
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json)
Hash identifier: x2aB6W7EZwaNEuCkGgpfRpr1mlMcXomAbYdGlNHDh/c=
Subject key identifier: A5:75:73:4B:E2:67:8B:00:E7:F7:A8:9B:56:06:E8:B2:40:29:22:42
Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Certificate serial: 0494
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
Manifest number: 048B
Signing time: Tue 22 Sep 2026 23:41:18 +0000
Manifest this update: Tue 22 Sep 2026 23:41:17 +0000
Manifest next update: Tue 29 Sep 2026 23:41:17 +0000
Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: kjagQ53bOUTa1M/CH9j6h/EO6xXTyUd3mXqZUjFhOn0=)
2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: qsMeSOsY/v4xDv51AL5EHgDhAsKeYHGqgfOVvrnOS5I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Validity
Not Before: Sep 22 23:41:17 2026 GMT
Not After : Sep 29 23:41:17 2026 GMT
Subject: CN=6ab3121e-9f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:52:1d:9b:5a:ec:62:3e:e1:97:5d:09:e5:
b8:3e:5a:30:b1:24:c9:79:aa:81:b3:71:ef:29:04:
17:f9:44:57:58:7e:a6:1b:b5:8a:1a:62:b2:0c:2c:
62:7f:28:bf:1b:24:bf:8f:f5:37:61:64:c8:ad:50:
89:08:df:31:3f:d6:36:dd:52:79:cb:ae:a8:0c:d4:
8a:b4:1e:0e:f9:26:cc:63:10:4e:09:01:be:63:bc:
ba:7b:1c:af:f2:ee:52:5c:ce:57:5d:b7:9c:82:e6:
01:96:79:0f:f7:93:91:63:22:74:eb:41:06:bd:6e:
c4:df:1d:cb:2e:00:e5:a8:7f:a3:2d:a9:6a:75:69:
5f:7d:99:1b:cd:5e:50:db:55:ce:eb:fd:54:78:89:
d8:43:65:b6:9b:4a:6d:cf:bc:98:57:52:f2:ed:69:
84:ed:a9:71:3b:ac:72:8b:e2:57:1a:70:78:f8:31:
d0:6e:94:5b:24:53:1e:af:64:87:bf:33:83:2f:ae:
59:bc:e8:cc:a3:14:e9:c9:12:ec:f1:09:c8:fc:b5:
7b:f4:18:22:16:e3:49:4d:8e:dd:34:ea:aa:f4:6e:
14:47:7a:6b:05:ff:f8:b4:34:31:0e:52:3f:ae:37:
b0:dd:1d:91:62:28:1c:78:57:7b:f9:5c:73:77:db:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:73:4B:E2:67:8B:00:E7:F7:A8:9B:56:06:E8:B2:40:29:22:42
X509v3 Authority Key Identifier:
keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:48:60:72:ee:d2:77:0b:69:ab:9a:46:3d:50:d6:27:15:
e7:b9:7e:b8:28:59:e4:8b:87:2f:6e:33:e4:d4:0c:22:af:8b:
13:4a:48:c1:8c:90:21:2c:c7:96:a4:8c:cb:81:1c:84:81:f7:
b1:93:e5:af:c2:a9:4c:82:d5:d8:d8:2d:d8:64:bd:5e:1c:0b:
95:ba:e1:9d:58:c4:f1:c5:41:d2:0d:69:25:1d:cc:86:ce:13:
5d:aa:b7:d9:3a:f1:30:46:10:27:68:c8:f4:f8:2b:8a:50:32:
9d:d2:cd:8c:ce:81:ed:82:57:91:59:d6:4f:a2:81:fb:d7:68:
8c:84:9f:c4:56:1a:2b:d5:24:97:56:10:a9:f1:3e:53:a8:e0:
5b:48:8b:d2:d0:92:b3:26:3f:f1:97:54:04:23:cc:06:7c:17:
d9:7e:7f:ab:03:ec:60:6f:05:72:7f:5c:8f:00:d4:68:d4:41:
99:e1:07:bf:d2:64:40:cf:06:d2:39:2c:91:e6:e8:73:86:91:
a3:3a:ef:7b:52:f3:23:9f:f1:ab:36:89:0d:51:9a:01:b8:19:
e8:00:8b:d9:8e:bf:97:1f:02:52:70:5e:d7:ab:33:98:a4:f2:
c9:81:cc:04:7e:66:84:f0:48:6f:54:01:d5:c4:bc:0e:92:ab:
3b:88:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:11:06 2026 by rpki-client