:7d:fc:c3:eb:dc:54:e6:cd:
ab:b4:c1:27:92:14:4b:80:f0:56:d4:41:c4:ad:8d:
f3:58:6f:28:0f:2d:70:46:e9:ee:9d:aa:1a:87:29:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:35:9B:21:A4:48:73:1C:B6:4E:00:5D:23:4C:03:A0:60:D3:64
X509v3 Authority Key Identifier:
keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:d4:62:9b:da:29:84:f1:1f:34:ac:77:5f:e5:9e:e2:7f:
b8:53:9f:84:a7:bc:24:2e:2e:00:53:4b:cc:5e:2b:d4:cd:06:
a8:f8:95:0b:66:ac:be:b7:82:90:d4:79:f1:c1:48:a7:4f:83:
ee:0b:75:ff:25:8f:ea:79:21:19:e1:9c:4e:76:ea:e8:d9:a5:
5b:c3:32:29:ef:0e:a2:7b:77:ac:a2:59:53:29:15:ac:8a:0e:
1e:aa:5f:93:18:00:e0:62:4b:d6:83:2b:de:47:8f:6c:f0:65:
06:a0:33:3b:38:41:f4:f1:4e:15:33:6f:22:8b:79:4c:3c:92:
f5:aa:06:2a:b2:fa:a7:5e:eb:4e:cf:13:7f:c4:7f:0b:f8:ef:
51:38:b9:07:34:8c:e1:3e:92:0c:23:44:66:f4:54:a5:d0:41:
74:7b:f2:66:16:61:3c:28:7d:fb:9b:0e:1c:f8:de:5e:8c:5a:
42:a3:61:25:f1:1f:57:35:9e:ed:70:2a:8b:22:c8:dd:ee:56:
c0:e0:05:36:2a:2e:ee:8a:9e:bf:ee:a1:ec:4f:00:79:bc:8c:
f0:bc:56:eb:01:8f:0e:77:75:7d:15:aa:72:c0:88:ac:fd:ca:
ee:9b:96:85:b2:1d:dc:e2:7f:e3:39:8d:f3:ca:b7:36:ba:47:
3f:dc:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:54 2026 by rpki-client