
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File: pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier: 7xIBsb/gyr1UCe/TtkwN86Bk06vvf9mOeIpQIJoSVAM=
Subject key identifier: 3C:9F:44:44:B8:1F:57:74:6B:EC:37:27:1D:F0:31:87:97:6A:97:10
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer: /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 10:28:46 +0000
Manifest this update: Thu 23 Jul 2026 10:28:45 +0000
Manifest next update: Thu 30 Jul 2026 10:28:45 +0000
Files and hashes: 1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: rWwfHImza4+CVeHVsW3pBBxYupZDkGaH+vVy/PRMLgQ=)
2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Validity
Not Before: Jul 23 10:28:45 2026 GMT
Not After : Jul 30 10:28:45 2026 GMT
Subject: CN=6a61ecdd-5979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:5a:9d:2a:17:d5:09:72:48:19:d2:18:a6:
90:2a:c6:f5:c4:37:7e:4f:bb:cf:b6:27:2e:75:ff:
ad:4f:ec:12:72:60:7e:0c:da:84:ac:2a:27:60:75:
90:bc:23:48:ea:75:87:76:fa:84:8c:e3:b7:40:d0:
3b:2c:55:0c:86:6c:ab:67:e6:53:2b:42:ee:6c:3a:
2f:a0:73:78:6d:fb:ea:2d:9b:90:a8:e9:eb:45:de:
87:a9:cd:b0:c5:00:c1:7e:68:44:a3:68:d9:10:58:
a9:c0:31:c6:63:db:20:84:aa:c9:34:31:b0:46:17:
9e:95:9c:2b:00:b2:39:f7:d3:5f:e6:c6:ef:dd:9f:
20:08:ab:e3:fd:8e:15:79:4c:27:e1:af:5d:a6:de:
9e:d6:8f:a6:80:cf:3a:8d:02:c3:0f:43:6d:f9:db:
8f:96:8e:9d:da:13:d0:28:5f:e0:f8:6d:02:f4:15:
7b:16:ea:e1:3d:43:c8:07:af:06:1b:7e:32:48:07:
d5:70:15:58:ea:27:b9:0d:10:05:03:7e:d7:4c:01:
6d:2e:84:d4:f6:ae:1d:5f:15:de:91:63:f9:8b:60:
a8:27:69:ad:88:48:ee:cd:bb:7f:74:8e:c1:c8:76:
c6:d4:02:1e:e2:e5:12:69:04:19:01:e0:08:67:72:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:44:44:B8:1F:57:74:6B:EC:37:27:1D:F0:31:87:97:6A:97:10
X509v3 Authority Key Identifier:
keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3a:c6:2d:45:dd:a7:44:65:8b:db:93:ce:c0:07:8f:86:ac:
e5:90:c4:24:0d:a2:59:c5:e2:4f:05:bc:6c:c8:26:1b:95:7b:
96:13:f9:7a:52:82:bb:02:f3:d8:16:2f:e6:bc:f5:09:51:a0:
07:e2:45:f0:f8:ca:f8:13:27:a7:c0:78:9a:4c:de:a2:22:57:
4e:07:af:e4:34:4f:6b:53:1e:dc:f5:88:36:ba:0f:1e:9b:59:
b4:46:a9:5e:73:00:21:73:07:a7:b9:b1:0c:47:bf:c4:57:5e:
c8:aa:0b:b9:1b:0e:be:08:8b:5f:cc:c7:75:51:96:50:e0:41:
a4:40:8f:8a:72:29:ac:f1:a5:14:53:c6:7f:a7:a7:6b:73:97:
0f:c8:b6:d0:82:03:1e:f5:a3:bc:c3:6a:8a:c1:58:c2:8f:4d:
7a:6b:b0:68:e1:ab:35:92:68:ce:17:7d:7f:64:f4:af:2d:87:
31:f6:61:08:d8:7f:fc:7d:9f:0d:6e:dd:56:a7:9d:f3:9c:e3:
2d:ce:ff:a6:87:f6:41:da:a5:17:ab:07:5c:29:29:42:a3:13:
ec:7f:fa:30:43:38:6a:fb:14:14:8d:8a:8a:4d:5d:18:a4:69:
27:83:24:30:24:0c:1d:df:f7:2f:f3:8c:6d:25:77:fe:15:75:
be:a4:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:45 2026 by rpki-client