
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
File: PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft (raw, json)
Hash identifier: mjQ3dYCuQCKcEX6L8a5vrFDmVVmKramXJnOtYO0zPxw=
Subject key identifier: F4:B1:72:75:EE:FE:B5:8A:64:3D:36:D2:AD:6D:25:B7:1A:EE:FF:E8
Authority key identifier: 3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45
Certificate issuer: /CN=A9178F3F/serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
Manifest number: 07
Signing time: Thu 23 Jul 2026 11:17:32 +0000
Manifest this update: Thu 23 Jul 2026 11:17:31 +0000
Manifest next update: Thu 30 Jul 2026 11:17:31 +0000
Files and hashes: 1: PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl (hash: 6fTw9CugHsgbkwWZ4vE1W4fht71aHjldyle9S7JIhCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl
rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178F3F, serialNumber=3E410F3C78B7CEF420715981764E719EE19B6645
Validity
Not Before: Jul 23 11:17:31 2026 GMT
Not After : Jul 30 11:17:31 2026 GMT
Subject: CN=6a61f84c-ba0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:65:94:0f:1e:bc:86:63:9c:b7:67:04:2d:
57:fd:f3:ff:8a:85:75:92:e2:62:a5:06:8e:1a:09:
64:1b:cf:e4:f0:18:98:f6:4c:ee:d7:5a:85:07:f1:
93:34:f1:11:ed:cf:6c:7d:a3:37:24:da:05:a0:9c:
b9:a9:34:c5:64:1d:4e:82:bf:21:cb:60:ed:43:e0:
d8:1d:f2:21:c7:5e:10:f9:ab:69:64:59:3b:25:2f:
87:71:82:4c:7d:05:ff:8f:2d:28:3c:5e:9c:a4:ad:
88:45:d5:ec:41:98:b6:1a:af:88:b5:4c:95:69:c8:
f0:f8:35:72:92:9d:a9:88:72:6c:21:92:c4:9f:d4:
35:48:93:a5:6c:b1:80:a8:7d:ed:57:45:9f:d2:be:
48:9d:53:14:d9:48:2e:15:e4:40:ff:43:f6:47:bb:
fd:93:11:ba:95:3e:15:7c:fd:aa:72:3a:10:16:2b:
64:9d:68:0f:11:98:60:c3:0f:ca:0e:7f:6f:36:1f:
0f:54:01:5a:4b:88:60:0d:b9:27:f6:6b:5e:34:a5:
84:ad:a4:df:6d:c1:a2:e5:9e:67:40:20:c5:ae:0c:
41:a6:96:21:56:6a:25:b1:c7:89:64:e9:44:02:57:
d9:55:32:23:2c:43:ad:bf:c7:63:69:52:6c:0c:6b:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:72:75:EE:FE:B5:8A:64:3D:36:D2:AD:6D:25:B7:1A:EE:FF:E8
X509v3 Authority Key Identifier:
keyid:3E:41:0F:3C:78:B7:CE:F4:20:71:59:81:76:4E:71:9E:E1:9B:66:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PkEPPHi3zvQgcVmBdk5xnuGbZkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F3F/47C8BE507F4611F19147BB5D95A30FBC/PkEPPHi3zvQgcVmBdk5xnuGbZkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:54:68:48:6d:86:6c:b8:0a:2b:32:79:a6:17:30:e7:2f:ff:
27:01:39:2b:99:2a:c6:ad:f7:91:b0:8b:2b:3f:38:d3:b5:5a:
9c:a2:12:4e:6d:9f:99:4d:c5:ab:c5:e0:ca:96:33:fc:35:e8:
6f:f2:0a:b2:b1:90:71:97:06:eb:31:f8:97:62:3c:20:9e:e7:
8e:da:25:89:d4:68:2d:c2:12:60:49:87:14:f8:43:50:91:93:
8c:db:a2:ee:00:88:86:19:06:1a:19:cf:83:47:48:63:ba:f2:
c4:3a:81:af:29:b2:7f:22:78:64:cc:85:a6:36:57:8d:d7:63:
7a:6d:75:cd:52:30:05:46:ae:08:64:e6:07:0f:ea:dd:c8:16:
75:b6:75:44:6e:49:68:02:25:56:10:ff:1b:c8:f4:36:7c:9c:
67:dc:19:c8:db:c4:62:2e:03:00:44:ae:d9:93:36:90:ec:d9:
33:8a:da:7f:f6:26:a6:d4:3c:0a:96:86:6f:3b:e6:fb:f5:79:
46:c9:b9:8b:b2:48:0c:a7:a0:7c:08:c1:55:6a:7e:86:8b:14:
b2:be:3c:f5:b9:12:d3:36:5b:9f:b0:ca:ef:f3:23:95:d7:25:
de:3c:17:02:13:74:08:eb:1d:c9:96:78:23:92:d0:ae:60:44:
27:69:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:20 2026 by rpki-client