
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json)
Hash identifier: QsQlzRyFa9uZTQLe8BY7icpDOPJekXS9t0cSqatVIpA=
Subject key identifier: CB:97:51:62:0F:2C:C5:90:7F:A8:0C:46:A0:B7:E0:AB:95:BB:3B:FD
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial: 1FD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
Manifest number: 1FC0
Signing time: Thu 23 Jul 2026 23:39:14 +0000
Manifest this update: Thu 23 Jul 2026 23:39:14 +0000
Manifest next update: Thu 30 Jul 2026 23:39:14 +0000
Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: ZMITouxQVXl5v42L+6i5XYklJ9sBVpcqQ3leA9imTME=)
2: B3FD34B086EF11F19E006003A7EE528E.roa (hash: DhH1TgLvuwpXz9g+tXbxJism2H6panW4NjqFDkZedig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8145 (0x1fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Validity
Not Before: Jul 23 23:39:14 2026 GMT
Not After : Jul 30 23:39:14 2026 GMT
Subject: CN=6a62a622-2c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:de:fc:18:8e:56:b2:db:33:7f:a6:f9:26:
3e:6e:ed:ea:89:12:3d:9c:00:f2:7f:bf:e2:6d:4a:
64:b8:83:4d:0a:aa:32:26:d9:13:e7:c5:d0:b7:66:
84:90:d9:61:55:cf:0c:43:45:ab:2a:2f:34:9e:56:
21:6e:c7:bb:60:e3:95:97:e3:56:70:c7:e3:55:74:
d8:79:de:d2:d6:16:b9:ee:2a:67:7e:56:4b:24:52:
3c:76:7a:36:37:68:2a:07:bd:8a:4d:f3:80:d1:43:
0a:c4:41:a6:0e:eb:b8:b0:af:c6:df:13:a0:98:63:
e1:86:83:82:67:25:3b:67:ba:4c:40:6d:19:2c:9c:
1c:14:61:8c:0c:ba:c1:1c:09:f2:dc:ef:8c:e9:c7:
04:14:d9:fa:33:8b:fa:9a:ed:9d:d0:f5:9c:23:95:
4c:4b:da:c6:a3:73:3a:85:56:c9:95:3c:14:e2:af:
b1:e7:e9:76:9e:1b:be:c8:fc:fb:42:46:81:4a:de:
5f:09:9e:42:b7:49:29:06:97:3c:ed:df:9c:b3:68:
32:22:a0:53:30:b9:8f:36:31:63:dd:41:fb:43:02:
a5:29:6e:c7:3b:77:5a:91:b9:14:94:75:9e:a5:4e:
17:30:cd:eb:db:98:05:02:de:fa:e8:2e:cc:1f:d7:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:51:62:0F:2C:C5:90:7F:A8:0C:46:A0:B7:E0:AB:95:BB:3B:FD
X509v3 Authority Key Identifier:
keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:3a:40:9d:70:ce:22:d1:bb:98:2b:36:ba:9d:d0:6f:0a:
28:01:1c:0e:bb:a3:02:30:4c:81:88:33:58:c4:a2:da:b2:6a:
e3:e0:b4:0d:8b:6c:20:5d:49:b5:97:21:a0:a0:30:4e:92:92:
ef:41:cc:6d:70:aa:0a:08:1f:98:04:04:4d:21:ed:fa:66:2a:
29:e4:ca:9f:59:57:cb:89:43:f9:e4:46:2f:17:f0:17:f5:1a:
4d:0a:27:a2:7a:57:10:37:3d:04:14:77:a6:39:83:da:3d:68:
49:8b:34:de:96:c6:a7:7e:03:46:ad:9b:9c:b5:e3:2b:61:eb:
42:6f:86:d0:e1:d2:06:df:20:68:68:d9:80:0f:aa:9a:5e:1c:
19:b5:cc:ce:ff:65:da:3d:6c:8a:fa:69:d3:34:a8:a8:2c:b7:
1c:30:bf:4b:43:54:f2:59:26:5f:b5:24:93:d3:2c:e4:8b:a4:
c1:0c:b1:ad:c6:50:54:da:55:1c:28:dc:3d:90:51:81:84:e3:
ad:e6:29:7b:30:63:41:2c:84:47:d8:ac:3d:9b:8c:85:d0:7a:
01:6c:7b:5f:07:1a:5e:4e:11:98:a8:6a:b1:62:98:df:60:30:
6f:80:14:fa:ac:85:00:c9:22:4b:af:e5:10:f9:6c:78:71:1a:
c4:61:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:25 2026 by rpki-client