
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier: SQejg5FSvU1K/Fz9VXyT7/xKExWPbJbREWBTb+ZyCaY=
Subject key identifier: A8:D6:9C:18:5B:FF:1A:10:67:FB:40:10:7B:11:55:28:33:B7:7F:C7
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number: 01FA
Signing time: Thu 23 Jul 2026 04:29:24 +0000
Manifest this update: Thu 23 Jul 2026 04:29:24 +0000
Manifest next update: Thu 30 Jul 2026 04:29:24 +0000
Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: WR4zBQpGrlNIQQEreO5XjXZzJNDB3qMoB+xJLwilbC4=)
2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Validity
Not Before: Jul 23 04:29:24 2026 GMT
Not After : Jul 30 04:29:24 2026 GMT
Subject: CN=6a6198a4-30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:33:a4:b5:75:68:f3:8f:e2:ea:4a:79:88:
fd:73:c4:de:b4:d8:5a:c5:f2:4b:32:22:75:11:f8:
2d:ed:93:f9:db:b5:5f:45:80:49:a5:9f:ca:02:d0:
f8:62:90:6a:9b:46:af:a0:35:00:be:49:e4:dc:73:
bc:cf:92:24:41:0a:d9:19:45:85:ed:84:96:d0:0c:
a4:7d:9f:35:e2:5d:31:12:cd:14:15:1c:2e:bb:53:
72:3d:a8:8f:d3:aa:63:95:df:01:27:6d:15:2f:80:
b1:44:31:e3:09:83:c6:a9:f1:db:2d:9a:1a:57:49:
da:74:cf:3b:7e:b8:f4:33:11:af:d6:fa:27:bb:4d:
12:ab:2f:0b:2c:50:04:87:1e:e8:dd:51:47:1d:2c:
3e:47:fd:9e:11:4d:16:fe:d5:89:0a:1b:e3:29:0d:
fd:3b:d0:dc:7c:d6:0e:a6:00:59:96:4c:49:4e:ac:
48:88:34:bf:3e:dd:7d:9f:0e:dd:a9:30:e4:3b:85:
11:b7:20:38:54:eb:f4:62:32:9f:5c:43:4f:4f:b5:
0c:0c:c0:7f:b0:0d:eb:75:26:78:34:04:58:87:89:
1f:e1:e0:f6:a4:f7:26:08:79:63:94:01:aa:c9:d8:
e0:3b:31:4c:76:8b:e5:a5:1c:a4:16:51:0b:b0:5a:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:9C:18:5B:FF:1A:10:67:FB:40:10:7B:11:55:28:33:B7:7F:C7
X509v3 Authority Key Identifier:
keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d1:69:f2:a4:97:6d:47:19:a1:de:ee:aa:7f:01:fa:23:43:
73:28:90:76:dd:04:87:a4:98:3e:88:03:fe:16:36:12:ff:f9:
a9:0f:42:b9:3a:7f:6f:a9:83:3b:82:b0:64:1e:bc:e1:1b:69:
18:de:5f:1c:99:f1:43:1f:24:90:f2:c1:cf:3f:2d:ea:df:99:
a6:a3:fe:d9:b7:3a:5a:ba:25:3c:79:7e:a1:b5:62:66:8b:c8:
68:c2:79:bb:74:e8:28:bb:3f:21:d1:56:86:7a:eb:d7:38:51:
72:07:51:4f:8d:37:40:a2:ff:eb:22:7f:eb:a3:34:d3:af:6e:
d9:14:b3:d9:a9:1b:d8:1f:39:97:8c:f9:4e:b2:f6:63:e5:30:
dd:cf:64:bf:72:d2:30:16:55:08:c2:4e:4b:34:33:7b:59:ca:
50:0f:74:43:76:dc:06:48:e5:8a:6e:4b:d2:eb:21:d4:79:36:
53:00:5e:dd:ae:1a:66:ea:2a:b8:95:b6:a7:ff:c2:f6:95:2c:
59:99:3c:77:0b:39:ee:f2:56:bd:3c:e4:88:3b:df:01:f2:4d:
b2:fa:94:9e:88:1d:72:72:29:47:7d:62:3d:ec:db:6f:98:bb:
75:72:3f:35:56:9d:1c:ef:37:cd:73:26:6a:ec:82:cc:04:b2:
99:16:13:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE
N0QzNUQwNzQwHhcNMjYwNzIzMDQyOTI0WhcNMjYwNzMwMDQyOTI0WjAYMRYwFAYD
VQQDEw02YTYxOThhNC0zMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QQzpLV1aPOP4upKeYj9c8TetNhaxfJLMiJ1Efgt7ZP527VfRYBJpZ/KAtD4
YpBqm0avoDUAvknk3HO8z5IkQQrZGUWF7YSW0AykfZ814l0xEs0UFRwuu1NyPaiP
06pjld8BJ20VL4CxRDHjCYPGqfHbLZoaV0nadM87frj0MxGv1vonu00Sqy8LLFAE
hx7o3VFHHSw+R/2eEU0W/tWJChvjKQ39O9DcfNYOpgBZlkxJTqxIiDS/Pt19nw7d
qTDkO4URtyA4VOv0YjKfXENPT7UMDMB/sA3rdSZ4NARYh4kf4eD2pPcmCHljlAGq
ydjgOzFMdovlpRykFlELsFrr8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjWnBhb
/xoQZ/tAEHsRVSgzt3/HMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE
NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs
Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ9Fp8qSXbUcZod7uqn8B+iNDcyiQdt0Eh6SYPogD/hY2Ev/5qQ9CuTp/b6mD
O4KwZB684RtpGN5fHJnxQx8kkPLBzz8t6t+ZpqP+2bc6WrolPHl+obViZovIaMJ5
u3ToKLs/IdFWhnrr1zhRcgdRT403QKL/6yJ/66M0069u2RSz2akb2B85l4z5TrL2
Y+Uw3c9kv3LSMBZVCMJOSzQze1nKUA90Q3bcBkjlim5L0ush1Hk2UwBe3a4aZuoq
uJW2p//C9pUsWZk8dws57vJWvTzkiDvfAfJNsvqUnogdcnIpR31iPezbb5i7dXI/
NVadHO83zXMmauyCzASymRYTfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:40 2026 by rpki-client