
$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier: CJ9vGdWEMEOg8vH+asi9F+Vr074Jf2hjr4M7ljeGZQs=
Subject key identifier: 31:47:74:AD:27:84:34:7C:25:BA:46:D3:F9:D5:73:CF:05:04:76:ED
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial: 2CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number: 2CBE
Signing time: Wed 22 Jul 2026 15:35:25 +0000
Manifest this update: Wed 22 Jul 2026 15:35:24 +0000
Manifest next update: Wed 29 Jul 2026 15:35:24 +0000
Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: kIUkU9aevX3TQL5AGeTjehu6odDAW4Yo5+vhrBWZ/54=)
2: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: m42CkLhr+GKHo0TtapwYGoLo4QIiXG0fyh2xqAw/LvU=)
3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: YAU3ILtOw6FXLUFev8JWBOKxyiChialBJy1oqxPurUE=)
4: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: SANw9dLH9bXdcBVHXUebGfCRir+vdFPmPdYxlp8aviU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11494 (0x2ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Validity
Not Before: Jul 22 15:35:24 2026 GMT
Not After : Jul 29 15:35:24 2026 GMT
Subject: CN=6a60e33d-6203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:8a:27:1d:29:83:a2:df:8b:4e:db:92:c6:
d7:64:7b:bf:35:43:d3:24:0b:85:a4:53:85:c8:f4:
bb:c1:ab:bd:cb:76:3c:b7:03:c3:c5:35:7b:43:fd:
a0:2a:23:94:4b:d0:f3:91:a6:70:71:42:d1:ba:8a:
f8:73:22:e9:46:81:44:00:b3:19:6f:f5:04:8e:b8:
d8:3f:48:f2:4b:13:99:5e:3d:71:96:f3:95:3d:5e:
35:a8:b5:db:69:3b:8a:26:f9:fd:07:d0:15:ee:61:
82:98:ac:8e:10:6b:a0:10:27:53:46:05:e3:19:d6:
77:37:87:88:1a:3a:f1:58:38:eb:b2:57:29:04:a5:
07:55:02:04:61:0b:76:c1:68:df:89:d6:b4:ed:cf:
4d:4e:13:1b:6c:6f:cd:f3:16:e3:a5:78:a2:48:32:
05:1e:b3:01:47:23:8a:2f:3c:51:ff:b3:e7:47:3a:
d1:de:95:90:29:7d:a7:92:69:61:59:86:7f:17:38:
d3:8d:2a:44:51:e0:1c:aa:84:7b:60:d1:45:03:25:
80:e6:5b:fb:85:25:02:5b:cc:10:86:d9:d8:f5:f6:
be:b5:15:9d:bb:3a:84:e7:41:13:46:fe:b2:19:74:
7c:72:39:d6:fa:c0:38:2c:85:9b:40:17:c4:1e:90:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:74:AD:27:84:34:7C:25:BA:46:D3:F9:D5:73:CF:05:04:76:ED
X509v3 Authority Key Identifier:
keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:12:3b:1a:0f:31:65:aa:40:80:02:7c:a1:40:dc:2a:ed:
1a:97:c8:25:5a:fa:11:b3:84:16:47:f4:19:43:81:64:1b:af:
2c:38:90:e0:9a:33:86:d7:b8:45:cd:b1:b5:f5:63:0f:b4:f7:
99:b6:e1:97:cc:80:32:c9:28:a4:e5:9f:75:cd:cb:d4:b7:9b:
5b:6f:5b:28:9a:ae:af:32:9b:69:dd:19:25:c4:93:50:95:4a:
e1:de:40:80:39:77:a8:63:f0:28:15:2d:07:61:78:d4:1a:9c:
07:bd:81:5a:9e:b4:cb:0f:3e:4c:33:4e:cc:51:b7:6b:d6:a5:
48:9f:61:6e:76:7e:c4:62:cc:01:b4:b6:44:30:03:c5:6f:79:
10:b9:37:ba:39:67:4d:a5:9c:b6:b9:d4:51:69:62:5d:19:c2:
df:11:89:01:fd:a6:10:9f:4b:14:e9:b9:52:8d:50:00:b9:27:
61:3d:31:5d:5e:e9:0a:7c:d1:e3:e5:08:62:52:bf:d0:12:9c:
83:0a:68:df:82:2c:b9:16:22:d1:37:af:c9:a1:84:22:7e:e1:
81:75:1e:df:de:fe:1d:07:c3:f2:c3:56:fd:a3:77:d8:59:9d:
c0:ea:7f:b0:97:91:2e:56:53:b1:41:ec:94:64:c4:cb:cc:c4:
14:c5:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:28 2026 by rpki-client