
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: gXTR3UUN7Pn2OQYWyh+e9Ji+tQ8jfWbMwagpBtstRNI=
Subject key identifier: C4:BF:15:27:E0:45:C8:9D:71:C2:8B:AF:EC:10:B2:CE:49:7A:5A:C7
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 03AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 03A4
Signing time: Wed 23 Sep 2026 00:16:21 +0000
Manifest this update: Wed 23 Sep 2026 00:16:20 +0000
Manifest next update: Wed 30 Sep 2026 00:16:20 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: IkLPnQkagCd0Cu0jY/pWyV2j7C2pFc/OQd52pmpPp5U=)
2: 85B9F9CC8A7211F193E6E41D4211F970.roa (hash: K8/sp/CfflUVzDThJpOZ6EABm99x23tLUM/3USoDOpY=)
3: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: oufaNPGZbxnCNaqcpVINAiOM1TZFQ8M5GFYVVdKWLwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942 (0x3ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Sep 23 00:16:20 2026 GMT
Not After : Sep 30 00:16:20 2026 GMT
Subject: CN=6ab31a54-964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:cd:81:62:9b:44:6d:d1:89:fc:3d:7e:cb:
70:35:a9:75:46:b3:52:3c:cb:ae:9b:60:20:68:4b:
35:1d:eb:cd:0e:8d:b6:0a:d7:d0:83:cd:e7:9d:34:
11:6b:cb:7d:bc:13:21:e7:13:ff:54:9b:9c:7f:ca:
4a:f5:6d:0a:2b:8f:b4:23:a8:1b:5b:88:5c:b9:8d:
9b:fb:f4:bd:52:d8:97:ad:39:21:a5:3f:1d:47:0b:
fc:f1:a4:83:5e:9c:0f:30:24:9b:07:42:cd:45:2f:
f3:f4:c1:80:45:fe:ac:23:e8:91:5c:f9:97:b4:ba:
83:f5:8c:20:ac:8f:5b:e5:fa:08:26:84:9f:02:35:
e6:8b:22:f1:3b:b3:3e:47:df:cb:df:d7:9e:fc:20:
d0:e9:4f:38:ce:05:0b:af:a5:b1:88:0d:3e:dd:d9:
bc:b3:6d:da:b8:1f:34:72:ab:cc:b5:f4:c0:50:95:
b6:20:d8:5c:10:48:80:04:25:1a:0c:43:9f:78:11:
17:5f:40:3d:73:3e:42:0c:4b:cf:d9:a9:d7:1a:29:
ee:4e:79:3e:13:c7:ba:30:40:03:32:81:4f:e0:5f:
18:97:35:c6:49:07:73:63:9b:bc:1b:d1:89:78:f0:
be:30:59:5c:a9:18:b2:80:51:45:20:01:6a:87:00:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:15:27:E0:45:C8:9D:71:C2:8B:AF:EC:10:B2:CE:49:7A:5A:C7
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:3d:55:b7:7c:bc:1a:c2:db:a4:0d:4f:26:35:b6:ec:0d:
89:ea:79:f0:81:54:ac:fc:a8:1f:1a:6e:c5:57:18:34:9e:24:
f3:64:36:74:0f:6e:fe:5b:5f:8a:c0:e4:24:7c:f4:65:f0:d7:
47:4d:33:77:e6:ea:88:23:54:e1:11:10:bb:a1:26:a5:53:ff:
6f:ac:dc:e3:df:9d:25:d6:46:d7:ba:eb:f7:8e:09:6e:86:ef:
c0:e3:e1:d2:c2:14:a2:2a:bb:f1:67:b8:9a:5c:fe:d9:69:9d:
7b:11:24:32:8a:a8:87:fd:72:ad:72:fb:1b:fe:fa:fb:af:7c:
a6:29:27:27:1b:e7:83:2d:18:f1:a0:89:76:f7:ff:2c:8c:5e:
02:c5:e8:15:4d:fc:86:80:c4:bd:36:fe:b4:f6:6a:53:b6:2d:
f3:6a:e0:6e:af:83:c8:0f:1f:86:73:26:f1:00:eb:d2:da:61:
27:71:5c:9b:13:1b:1d:5b:7d:26:50:8a:21:75:56:0b:92:b5:
6e:8e:e5:47:3f:0f:85:d0:31:6d:f5:af:d5:ec:ab:46:6a:9a:
01:6c:90:d2:28:c6:49:48:4f:46:62:c3:8f:5f:1a:1b:58:6f:
ba:b3:ce:ff:51:5c:03:ce:62:8c:d2:4d:b5:22:3e:b0:2f:05:
d0:60:0d:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4
NTJDRjA1QkMwHhcNMjYwOTIzMDAxNjIwWhcNMjYwOTMwMDAxNjIwWjAYMRYwFAYD
VQQDEw02YWIzMWE1NC05NjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTXNgWKbRG3Rifw9fstwNal1RrNSPMuum2AgaEs1HevNDo22CtfQg83nnTQR
a8t9vBMh5xP/VJucf8pK9W0KK4+0I6gbW4hcuY2b+/S9UtiXrTkhpT8dRwv88aSD
XpwPMCSbB0LNRS/z9MGARf6sI+iRXPmXtLqD9YwgrI9b5foIJoSfAjXmiyLxO7M+
R9/L39ee/CDQ6U84zgULr6WxiA0+3dm8s23auB80cqvMtfTAUJW2INhcEEiABCUa
DEOfeBEXX0A9cz5CDEvP2anXGinuTnk+E8e6MEADMoFP4F8YlzXGSQdzY5u8G9GJ
ePC+MFlcqRiygFFFIAFqhwAjpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMS/FSfg
RcidccKLr+wQss5JelrHMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC
ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ
SDlXeGU4M3dYWi1GTFBCYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn6M9Vbd8vBrC26QNTyY1tuwNiep58IFUrPyoHxpuxVcYNJ4k82Q2dA9u/ltf
isDkJHz0ZfDXR00zd+bqiCNU4REQu6EmpVP/b6zc49+dJdZG17rr944JbobvwOPh
0sIUoiq78We4mlz+2WmdexEkMoqoh/1yrXL7G/76+698piknJxvngy0Y8aCJdvf/
LIxeAsXoFU38hoDEvTb+tPZqU7Yt82rgbq+DyA8fhnMm8QDr0tphJ3FcmxMbHVt9
JlCKIXVWC5K1bo7lRz8PhdAxbfWv1eyrRmqaAWyQ0ijGSUhPRmLDj18aG1hvurPO
/1FcA85ijNJNtSI+sC8F0GANCQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:35:04 2026 by rpki-client