
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: AR6X3nbwYTedlpTdHrSVFJrHynxhE3kDAEWDcoBqvAA=
Subject key identifier: 00:11:3B:24:98:D7:E8:87:4F:56:5D:51:3C:59:35:39:21:22:A7:55
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 357E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 3569
Signing time: Wed 22 Jul 2026 15:11:19 +0000
Manifest this update: Wed 22 Jul 2026 15:11:18 +0000
Manifest next update: Wed 29 Jul 2026 15:11:18 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: Xkztn8uUjpOc/maGIn0fVSB4JodWn/r50UqrpqUNDY4=)
2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
3: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Jul 22 15:11:18 2026 GMT
Not After : Jul 29 15:11:18 2026 GMT
Subject: CN=6a60dd97-d4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:24:f2:4b:9d:b0:2d:4a:87:5e:57:0c:5f:
f8:59:7f:db:6a:be:9e:38:56:84:e0:35:25:0c:11:
51:5b:85:12:50:94:71:74:82:82:65:a1:fe:ba:72:
dc:50:4b:28:a5:e9:db:9e:59:6e:fd:26:92:b4:b9:
ac:e2:5f:6f:06:21:b1:e2:ce:b0:f7:21:a7:c6:c4:
e9:08:24:04:aa:e3:f0:06:54:84:cd:14:c5:15:d4:
13:37:be:2b:ed:d4:76:12:1c:90:84:3c:d2:48:2c:
ac:80:85:89:fb:14:c4:74:74:16:b0:cb:fe:b1:e9:
5a:fb:c8:f0:60:c5:a7:0a:1e:67:11:05:49:2f:cf:
79:ee:11:88:be:92:93:21:15:43:fe:da:32:3b:17:
71:85:ac:10:75:2c:36:66:8e:cf:ec:21:47:4a:b7:
a5:c2:32:aa:79:04:24:0b:7c:8a:66:fc:81:40:fa:
37:fa:7d:66:78:4c:b2:eb:7b:69:0e:1e:c4:6e:92:
5c:f5:f7:82:03:37:75:e2:21:cd:e3:3c:de:59:67:
34:59:82:8e:34:63:7b:1e:32:2f:2b:55:a3:d6:b9:
35:1a:d8:10:5c:35:10:85:72:9c:63:69:31:a5:98:
12:04:e0:33:78:12:51:0e:67:30:78:d5:00:e2:e5:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:11:3B:24:98:D7:E8:87:4F:56:5D:51:3C:59:35:39:21:22:A7:55
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:48:74:43:67:e4:b2:5a:ab:73:25:64:ac:03:2b:13:1e:
8f:98:b1:4e:5e:cf:d7:8f:35:86:0a:ae:8f:49:25:dd:a4:4f:
ec:a0:37:07:77:c8:64:05:2b:53:88:47:03:9a:f8:12:9b:41:
b8:30:3a:11:75:f6:7d:aa:ab:73:8c:d0:76:75:40:f8:f6:25:
6e:98:d2:9c:9f:29:fd:da:a9:75:0a:87:b7:0e:b2:47:7d:34:
a7:5c:35:10:8c:e0:49:c0:a0:b6:a6:cc:e2:cb:2e:ff:f9:cf:
93:26:8b:8c:7e:76:02:f9:38:3a:c8:32:5e:a7:ee:ea:7d:1c:
fe:3a:20:a6:8f:c1:d8:09:d0:5f:0d:69:e7:91:df:06:16:36:
cb:28:86:d0:92:c6:4c:4a:4c:f9:54:28:e8:c5:6b:9c:b2:71:
ea:c4:b1:8a:b8:82:6d:37:98:70:7f:53:cd:89:32:20:6f:23:
d3:0e:59:a6:f5:57:2f:08:ef:0f:ff:bb:39:bf:18:51:12:85:
3c:42:3f:ff:49:4c:0b:28:ac:d0:09:af:cb:96:89:81:ea:5c:
cc:9d:2a:5c:29:13:84:22:25:88:75:35:5d:84:a9:d0:c4:83:
07:d1:8e:93:be:6c:17:77:7f:95:2e:30:c1:1e:52:e4:56:01:
88:d8:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:31 2026 by rpki-client