
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier: E0zEscJY7CWDI/RAGTSIam27qCzaNbSgCvCR2mfWj2o=
Subject key identifier: 86:4A:05:6E:5B:89:B6:AB:74:37:69:29:AB:5E:AA:93:66:B9:2E:09
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number: 021E
Signing time: Sun 27 Sep 2026 03:14:41 +0000
Manifest this update: Sun 27 Sep 2026 03:14:41 +0000
Manifest next update: Sun 04 Oct 2026 03:14:41 +0000
Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: X48oMOsbzkMA0IkaoWE0BANaXI5Ou09YoVYMCtvk0Jo=)
2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Validity
Not Before: Sep 27 03:14:41 2026 GMT
Not After : Oct 4 03:14:41 2026 GMT
Subject: CN=6ab88a21-f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:1b:46:35:40:d1:07:17:8e:5b:15:8e:fb:
24:fd:71:57:98:c4:8c:35:8a:8d:74:92:e9:51:5e:
84:8c:eb:cb:86:2a:bb:90:97:07:24:76:9a:20:ca:
6a:75:8a:39:7b:36:9e:f4:db:e3:0f:86:37:ca:80:
78:96:28:68:e2:0a:b7:15:42:c7:b8:38:6b:e3:49:
3b:cf:7c:24:00:66:52:74:f2:f7:1d:e0:b7:67:69:
81:3a:99:43:77:6d:b6:c5:c9:f8:36:a8:97:63:45:
26:01:ed:7f:16:cd:26:ef:14:69:91:e9:1b:e1:f6:
89:f7:ab:6a:bb:5f:35:e1:57:bb:22:05:7f:3e:61:
ef:0c:a0:27:99:e1:84:64:82:8d:cd:2c:52:d7:b6:
3f:58:a3:d1:71:19:1e:c2:56:80:97:84:e0:07:a4:
0a:ab:1e:3e:73:07:c6:38:0e:3d:e8:c7:e2:11:fc:
f1:82:16:e4:71:3a:4b:75:ca:ce:0f:02:ec:a0:cc:
36:7a:92:bf:64:f8:44:bb:40:ce:3d:0b:79:ff:42:
90:fc:db:81:b9:86:9c:dc:bb:68:d4:de:f3:7d:13:
e7:d3:80:d4:4b:3e:f4:85:52:77:65:46:cb:f4:8a:
e1:8f:01:67:b3:d5:53:4e:99:7e:8b:39:69:67:2c:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:05:6E:5B:89:B6:AB:74:37:69:29:AB:5E:AA:93:66:B9:2E:09
X509v3 Authority Key Identifier:
keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:a3:2b:c1:e9:12:9b:ab:09:da:16:60:7f:f8:03:45:b7:
6f:2e:9a:08:73:39:8f:f7:2e:39:32:f6:61:96:83:9a:4a:45:
2f:96:03:ff:30:11:08:82:60:cc:e6:2f:c0:28:51:a1:7f:ed:
4f:97:b6:69:6e:01:73:7f:b9:22:57:e3:80:50:08:8d:4c:45:
15:11:ab:51:fd:0e:2c:6e:6d:d6:ed:70:3d:0e:85:7c:10:11:
cc:20:df:54:34:4d:fa:19:a8:b5:0d:a0:a5:cb:45:cc:19:b6:
b7:34:fa:45:9d:06:1f:ab:66:4c:86:b4:c7:9d:ff:07:ea:45:
14:91:73:f5:b3:ba:e1:ac:f4:f4:d5:21:e9:da:13:f7:72:8c:
b1:56:dc:23:1e:47:6d:e7:74:2b:f5:c0:9f:53:45:51:70:f6:
df:ca:b0:12:d3:e9:ef:54:45:19:43:2c:cd:e7:bb:4e:9d:d7:
2f:f5:1e:83:d3:0e:ea:63:d2:e5:bd:6c:a5:e3:f5:7a:ce:e5:
9d:ba:a9:80:e2:82:e1:6f:74:fe:50:e7:c7:ff:ba:0f:48:9a:
b2:d8:39:fe:11:ed:89:d1:14:9b:a5:1c:17:ea:32:d8:56:fc:
7c:24:53:01:07:a5:03:c0:57:7b:7d:fc:c2:a3:fe:8e:ed:70:
d9:d1:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:30:58 2026 by rpki-client