
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
File: PcBRwTKrtyHhorzZB1rns05CDfg.mft (raw, json)
Hash identifier: gp/MAq/A1DkvAWkQg3Y2Bt91WMwwlk6QBn6e5XGmI34=
Subject key identifier: 5F:EB:9A:6D:E6:B5:18:D7:FB:77:1F:C5:6A:26:83:D4:1E:18:CC:F4
Authority key identifier: 3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8
Certificate issuer: /CN=A9192C18/serialNumber=3DC051C132ABB721E1A2BCD9075AE7B34E420DF8
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
Manifest number: 2A
Signing time: Sun 15 Nov 2026 00:49:40 +0000
Manifest this update: Sun 15 Nov 2026 00:49:40 +0000
Manifest next update: Sun 22 Nov 2026 00:49:40 +0000
Files and hashes: 1: PcBRwTKrtyHhorzZB1rns05CDfg.crl (hash: IqZExoXevm47KWUtM+8xVfZXwNswiMI7Fq5EY+CSTl4=)
2: C4BC1BF8AFE511F19D14B5525B11F970.roa (hash: zu5/BVfnlOfrQciW/f4UJsQzOFwBfgC0Zyaxa57afIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=3DC051C132ABB721E1A2BCD9075AE7B34E420DF8
Validity
Not Before: Nov 15 00:49:40 2026 GMT
Not After : Nov 22 00:49:40 2026 GMT
Subject: CN=6af901a4-efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:c0:6a:90:69:7c:1e:76:49:b6:92:60:d4:
f8:15:02:70:26:62:fe:07:f0:ca:51:ce:dc:82:37:
3f:14:c1:27:73:27:57:5b:81:12:18:7d:02:94:71:
c2:47:72:df:4d:51:7f:ff:b7:88:d4:f0:e7:a6:10:
18:25:23:46:f0:33:38:5f:d5:7b:40:34:30:37:16:
2c:82:b8:13:f4:6d:f0:16:b2:5f:0a:f2:7a:d1:04:
bd:d6:35:06:e6:d1:92:95:43:b6:fe:06:86:15:a5:
17:31:5a:8a:77:0f:4f:a4:e0:9c:d3:44:61:d8:5a:
33:b8:97:3c:94:32:a8:e6:2f:b1:80:2b:80:e5:ee:
3e:47:21:ea:cc:29:3e:1d:4a:64:0b:cc:73:ec:1c:
0a:32:29:4b:22:50:f6:1d:65:28:ff:6e:6a:c2:fa:
e6:57:9f:cb:85:78:3c:1c:8c:1d:27:d5:5b:11:b8:
c5:a4:36:d8:fc:45:19:38:72:2d:70:7b:6c:d3:ab:
30:55:78:47:1f:cf:90:4e:ee:10:4e:76:b6:d9:f5:
a1:cc:d0:ce:3d:6d:8f:6a:17:bb:d6:62:f2:99:1c:
c6:a0:02:22:30:e8:82:b2:eb:6d:30:ea:5b:3d:8f:
d6:f4:71:e6:6a:01:b2:47:11:9e:2a:ce:4e:81:35:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EB:9A:6D:E6:B5:18:D7:FB:77:1F:C5:6A:26:83:D4:1E:18:CC:F4
X509v3 Authority Key Identifier:
keyid:3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:c2:6c:65:08:0b:d0:27:7c:0b:51:da:57:2b:01:0a:78:
ed:ec:6f:fa:d4:60:72:29:33:04:53:8c:55:5d:3d:f0:8c:e2:
13:8e:1c:0c:7e:1b:4d:d7:2c:a6:1f:6d:7b:e6:07:50:a0:9f:
84:b0:5f:d2:e5:1e:05:04:04:93:ea:1c:fa:79:c0:6a:8a:d4:
10:a2:e8:8f:57:9b:f0:c4:28:5a:b6:53:ac:05:d3:38:ec:67:
82:09:ae:43:b5:f3:7a:a7:d8:62:f9:1f:8f:50:2e:44:83:12:
80:77:35:a3:9e:50:ec:18:17:c2:49:99:c4:11:30:c6:ac:4a:
11:0b:ee:95:50:72:c7:eb:f9:a7:87:c0:8b:89:d7:3b:75:e3:
0b:a7:de:ef:00:0d:84:3b:51:7c:05:db:70:7a:39:e3:d0:51:
d3:80:72:58:a9:77:64:d6:e8:5f:71:a1:8e:75:44:c1:61:cb:
36:64:21:5b:4d:c5:e2:15:0c:4d:74:a2:99:41:6b:ab:3f:9b:
84:5b:9b:58:6c:64:b0:2e:86:ba:3e:e5:95:b1:4b:96:07:3c:
75:f5:04:f1:68:c7:db:01:1c:ea:b0:bf:c5:69:5e:73:a7:a5:
84:c2:17:c0:46:21:4c:4b:02:ff:34:0f:da:88:d7:c8:ee:78:
07:f3:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:17:58 2026 by rpki-client