
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: Xw1jouOtof1G+FdqK5MViai/TMVcqaX97N5GZ9xXCF4=
Subject key identifier: 07:E6:80:16:07:A1:A5:FD:85:48:D3:74:73:47:59:64:30:D8:F6:14
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 355A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 3545
Signing time: Tue 12 May 2026 15:08:37 +0000
Manifest this update: Tue 12 May 2026 15:08:36 +0000
Manifest next update: Tue 19 May 2026 15:08:36 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: vBeGRQViL3TVsym/Nmf54zi5Sdl/nMIKRnODjXgMkh0=)
2: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
3: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13658 (0x355a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: May 12 15:08:36 2026 GMT
Not After : May 19 15:08:36 2026 GMT
Subject: CN=6a034274-295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:43:a2:01:dc:92:b3:1c:99:b9:3f:b2:af:
dd:b8:00:bf:d6:10:56:bd:bc:4f:53:c2:3f:64:69:
ca:66:8c:b9:92:68:24:89:9f:62:17:db:5c:e8:99:
69:54:f7:b3:42:0b:f3:fb:48:17:fa:67:cf:61:cf:
44:37:a3:72:9a:ff:26:67:02:a6:a7:bd:0a:61:f8:
4e:33:49:80:20:ec:15:b2:c9:c6:ee:85:f8:99:3c:
fd:8d:42:78:a8:7c:65:12:e1:a9:e3:a8:58:c3:f6:
dc:aa:ff:81:a0:61:a8:8d:1a:87:0d:66:3b:cb:41:
fb:b0:5c:49:8d:2e:10:aa:17:62:1f:24:f2:fe:50:
6f:cb:ef:6c:d8:fd:63:45:9c:6f:57:01:0f:26:b5:
33:86:05:8c:16:c2:7e:20:ee:1e:2b:1e:d8:6a:98:
bc:7d:eb:91:f3:0e:9d:36:6a:a2:14:f4:2c:e9:42:
18:75:71:30:2a:ef:63:99:63:49:13:db:7b:4c:52:
af:d2:7a:03:c3:5b:59:ae:ad:c0:82:45:dd:af:c4:
03:e1:48:6c:92:3a:98:1e:b4:37:75:72:27:a3:ed:
e4:98:3a:8e:3e:84:c6:80:21:8e:e7:a0:e6:c0:be:
a1:78:f7:44:5b:96:e2:e1:b7:01:20:64:49:e0:bc:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:80:16:07:A1:A5:FD:85:48:D3:74:73:47:59:64:30:D8:F6:14
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e7:5e:d1:be:c2:62:4a:5f:1d:6c:57:6e:92:5d:31:ba:0e:
04:fa:9a:b8:21:38:e4:af:ce:f3:04:2a:20:3d:48:4a:ec:07:
6c:1a:52:02:8e:c1:1c:a7:2a:65:49:58:29:9f:2e:cf:92:9d:
6b:7a:0e:d0:d8:7c:76:91:b8:8c:4d:7d:38:c5:2e:92:09:e7:
c6:9e:d3:0c:3d:a1:df:92:23:df:c7:33:a6:b3:7a:5b:8a:28:
d3:4f:72:5f:08:93:9b:c4:98:cf:94:d7:11:be:c0:3d:70:81:
a3:13:85:59:28:0a:2c:0a:ef:95:f7:17:67:60:4d:4e:e7:7a:
a8:61:4c:34:14:55:3e:eb:42:8c:06:d7:eb:22:84:a4:de:1c:
e5:ba:90:17:30:18:fb:69:e5:da:0e:85:a3:de:36:23:1f:0c:
55:4c:20:f3:ad:04:5e:c2:a9:7e:14:be:a3:8b:26:32:15:4b:
92:c0:7f:ea:20:a5:1c:35:d3:40:fd:15:aa:d5:a9:94:54:cf:
f6:7d:e9:f3:58:49:5f:83:4b:bc:14:5e:29:33:bc:24:6d:4a:
06:ac:b9:7b:f4:ef:97:38:57:10:92:e0:0d:6e:4b:71:7b:58:
d9:f5:0e:93:0e:3b:75:32:38:2b:ba:a1:b8:99:18:19:34:d2:
3a:f1:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:12 2026 by rpki-client