
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier: NsFdPEmrHZnXImMluzYhIT5+Jo23GY9NVUBqlQLSxP8=
Subject key identifier: DC:74:A1:56:AF:95:C9:30:16:4F:40:39:B5:63:34:2A:3B:77:D6:0B
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number: 01B7
Signing time: Mon 11 May 2026 03:57:18 +0000
Manifest this update: Mon 11 May 2026 03:57:17 +0000
Manifest next update: Mon 18 May 2026 03:57:17 +0000
Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: EwgEqfbSjh3+2HnhqlbLzfUGg48DHxPWOCTDvUaKTyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Validity
Not Before: May 11 03:57:17 2026 GMT
Not After : May 18 03:57:17 2026 GMT
Subject: CN=6a01539d-eadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:fc:d7:cc:ab:e5:16:6e:48:7d:5e:b2:06:
96:b0:18:ec:d7:b8:f0:d4:96:7a:c6:d9:5c:d7:b6:
ea:fb:55:f0:ec:8f:ce:2d:a5:ef:d7:83:08:75:67:
f2:f8:ce:d1:5e:08:cb:1b:59:c8:f2:b1:72:8d:9f:
fb:e3:b5:25:9f:29:b5:6d:7e:58:6c:ae:98:6e:14:
97:9c:7f:10:8d:00:ac:47:83:29:9c:23:1d:d3:30:
4d:14:e2:f5:95:b8:5f:44:29:0e:aa:24:0e:90:7a:
71:5a:d1:c6:35:1a:2d:32:88:04:42:d8:11:b4:e3:
8a:43:c5:27:03:36:c8:58:d1:f8:56:c5:41:bc:f2:
e7:ac:f9:a2:8b:ea:b5:90:c4:f6:89:e8:84:8c:ec:
62:2f:d7:40:02:e5:10:e3:00:ae:22:75:55:38:9c:
d9:b0:bc:55:d5:56:c3:d0:f7:db:2c:49:0e:f9:d9:
87:6e:1d:79:a8:b2:53:95:77:ed:6b:a2:2b:d3:fc:
0d:c5:f8:40:f1:d9:7e:c8:d8:6b:56:dc:3d:b7:9a:
4b:df:9b:d7:ed:3f:43:85:2b:fd:bb:12:3d:c4:6c:
7a:d8:e2:83:3e:d7:6c:3c:bc:3f:24:c6:38:94:48:
72:a9:9a:e3:4b:e6:a1:45:e9:93:a9:da:75:35:b9:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:A1:56:AF:95:C9:30:16:4F:40:39:B5:63:34:2A:3B:77:D6:0B
X509v3 Authority Key Identifier:
keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:b0:72:2b:54:4d:a2:2d:78:4a:00:6a:a6:62:9a:17:2e:
1b:57:28:f0:d8:2e:80:fb:ff:86:86:71:50:4b:e0:c7:62:3d:
45:9f:79:5d:c9:6f:7b:66:8b:0d:fc:fe:39:c2:35:01:20:7f:
09:66:5a:76:0d:ea:bd:1e:1e:b9:f6:cc:fe:47:bf:30:d4:a9:
2b:22:df:af:10:03:2e:a9:6d:1b:5f:b7:d8:46:6f:81:18:d8:
1f:ac:8e:ad:ac:b0:07:47:7e:fd:ad:ee:68:4b:97:ec:92:ae:
b7:42:32:74:18:76:de:f5:ef:bb:80:00:6e:d8:67:36:90:01:
fc:0c:46:73:d7:83:42:f8:55:9d:f9:b5:34:b7:8b:1d:73:a2:
40:4b:16:de:7b:e7:c8:0a:ae:7a:37:90:33:a6:19:a6:96:30:
09:11:93:aa:97:da:89:01:dd:a9:5e:a0:4c:e4:3e:79:b3:73:
0a:fd:4e:c3:c2:39:bb:e4:00:eb:a3:6e:40:55:39:31:9c:6d:
db:bc:90:82:b3:1b:02:6b:f7:90:ae:d4:8b:47:d4:5e:77:47:
21:15:cf:33:e3:ed:73:1b:18:09:f4:09:a7:fe:17:2a:3c:fc:
51:b2:08:e0:d2:f0:ad:16:db:31:35:bd:31:aa:fc:29:db:1f:
72:4d:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:44 2026 by rpki-client