
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier: 2TduM37nUE/PHXeARMR4wTzBqQo5tZtugNuh7VwjtvY=
Subject key identifier: 41:13:9D:03:60:9C:C1:B7:1C:C2:22:01:83:3B:E8:F0:D1:78:E1:58
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial: 034C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number: 033E
Signing time: Sun 15 Nov 2026 00:43:59 +0000
Manifest this update: Sun 15 Nov 2026 00:43:59 +0000
Manifest next update: Sun 22 Nov 2026 00:43:59 +0000
Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: JqGLfJqosTByJ0GcU6+sEWpJMzkvqLgSixzXYGVgo0A=)
2: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: GVC6U610pMHMcyKuQxjCHiThOxCsNHGHebCuK1HMVfM=)
3: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: WwNN5yiX17Hff/LWCCJhPsAOtcMIwoaI7KVP5Zs7sOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 844 (0x34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Validity
Not Before: Nov 15 00:43:59 2026 GMT
Not After : Nov 22 00:43:59 2026 GMT
Subject: CN=6af9004f-a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:17:1a:6f:94:4f:4f:3d:53:55:78:70:9e:
c1:6c:3c:65:58:a9:99:55:1d:d0:49:ba:ea:89:91:
a3:bc:92:cb:79:08:38:dc:a3:ef:32:b6:89:54:a6:
44:38:c3:2e:07:c3:3a:c8:b7:f1:53:47:6d:0d:27:
55:af:92:60:b4:84:1c:11:b0:da:d6:c0:00:ca:fc:
19:aa:b2:83:5d:33:19:d1:b0:d4:c4:13:76:1d:c0:
cb:e7:2a:ee:9e:3f:f9:48:4d:28:87:b8:1a:fe:19:
21:52:5f:3b:af:54:16:bc:95:5a:14:c1:b4:0c:67:
4d:08:70:79:ac:ab:cd:1a:ab:e4:13:5f:4f:1b:84:
c5:9f:f6:be:a3:ed:07:d5:01:7a:50:6a:c3:8e:7b:
09:81:81:72:86:a1:16:4b:69:0f:50:c2:90:34:96:
f0:79:47:4b:df:1a:c8:bf:be:7a:05:cc:b5:70:b7:
e7:b9:14:81:cf:69:1b:fa:7d:01:2d:1a:be:e2:de:
3d:c9:4d:06:91:d0:44:3d:c7:b8:7b:de:c8:52:a7:
ae:07:d0:51:c9:e8:94:87:7e:76:86:80:47:a2:1b:
9b:d6:76:c9:d6:6f:0b:9e:c4:b9:d9:ea:4c:f8:9e:
ae:89:b1:39:e1:2e:6f:53:a0:22:c5:cb:11:74:cc:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:9D:03:60:9C:C1:B7:1C:C2:22:01:83:3B:E8:F0:D1:78:E1:58
X509v3 Authority Key Identifier:
keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:9b:39:f7:9c:63:cf:da:96:e6:36:94:03:1d:77:52:49:
3c:f5:a1:b1:e5:d3:d9:d5:49:9a:fb:57:b5:21:c4:45:e4:15:
eb:bb:aa:c1:44:b5:21:3f:16:74:3c:8e:a6:22:45:ed:63:c5:
59:2e:ec:0b:78:54:98:5b:f5:d7:fd:aa:fa:e1:53:58:af:a4:
f4:a1:11:b8:d0:ab:02:53:87:d7:b0:c5:c7:e8:37:32:72:39:
f2:a9:a4:cf:14:80:e4:d4:5c:1e:4d:00:8e:00:88:ab:ef:f8:
1b:69:85:8b:59:d6:fa:a0:f4:19:fc:52:cd:27:17:ca:1e:d6:
cf:f1:93:e8:5e:08:02:75:43:f0:41:0b:e1:43:c5:3b:bc:8a:
01:d5:b2:ed:28:40:cf:78:1c:8f:d4:65:db:a1:2d:19:3d:f2:
6b:8a:33:9e:05:b5:15:af:9b:83:d5:0e:18:29:dd:17:f2:0c:
94:45:9a:15:72:e0:62:17:7e:5f:39:1c:3d:27:02:4d:a3:20:
59:3e:46:2b:ee:a9:8b:59:3a:1f:54:12:f5:80:6e:26:f4:79:
22:61:b0:20:43:3a:26:7b:67:f0:eb:37:44:36:83:61:c6:a4:
b0:d8:30:2d:7a:01:ca:bd:c1:ba:38:c3:7a:08:eb:a7:74:9b:
29:d0:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:01 2026 by rpki-client