
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier: 4SPI5TSzks0AWS8va7LoPlQUQwCWXCEFLsz//BJTWTY=
Subject key identifier: 0C:ED:33:1E:8E:40:84:3D:B5:8D:42:1B:58:1B:65:A4:8B:3F:6E:2E
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial: 3521
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number: 3521
Signing time: Thu 26 Mar 2026 14:42:54 +0000
Manifest this update: Thu 26 Mar 2026 14:42:54 +0000
Manifest next update: Thu 02 Apr 2026 14:42:54 +0000
Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: FzIPxHHenEHZriGm06Xqwn12Sv7ilzKkE5phUWbu23Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13601 (0x3521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Validity
Not Before: Mar 26 14:42:54 2026 GMT
Not After : Apr 2 14:42:54 2026 GMT
Subject: CN=69c545ee-79d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:a2:bc:b9:d2:da:6e:88:9a:5c:f3:0f:23:
b1:46:d2:c1:be:93:c1:94:c0:22:55:2d:8a:17:20:
0f:66:08:34:2a:40:dc:f9:3a:92:29:0b:aa:6a:27:
00:fb:be:9c:b8:84:cc:9d:3c:50:46:d2:9f:34:ba:
59:ec:3f:4f:68:fc:31:ab:5e:26:a1:21:20:2b:29:
ea:3a:7b:e7:cf:02:43:2a:5c:4f:29:3a:d6:af:03:
d5:a1:3d:3d:f2:e2:32:63:68:80:3a:ec:9a:74:a4:
e2:d7:cf:16:3b:d0:9c:eb:2b:ce:0b:96:09:0e:9c:
b1:cb:c4:dc:a4:af:2f:89:a7:6e:26:0b:c9:9f:23:
d5:c7:e9:69:52:4e:f3:7b:18:26:9c:6c:e9:87:0d:
df:c4:ff:46:b2:f0:6f:42:76:18:90:7f:7c:a9:6a:
75:e5:cf:d7:00:76:b1:17:7b:1e:93:47:67:40:8a:
59:5d:25:27:91:ba:71:9e:d1:26:e2:97:0c:e6:19:
10:15:d8:79:2b:90:54:88:96:6e:80:81:29:ba:23:
9b:1e:c0:1b:81:73:05:86:76:46:6a:fb:ac:db:73:
d3:7e:b6:2c:d7:97:b5:bd:11:e0:f4:12:a2:30:e1:
77:60:ed:a5:72:a0:a6:db:07:9a:f5:47:b0:48:36:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:33:1E:8E:40:84:3D:B5:8D:42:1B:58:1B:65:A4:8B:3F:6E:2E
X509v3 Authority Key Identifier:
keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:75:97:bc:86:fb:eb:9e:3f:14:21:34:1c:5e:26:0c:e8:0e:
e7:d8:42:be:9c:ca:01:53:f8:60:5e:11:69:6c:d6:a6:26:ad:
34:41:be:62:e3:a3:01:3c:30:bd:5c:dd:fa:cb:61:78:97:f5:
d4:7a:99:57:7e:b1:b2:8d:e0:20:f3:43:12:8b:fe:a6:f0:c7:
14:7c:c7:b7:95:c2:b1:08:66:e1:e5:0e:1d:64:5e:e4:e6:a0:
ef:96:c2:cf:43:e2:8b:28:f3:af:e3:65:b8:7b:bd:45:15:b8:
c4:ac:19:89:da:c8:72:ad:69:07:76:d0:1b:14:71:77:4e:de:
e2:5d:b7:9d:e0:ed:64:74:d2:f2:29:fa:9f:a6:b6:95:02:ed:
17:70:5a:90:ca:53:76:93:12:c1:20:6e:bd:1d:62:07:af:74:
65:4c:09:6b:f7:b9:2d:64:6b:55:e2:88:cd:96:9d:13:85:67:
ac:1e:b5:19:9c:ad:54:13:97:df:57:e5:e1:d6:f3:f2:ac:0a:
7e:d8:13:5c:cf:42:58:57:a2:8e:00:16:09:5c:b6:e0:21:8e:
39:87:44:7a:ad:84:13:47:5b:b4:0e:bc:e3:2e:03:10:37:40:
b6:54:24:ca:73:73:de:24:e6:af:1b:a6:e8:11:7a:b2:99:0d:
00:ef:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:20 2026 by rpki-client