
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: hQNvmEMgpwiGZe0ZdoWDO7bgeMOWh70Zv7zaM3/eIQk=
Subject key identifier: BA:8C:43:C3:43:1F:DD:97:C3:A6:BD:D3:7B:07:EE:6C:E3:F2:38:D4
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01D6
Signing time: Thu 23 Jul 2026 05:04:07 +0000
Manifest this update: Thu 23 Jul 2026 05:04:06 +0000
Manifest next update: Thu 30 Jul 2026 05:04:06 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: h6/lUoyorhllQhLYQUw6yfkG3ydNRJd3g1GCYP5+eEM=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Jul 23 05:04:06 2026 GMT
Not After : Jul 30 05:04:06 2026 GMT
Subject: CN=6a61a0c7-33c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:f5:06:db:6e:8a:7a:e2:d9:62:ed:00:6e:
58:95:7d:a0:28:37:3a:36:c0:08:49:c1:41:0b:84:
b2:80:d1:f9:0c:63:cd:ce:71:58:73:21:fa:b1:36:
dd:9f:1f:ea:f7:8f:53:a0:75:fd:35:91:dd:5e:40:
7d:9c:85:9b:40:c2:04:c9:54:53:50:3a:bb:e0:70:
ab:ed:d6:1d:40:3b:6e:88:1e:71:ff:64:f2:c4:1e:
54:bf:06:b3:50:4c:d6:5f:22:8f:64:f3:b9:c0:a9:
2e:14:58:95:03:f4:f1:7a:67:09:f6:d9:24:5b:c6:
9f:23:1d:54:83:d2:82:03:c5:4c:5b:25:67:40:33:
f5:a5:a8:f1:40:66:f5:42:ef:99:8e:32:20:ab:77:
16:c7:91:1a:5b:d6:24:25:25:07:71:e4:4a:ec:fd:
18:42:48:e2:1f:94:d8:42:86:05:f0:3f:3d:77:b9:
f7:9d:bf:56:a7:1f:df:bf:09:06:3a:be:0a:1c:54:
1b:a9:a8:fa:fa:22:ad:63:88:84:39:f9:fc:27:c4:
ac:c3:0c:30:1c:ca:0a:ea:15:84:da:a3:31:d0:bb:
81:3a:83:ef:d9:eb:89:2d:2a:5c:7b:02:41:26:9c:
95:cd:18:42:9e:a9:65:3f:2e:8a:fe:a0:a5:4e:44:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:43:C3:43:1F:DD:97:C3:A6:BD:D3:7B:07:EE:6C:E3:F2:38:D4
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
eb:fb:d3:5e:29:ed:17:c8:ed:9d:fd:84:d8:24:29:bf:30:58:
82:0c:e7:b3:5a:a6:26:8c:85:d1:bc:57:2d:3b:48:6c:e8:1f:
76:36:56:da:ab:53:cd:a3:57:a5:11:96:9b:da:42:e8:a2:4a:
d1:3e:2d:a8:90:91:ae:11:cb:df:6f:66:4d:a7:ad:d4:6f:e4:
6d:b6:a8:7f:45:ed:30:1b:07:1c:ce:4e:28:7b:7b:3a:9c:de:
25:01:52:cb:55:b3:6b:d8:1f:dd:4e:53:59:61:56:bb:a9:ea:
43:79:2f:e9:2a:6e:6d:13:0d:40:ba:00:46:a0:70:da:66:f8:
4d:bb:84:4a:ea:76:75:55:2b:26:25:ac:78:1d:f0:85:53:f6:
aa:bd:c5:9a:c3:07:e2:d7:e7:d9:1c:71:d7:f8:20:e3:87:21:
37:75:22:b4:7c:a9:08:1b:3e:cd:56:1b:47:7a:b6:a9:4f:ab:
5e:30:0e:ae:17:38:13:38:98:2d:30:e8:55:75:8d:09:c7:97:
36:a8:8e:7e:9d:1b:6e:49:df:7f:3a:e0:69:42:1c:16:76:9d:
eb:fc:5b:57:df:f3:7d:01:7f:dc:00:66:c0:48:e0:b8:3a:37:
cc:b7:e4:d7:82:1d:cc:8c:bc:5a:47:57:b4:7d:a5:af:15:42:
d4:d7:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:04 2026 by rpki-client