
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier: CiAx/YKDTVQ2TSdYjmBbwkLz0S4+B8zAWfhVoDrKSXs=
Subject key identifier: 34:62:4E:81:9B:ED:3D:34:B9:70:3B:57:0B:1B:15:79:F1:59:CC:6B
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial: 3585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number: 6322
Signing time: Tue 22 Sep 2026 14:15:26 +0000
Manifest this update: Tue 22 Sep 2026 14:15:25 +0000
Manifest next update: Tue 29 Sep 2026 14:15:25 +0000
Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 20tRWjs4lMixvEJDrhkJaiU36IPfLGnlMj/uXfzApDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13701 (0x3585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Validity
Not Before: Sep 22 14:15:25 2026 GMT
Not After : Sep 29 14:15:25 2026 GMT
Subject: CN=6ab28d7e-98dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:a9:48:23:60:57:4f:86:49:8c:b4:95:96:
c3:91:d1:f3:00:7e:d7:0b:78:e4:22:47:28:64:9e:
c6:44:27:5f:98:d0:92:cc:71:b7:af:f0:21:89:9d:
ea:af:38:2a:fc:02:79:db:0c:a7:77:8e:15:11:05:
57:84:c6:92:69:65:0c:51:4d:df:ff:5b:d4:17:1a:
85:5b:d9:17:4e:d5:c7:0b:a6:53:26:78:c6:c7:db:
e4:9a:30:16:ed:b0:aa:eb:c6:c1:37:09:10:4c:6f:
38:d2:da:70:d4:66:95:c9:69:b3:33:23:51:52:55:
47:0d:de:e0:f3:0f:f2:e5:b8:5e:a6:cb:ae:39:f3:
b7:59:33:16:bc:ed:88:11:e7:95:f6:4c:2e:1b:be:
79:48:c8:d4:c1:61:44:1c:cf:64:13:7d:4b:0f:45:
d7:36:17:c6:8d:8e:7a:42:b9:01:54:c9:94:f2:71:
73:ec:49:7a:b9:37:c8:69:0c:90:52:2d:8a:ca:f3:
95:bf:b6:b8:6c:19:de:f3:c7:96:73:8f:97:a7:7d:
74:4a:56:a0:d6:7d:1d:60:83:e2:3d:36:9f:fe:ed:
52:58:fb:1e:e1:77:6a:7e:87:2b:8a:61:24:d3:a8:
ab:ae:77:29:85:fb:78:67:42:c0:5d:40:c1:77:75:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:4E:81:9B:ED:3D:34:B9:70:3B:57:0B:1B:15:79:F1:59:CC:6B
X509v3 Authority Key Identifier:
keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:17:56:38:69:b8:6d:5c:e2:3a:d4:30:48:6b:c1:5a:82:
c5:aa:b3:fa:31:18:4f:b9:95:64:5a:69:84:90:68:cf:9a:30:
04:d3:18:42:22:ed:aa:7a:f6:84:23:81:f1:29:b4:d5:4b:78:
b3:50:8d:17:fe:9c:59:da:e9:f1:9d:8c:05:fa:61:6b:84:76:
24:9a:c0:1b:59:f1:5d:71:b7:63:46:75:5c:1f:e7:68:89:e9:
55:f7:ae:27:fc:5d:a3:e1:0f:20:28:cd:dd:90:e7:9c:be:2e:
76:b0:ba:f3:59:81:c3:20:3f:f3:59:45:81:67:63:01:04:3b:
4a:5c:71:72:2c:70:94:8c:28:e0:0f:28:3c:78:f1:f4:10:a6:
eb:10:22:64:4c:eb:b3:b7:26:e8:04:aa:64:62:29:93:d1:79:
8f:04:3c:c8:a7:de:0c:45:ee:70:8c:73:c3:76:9d:f0:8f:38:
50:92:56:64:bc:28:ba:3f:75:f2:88:e3:6f:17:e3:d7:5f:b8:
e4:3d:f7:8d:8e:cb:5d:00:19:57:ae:ea:dc:f0:41:4b:3e:d7:
94:77:53:4f:54:2f:1b:68:ab:9b:4b:03:f7:78:a3:78:f4:cd:
8b:d8:21:b0:15:c8:85:38:8a:f7:f7:b0:ce:73:00:bd:1c:55:
f7:42:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:50:45 2026 by rpki-client