
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: 6hZzizEQmTDZYeRcKB/jdmPYOb2ZR+lzrY8Yn6G90/o=
Subject key identifier: 1B:5D:E5:30:7E:A5:1C:4E:3F:2D:AF:28:C9:5E:C8:C7:A5:C8:0A:DB
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 084E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 0842
Signing time: Wed 22 Jul 2026 21:33:32 +0000
Manifest this update: Wed 22 Jul 2026 21:33:32 +0000
Manifest next update: Wed 29 Jul 2026 21:33:32 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: K5TYDUx5EDH3YyyUgfJ3mH75pcSPhzzEy/RQp1H/uVY=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Jul 22 21:33:32 2026 GMT
Not After : Jul 29 21:33:32 2026 GMT
Subject: CN=6a61372c-5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:8e:d7:70:62:8d:c1:6e:8a:77:ba:dc:39:
a7:d9:99:b1:1d:57:0f:db:2b:72:5a:45:7b:82:ae:
85:60:d9:d0:95:c1:8c:3c:ca:dc:99:20:a6:16:ce:
46:78:59:8e:61:77:14:bc:d0:03:3b:38:e2:d4:78:
bb:ff:1b:e0:47:54:51:96:c1:55:d9:fa:df:7e:56:
5a:cc:76:fc:6d:b5:4a:46:98:e8:8b:c7:00:58:ff:
c5:2d:51:0f:3e:63:e9:77:58:51:ae:87:08:7a:26:
23:3e:b4:3a:bd:ff:1e:87:f6:18:7d:4d:b0:6a:0a:
36:12:16:3f:be:17:1b:44:ed:8b:9c:0d:c9:c9:60:
65:71:25:7f:ad:e0:a2:a8:fe:da:58:d5:50:c1:05:
bc:b0:0b:44:ec:b0:31:6a:31:43:bd:fa:b5:1f:68:
3e:fe:35:ac:f8:71:05:17:e3:78:33:bb:5c:15:36:
37:17:90:9a:64:b0:13:82:b8:41:40:f6:06:9d:ca:
36:51:3a:34:e4:d1:13:6c:43:64:c7:e8:19:66:d1:
5c:cb:df:94:61:84:7d:13:25:00:cf:ce:cf:9f:15:
a4:02:ab:94:9e:de:bb:78:5c:85:b7:9e:dd:d9:48:
04:06:f3:19:2f:96:45:19:4c:bf:10:7b:b9:f6:14:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:E5:30:7E:A5:1C:4E:3F:2D:AF:28:C9:5E:C8:C7:A5:C8:0A:DB
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:91:c8:b1:2e:c3:8a:82:30:88:cd:8f:e0:d8:df:05:b7:d9:
3c:f0:f5:94:5c:3f:d6:e9:18:0a:f9:c2:51:32:5b:9f:77:85:
42:08:07:98:aa:9b:4f:e7:8c:92:bb:3c:00:e0:4c:f4:32:6a:
f7:1c:05:13:c5:17:72:7d:53:c2:56:a6:56:24:04:d2:44:4b:
8e:0d:0d:3f:f9:3c:79:19:23:f4:e2:5e:de:b1:d7:e0:0b:a5:
e3:ce:3e:b9:d5:6e:7f:db:05:5a:9c:92:8e:a1:97:f9:6a:cd:
63:35:e9:b4:15:97:ac:e9:c2:32:a8:69:81:ff:bf:bf:56:e2:
27:dc:5c:9e:53:1f:fd:08:1e:39:19:d3:43:d5:f8:8b:dc:b9:
f6:42:23:d4:3a:e4:d3:f8:53:2f:cf:03:b4:3b:a0:ac:96:54:
e8:96:5c:78:2f:72:fb:70:16:55:6e:e2:a9:bd:42:4a:2f:77:
ad:af:ae:d3:c6:4c:b1:5f:d9:aa:97:08:7b:7f:78:82:99:08:
17:80:e8:a4:2e:2b:59:14:d8:15:22:03:55:aa:59:86:53:44:
34:38:0f:de:48:04:03:9a:30:92:a9:a8:f9:8f:28:c1:bb:36:
b0:90:3c:4b:5e:98:89:d2:47:c2:dc:5e:d6:8e:d2:9a:9d:ce:
60:da:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:39 2026 by rpki-client