
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
File: Pe07QeID-IRwApbIcBAN_E57FQc.mft (raw, json)
Hash identifier: q6LPfkA2opHcsaQkI9MlwHujkbrHaWf4q2Z4ZEnJ26s=
Subject key identifier: BE:22:64:AC:3B:19:F9:17:6C:62:92:76:F2:A6:46:4E:14:DB:38:8B
Authority key identifier: 3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
Certificate issuer: /CN=A915E18D/serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Certificate serial: 03CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
Manifest number: 03C4
Signing time: Tue 24 Mar 2026 21:03:03 +0000
Manifest this update: Tue 24 Mar 2026 21:03:03 +0000
Manifest next update: Tue 31 Mar 2026 21:03:03 +0000
Files and hashes: 1: Pe07QeID-IRwApbIcBAN_E57FQc.crl (hash: spSRt575fu1haZnsiDUxybX5zShcXRi+Awl6e/yl3KY=)
2: 7BA410DCECB811EC851D8945C4F9AE02.roa (hash: zvE34QlweGzr3VIU6Zd1OUxtx0fqtmqYfGAPQBAj6QI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl
rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E18D, serialNumber=3DED3B41E203F884700296C870100DFC4E7B1507
Validity
Not Before: Mar 24 21:03:03 2026 GMT
Not After : Mar 31 21:03:03 2026 GMT
Subject: CN=69c2fc07-689d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:bf:82:73:35:65:c8:de:78:5a:69:39:e1:
ef:77:10:0f:83:41:5e:18:f2:e6:a6:03:e2:3a:39:
34:a0:ff:ba:bc:ea:9c:b1:fa:27:5a:a4:5f:5a:ec:
3e:98:10:d7:1f:29:2a:09:bb:28:3f:4c:33:f1:38:
7f:19:20:a1:38:b0:50:b9:1e:36:28:56:6a:34:1f:
72:18:22:bd:ed:7a:8f:3a:35:99:0f:9b:e5:8c:6e:
e1:e2:28:26:67:df:2e:9e:1e:9b:d1:bf:79:71:9a:
49:e8:8a:8d:50:56:67:95:68:9e:1e:12:7a:2c:fb:
1a:99:e2:62:ec:61:83:8f:ff:e2:f6:ee:8a:55:da:
4f:06:2b:54:bb:0f:dc:87:aa:b5:50:7e:f9:46:22:
6f:22:1b:9c:54:fe:b0:27:21:66:bb:d0:24:36:b6:
30:df:cb:8f:b5:6c:3d:65:61:73:f5:d6:9d:09:94:
17:f2:2a:35:aa:8e:b5:a5:32:cb:f2:af:19:fb:90:
6d:0b:76:81:4b:4e:38:41:4e:0b:a4:3f:e3:6c:f2:
75:8c:3f:04:7a:cc:94:40:93:eb:86:e4:ed:18:82:
92:43:97:12:05:c6:6b:8a:91:a3:59:b2:1a:06:da:
6f:ec:d4:eb:54:c5:0a:87:bf:7d:95:48:53:95:00:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:64:AC:3B:19:F9:17:6C:62:92:76:F2:A6:46:4E:14:DB:38:8B
X509v3 Authority Key Identifier:
keyid:3D:ED:3B:41:E2:03:F8:84:70:02:96:C8:70:10:0D:FC:4E:7B:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Pe07QeID-IRwApbIcBAN_E57FQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/6656A2A4CB4211ECBB6DE554C4F9AE02/Pe07QeID-IRwApbIcBAN_E57FQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:36:61:81:e6:59:54:75:41:a4:c4:f3:28:2f:75:ee:09:
c4:43:0f:b6:b2:cb:86:f3:fa:ce:7a:a4:a2:f1:74:76:a5:65:
c5:c7:32:bb:75:67:aa:2a:73:7c:1b:5a:68:12:dc:2d:1f:41:
4e:23:e1:c8:4e:36:cf:be:67:a4:bc:73:47:e7:23:fd:93:e4:
c1:f3:0e:70:19:57:b7:1c:dc:36:0e:44:6d:05:8b:4a:d3:b2:
6b:11:89:fa:83:43:23:d6:3c:1b:8b:35:ce:c7:3c:fb:75:58:
11:24:fa:43:10:28:c2:28:fa:32:90:7d:28:2d:71:bd:dc:fd:
7a:4c:b8:6b:1a:af:20:37:f8:70:7d:ca:7e:8e:cf:2c:fb:de:
be:aa:c0:3f:43:53:e4:b2:43:ab:e9:88:e0:14:54:d9:49:71:
43:de:ca:f3:c5:8c:5c:8e:73:00:29:a0:c6:54:e3:e7:9f:d3:
90:f7:07:e8:dd:5a:11:8f:d3:53:34:e6:c0:ae:10:ae:37:0d:
82:f1:c7:3d:c9:5f:96:66:b1:25:a1:3f:06:1f:f3:f3:fb:e0:
39:d2:1d:c5:78:2b:69:52:5d:0b:6f:69:33:1a:4c:c5:eb:8c:
3c:d1:cf:89:d1:70:9c:9a:36:5e:b8:bd:36:c8:cf:f8:d5:26:
fd:66:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:00 2026 by rpki-client