
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json)
Hash identifier: YOrw5wyv0UC3n01R3OfM/YDGmTNu3Pq60XYL9xWZWnI=
Subject key identifier: 1D:99:94:93:7D:87:4C:C6:B6:67:AD:D6:95:91:B0:BF:E5:7C:78:60
Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D
Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
Manifest number: 070C
Signing time: Tue 24 Mar 2026 21:38:56 +0000
Manifest this update: Tue 24 Mar 2026 21:38:56 +0000
Manifest next update: Tue 31 Mar 2026 21:38:56 +0000
Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: nYou1/fSMImwlj01mEWZ2X/UtpEm3kGTZfEvhEBdmq8=)
2: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: vU5jNjRODCqGNcivjz4BbyUmgkkjcxcY1t79rERXbLE=)
3: 584CC9ACEA0911EF91395D2BC4F9AE02.roa (hash: 5ftQJPwfgxkgiuQXpcoPp8oMPCZqzgk4zd7e+ZFrNis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl
rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FCFC, serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D
Validity
Not Before: Mar 24 21:38:56 2026 GMT
Not After : Mar 31 21:38:56 2026 GMT
Subject: CN=69c30470-baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:d9:f8:2c:a1:d5:9e:df:d6:fc:00:ae:87:
0c:a9:81:fd:a9:7e:df:ec:e0:7d:3a:19:cd:96:b1:
f6:b1:aa:4e:95:c0:2a:ed:6d:0d:09:d3:f8:9c:6c:
e0:79:ea:10:bf:46:74:87:8e:4d:e5:fe:2e:cf:78:
2f:a3:a9:8c:42:38:92:10:be:26:f5:7d:e8:b9:96:
8e:5f:51:52:c8:85:ce:40:89:04:fc:79:b8:33:ff:
e1:d1:a4:9c:1d:58:8f:f4:5c:5f:89:04:15:c4:60:
bf:98:47:b3:d8:46:14:63:6c:5d:ae:ef:e0:f9:c4:
96:d0:eb:00:7e:e9:36:9d:6a:ee:d9:7e:f7:53:1c:
c7:53:89:02:1a:6c:15:ad:13:36:05:38:5a:9d:a4:
24:a7:11:78:e2:c5:58:8f:7b:b5:64:1f:45:46:f7:
a1:f3:71:e7:a2:db:cd:35:9a:89:be:03:f3:2d:00:
77:ae:21:9a:cd:d7:a7:00:b2:e2:b3:5b:a4:1b:75:
bd:1a:ac:aa:97:4b:4b:32:aa:58:ea:56:41:e7:13:
fd:f9:a4:65:13:38:ed:9f:bc:6b:45:00:ad:f1:bc:
0e:d2:1f:27:00:67:19:37:b6:75:de:73:bb:4c:38:
18:f8:b9:27:b4:6c:96:b8:b2:25:86:6b:84:3b:4f:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:94:93:7D:87:4C:C6:B6:67:AD:D6:95:91:B0:BF:E5:7C:78:60
X509v3 Authority Key Identifier:
keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:84:33:51:43:6c:86:da:0f:6e:c1:53:7a:07:3f:7f:03:
66:61:93:8d:7d:16:73:3c:39:f8:2e:20:27:70:d4:ee:a7:00:
cb:6f:b5:3d:20:5c:07:27:58:eb:e1:b7:24:ce:5c:f4:04:66:
c4:fb:9a:0b:0c:9d:b0:92:3a:03:71:5a:41:a7:03:10:5c:d8:
2d:e2:4f:b9:55:2b:40:75:74:94:3d:61:c5:59:94:bd:93:2b:
7e:b8:8c:74:c1:06:40:82:af:17:2f:f3:d8:8d:fb:f0:79:3f:
b0:cd:b1:49:8d:5c:2c:73:0e:e4:64:c5:44:61:ac:a4:38:a5:
bb:5c:24:20:2f:f7:ea:85:84:b6:26:5b:27:89:4c:1c:2d:c5:
c8:ba:91:16:64:d2:28:55:12:7c:9d:a9:24:cd:28:88:dd:df:
4e:16:72:27:bc:95:0f:7e:a4:f1:27:20:cc:c9:26:5b:97:31:
55:67:ca:5b:9b:63:b5:c4:9c:64:e2:a5:94:8a:74:8a:79:23:
93:df:40:0a:41:8b:c4:d6:8c:a1:4e:45:67:bf:64:12:6f:ee:
3d:a9:85:01:cd:61:71:6f:07:47:89:da:94:10:fb:e2:d2:13:
74:66:9a:ed:ce:6c:98:3c:a5:43:bf:48:6f:c4:76:93:43:6c:
dd:93:30:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz
QjEyNjlDOEQwHhcNMjYwMzI0MjEzODU2WhcNMjYwMzMxMjEzODU2WjAYMRYwFAYD
VQQDEw02OWMzMDQ3MC1iYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYbZ+Cyh1Z7f1vwArocMqYH9qX7f7OB9OhnNlrH2sapOlcAq7W0NCdP4nGzg
eeoQv0Z0h45N5f4uz3gvo6mMQjiSEL4m9X3ouZaOX1FSyIXOQIkE/Hm4M//h0aSc
HViP9FxfiQQVxGC/mEez2EYUY2xdru/g+cSW0OsAfuk2nWru2X73UxzHU4kCGmwV
rRM2BThanaQkpxF44sVYj3u1ZB9FRveh83HnotvNNZqJvgPzLQB3riGazdenALLi
s1ukG3W9Gqyql0tLMqpY6lZB5xP9+aRlEzjtn7xrRQCt8bwO0h8nAGcZN7Z13nO7
TDgY+LkntGyWuLIlhmuEO0/BTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2ZlJN9
h0zGtmet1pWRsL/lfHhgMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE
M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz
cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMsGEM1FDbIbaD27BU3oHP38DZmGTjX0Wczw5+C4gJ3DU7qcAy2+1PSBcBydY
6+G3JM5c9ARmxPuaCwydsJI6A3FaQacDEFzYLeJPuVUrQHV0lD1hxVmUvZMrfriM
dMEGQIKvFy/z2I378Hk/sM2xSY1cLHMO5GTFRGGspDilu1wkIC/36oWEtiZbJ4lM
HC3FyLqRFmTSKFUSfJ2pJM0oiN3fThZyJ7yVD36k8ScgzMkmW5cxVWfKW5tjtcSc
ZOKllIp0inkjk99ACkGLxNaMoU5FZ79kEm/uPamFAc1hcW8HR4nalBD74tITdGaa
7c5smDylQ79Ib8R2k0Ns3ZMwfA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:37 2026 by rpki-client