
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
File: PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json)
Hash identifier: r1PYNDzBqqUffKXhF0mdXBTsNl+9goPs0ARroqHz4vg=
Subject key identifier: B5:83:C4:D9:C2:0E:39:94:DE:46:9F:E2:43:A4:B4:E3:01:EF:D2:F8
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
Manifest number: 59
Signing time: Wed 23 Sep 2026 07:57:43 +0000
Manifest this update: Wed 23 Sep 2026 07:57:43 +0000
Manifest next update: Wed 30 Sep 2026 07:57:43 +0000
Files and hashes: 1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: Yz8GBGqNB3ORy9UyaOEZKWBnONfyjqW01cnonpE6I/s=)
2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=)
3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Validity
Not Before: Sep 23 07:57:43 2026 GMT
Not After : Sep 30 07:57:43 2026 GMT
Subject: CN=6ab38677-2ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:04:7d:44:68:f6:67:af:4a:5d:50:4f:ad:
c6:ef:e3:e2:ad:2d:05:19:69:83:38:6c:97:5a:7e:
24:ba:d2:95:17:83:0d:00:b7:3a:b1:20:41:d0:22:
df:c4:34:d0:54:f3:4b:45:12:d2:53:2f:e2:9a:e8:
73:4e:e9:11:b1:e8:57:48:18:a8:c9:0e:8d:1e:99:
62:82:7f:30:5c:11:e6:cf:b6:05:ca:1b:05:19:cb:
e9:55:76:25:a3:43:4a:db:2e:bf:6c:6c:f5:dd:05:
45:96:bb:b5:dd:e6:1c:67:94:80:d3:ae:88:d4:b3:
4a:27:01:55:bc:d4:2e:3c:8e:00:e7:52:7c:2f:ad:
43:09:1f:29:ac:90:af:79:6c:ff:49:56:55:f3:36:
1a:51:ac:f9:8a:46:8b:85:16:2f:13:8c:18:e4:61:
1b:c6:7c:3b:2c:7a:79:fb:d4:22:e9:6c:02:59:96:
af:1c:e0:e1:a8:0b:68:e9:ff:de:70:56:cf:09:d3:
d2:30:7a:b1:9e:b3:bc:81:42:af:70:53:63:de:1d:
2f:85:c7:b3:45:e7:d8:49:b9:82:07:da:36:83:bd:
4f:ee:ba:8d:35:9c:98:b1:77:91:86:21:e2:af:b1:
b1:54:86:70:61:35:cc:22:1d:b0:7a:76:3d:50:59:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:C4:D9:C2:0E:39:94:DE:46:9F:E2:43:A4:B4:E3:01:EF:D2:F8
X509v3 Authority Key Identifier:
keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:93:4b:cd:68:c5:7f:41:10:fb:a5:1d:c2:b1:9f:63:4e:
fb:97:d3:0b:76:76:ab:57:d2:38:0c:f4:2b:ff:09:24:fd:4a:
60:5a:b7:2e:a5:1b:44:aa:26:29:0d:9a:8c:74:74:20:de:99:
a6:12:09:99:76:77:b8:1b:49:ad:2a:35:e7:ad:07:79:86:47:
1a:5d:b7:9c:d4:f0:c7:6e:ca:cc:83:b2:b9:90:83:aa:2c:ac:
63:87:5d:1e:23:fd:6e:76:55:92:01:21:ce:c7:37:39:9f:9f:
07:33:1c:88:86:d0:94:06:93:9c:58:f7:0b:a7:00:6f:ca:4b:
ad:7a:94:af:2e:4e:31:15:42:26:11:4f:e3:c5:bc:b9:d0:21:
f3:f6:3f:c4:d3:42:a3:a7:11:77:af:bd:07:61:d1:58:48:95:
2d:eb:fd:b4:7d:19:91:11:f5:bb:41:4d:a6:96:79:98:e6:ae:
c0:13:65:99:f0:92:db:5a:1f:f5:0a:d4:b5:d1:d5:72:8d:19:
5b:45:80:aa:26:1d:92:68:21:b1:94:6d:19:3e:46:31:08:c2:
58:e6:9f:cb:5f:17:1b:95:13:60:22:39:15:90:69:00:e9:cd:
e3:da:07:18:50:40:32:6a:6a:a9:53:72:d9:37:09:a6:57:57:
0c:5b:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:39 2026 by rpki-client