
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier: v2ykIp9ikyvLtc9miHPfnV17CDhP2LAEkfCX9EiXcAQ=
Subject key identifier: BA:53:B6:81:91:E0:04:CC:3F:41:D2:A9:81:D7:59:0B:7A:61:2C:1F
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial: 0226
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number: 0220
Signing time: Wed 25 Mar 2026 02:08:40 +0000
Manifest this update: Wed 25 Mar 2026 02:08:40 +0000
Manifest next update: Wed 01 Apr 2026 02:08:40 +0000
Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: Zh4P67swFFipWZ4xuzKirDwsdEFGYoi1sqiZoLeV2h8=)
2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: GRfiEr9OW2Ontk4PlK6wpEk+JDayOUZ5GJhS4LRNf8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Validity
Not Before: Mar 25 02:08:40 2026 GMT
Not After : Apr 1 02:08:40 2026 GMT
Subject: CN=69c343a8-f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:d2:92:0e:c6:1b:db:7e:0a:02:cd:1e:41:
e6:96:88:40:92:1f:ec:35:22:87:91:f3:02:3c:c5:
fb:03:65:f7:a1:0b:ad:b8:eb:09:0b:97:a3:c0:f1:
4c:7d:87:20:e1:45:d7:47:d4:9a:78:3e:d9:25:83:
e2:87:9e:02:3e:25:8b:c0:90:46:8f:52:29:f0:09:
cf:54:79:4f:21:86:a7:ef:a7:60:49:63:02:da:e7:
92:97:f4:a1:5e:32:20:ba:40:05:34:4f:2c:ac:c2:
50:4d:0a:29:22:ae:fb:78:84:49:19:fc:d7:43:08:
12:d1:7d:9c:96:8b:e9:26:5b:26:e0:89:cf:97:a7:
d5:c0:fd:36:2c:a8:40:fc:5b:2e:47:a7:63:b7:f5:
21:24:17:e7:3f:8e:54:55:41:47:57:0d:85:ec:25:
4e:08:f2:f4:cb:51:03:da:34:b9:6e:30:95:c2:70:
e4:8a:4b:13:e1:6d:bb:0c:8f:1e:a5:38:00:55:d1:
36:52:c4:ec:31:d0:8d:f0:5e:70:3c:b1:af:e2:38:
70:75:06:d3:07:75:cd:48:2a:7a:b9:fc:1b:4b:e5:
76:7e:44:fa:e3:0f:e4:21:fb:26:1a:4a:3e:92:69:
00:64:73:65:81:5e:8e:11:4e:82:1e:a4:be:21:bd:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:B6:81:91:E0:04:CC:3F:41:D2:A9:81:D7:59:0B:7A:61:2C:1F
X509v3 Authority Key Identifier:
keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:3b:49:9c:5b:21:e3:cf:32:ef:87:39:1d:8d:42:3b:67:92:
ee:43:b2:87:75:79:17:63:18:1f:48:dd:12:25:90:74:d0:ee:
90:74:c9:0d:2d:35:c9:02:10:00:68:c2:e5:19:36:fc:16:a5:
fc:51:1b:6c:22:f6:a2:3d:20:38:8b:52:6d:33:d4:9e:ff:55:
c3:c0:f5:89:dd:38:70:69:2d:d9:49:34:41:71:0a:63:87:1f:
2e:08:fb:a4:24:dc:76:fd:12:97:9f:f2:7a:58:f5:71:91:84:
0d:c4:6e:78:61:ca:34:ba:a3:52:a9:ee:08:21:f0:d5:47:82:
3f:c3:6a:c5:3a:5c:de:8c:56:02:a8:e2:5e:89:e2:f5:67:9b:
a1:d1:48:34:4d:d6:88:7d:ab:0b:7c:3e:e1:4a:90:b4:49:e5:
e9:e7:41:b3:34:f4:7b:bb:11:9d:52:69:de:bd:96:48:1e:0d:
9a:5c:f1:6f:ab:38:5b:fe:32:17:d2:85:76:1e:0d:8a:21:e0:
54:01:4d:83:be:31:4a:80:87:48:de:13:62:69:78:b8:51:59:
10:ea:9d:f6:c1:4d:c6:05:68:0a:00:c8:16:ae:d0:fd:a8:da:
84:18:63:6f:0a:b9:a0:b1:23:f3:d5:00:ff:54:4d:bf:96:20:
bb:af:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:55 2026 by rpki-client