
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json)
Hash identifier: sKItlLVX1wyGTPbXBlwk/PccTyLL7AHKIdnngptDqMo=
Subject key identifier: 46:E5:F7:3F:AF:7B:A3:7A:E4:69:7D:4F:B6:48:25:F9:46:50:66:E7
Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
Manifest number: 018D
Signing time: Mon 21 Sep 2026 04:30:19 +0000
Manifest this update: Mon 21 Sep 2026 04:30:18 +0000
Manifest next update: Mon 28 Sep 2026 04:30:18 +0000
Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: DXtWS+RjGY682G23toOjlT8HDtojwX86m/s8zubu84g=)
2: 748DC8FC42B211F1AE547F12BD833773.roa (hash: NHacGbNKZQSOK3ds8MLDhdLVTScRrhgeQ+aHLnN3GQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Validity
Not Before: Sep 21 04:30:18 2026 GMT
Not After : Sep 28 04:30:18 2026 GMT
Subject: CN=6ab0b2db-e130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:03:eb:c5:2f:83:6b:72:b4:9d:56:1d:8d:
5a:6d:9e:dd:fe:3f:19:d2:12:c2:ed:20:58:5d:73:
05:e0:fc:c1:cc:ec:ae:c7:93:d8:e0:11:82:a4:5d:
51:17:dc:4b:da:99:29:cc:e7:c9:90:e8:c1:eb:3b:
77:bb:63:3c:ef:11:a7:ba:49:01:f1:79:fa:8b:e6:
87:ed:a4:e6:aa:6a:f6:b4:e5:0b:25:bc:51:1e:b7:
aa:e6:2a:f7:1c:7c:b6:95:bf:76:7d:6d:d6:9d:9f:
6e:93:ad:47:00:e5:ed:23:20:3d:de:05:31:6a:66:
7f:92:71:da:5a:40:0b:7a:94:2a:cf:82:54:2c:fa:
bc:6f:6e:9c:6c:98:aa:1b:53:a5:09:a1:ae:7a:96:
fe:61:c1:eb:1c:32:3b:ad:da:95:55:5e:6f:dc:f0:
28:ff:ca:90:f0:a0:1f:6a:0e:89:fb:d1:03:07:8c:
0d:a9:a8:c6:a8:7a:1f:3d:9b:16:8f:6a:b5:9c:bc:
ae:0d:10:51:1b:fb:44:00:1d:20:1b:c8:9c:f7:4f:
ad:d6:fc:9b:5b:c8:c8:9b:88:9b:55:a1:e4:49:f6:
b5:2b:f8:d4:c6:5e:b9:f8:0d:19:81:c1:29:f2:76:
7c:ca:f7:cd:4f:70:2a:1e:c3:ec:fb:f2:f8:dd:61:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:F7:3F:AF:7B:A3:7A:E4:69:7D:4F:B6:48:25:F9:46:50:66:E7
X509v3 Authority Key Identifier:
keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:fb:bc:db:3e:a7:ca:85:c8:01:cd:aa:e4:92:d5:b2:b4:
64:99:f4:8f:25:64:34:2a:47:e0:00:88:39:c4:af:99:0b:71:
1e:e8:cf:fc:e1:1e:b0:63:e9:de:21:95:ff:98:69:41:93:03:
e0:a3:59:e4:51:07:4f:d9:90:f0:1d:ca:c3:01:8b:46:82:1f:
57:b7:9c:f1:61:05:82:99:0c:a2:5a:0c:bc:53:b8:1f:80:80:
6c:19:ab:08:16:4c:28:1f:0c:cc:92:87:12:1a:ae:b2:08:2c:
7e:4a:05:c6:69:a5:36:6c:7c:ec:5e:94:e1:8c:03:7f:67:42:
f8:d7:0c:4c:48:4a:ef:76:93:eb:42:67:84:d1:01:0a:73:81:
1e:76:1c:ce:63:c7:e7:a5:39:49:0b:04:c1:80:0e:96:50:15:
a7:64:75:ca:59:00:b4:d2:65:14:9d:f9:b6:af:09:27:b0:69:
41:8c:dd:d4:a4:58:2a:2d:7c:ab:bc:41:20:dc:66:e5:a2:c3:
14:87:22:01:46:e7:10:e2:6d:2c:8b:94:72:2d:be:94:43:bf:
44:5d:9e:52:d3:8b:8e:be:c0:99:54:1d:d2:40:75:7c:b9:b8:
97:d2:24:cd:d2:f3:bf:66:a1:49:c0:ad:3e:ca:d3:cc:85:83:
84:52:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:55:13 2026 by rpki-client