
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: pWKo9QTRegHrL4Up0uscXmS94FCak3BqMpqwZk2dnJU=
Subject key identifier: 12:D2:00:44:C2:13:0D:02:EE:3E:6E:CA:9D:DB:A5:58:9B:AB:F0:7B
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 01F8
Signing time: Sun 27 Sep 2026 03:44:33 +0000
Manifest this update: Sun 27 Sep 2026 03:44:33 +0000
Manifest next update: Sun 04 Oct 2026 03:44:33 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: 1HsyV7oaiN8+OAjssec/802fJZd4g5tOVNEzbj6q4Ps=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: RLvkJQC71Slj35G4jfs9BmOdtDEiBC1wT0j0eVVXx8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Sep 27 03:44:33 2026 GMT
Not After : Oct 4 03:44:33 2026 GMT
Subject: CN=6ab89121-3179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:0e:e5:8e:b2:a9:9b:67:a8:74:2c:44:bf:
61:a3:ee:5f:9a:a1:00:83:92:03:fc:e8:8c:e3:10:
92:70:35:49:74:28:01:d2:1f:eb:01:c3:ad:6a:2b:
15:9d:3f:4b:b5:7c:74:d0:52:0c:dc:01:57:a2:03:
9b:da:b9:5d:d0:9e:a8:58:b2:6f:fa:f8:7c:60:60:
86:6c:5a:c0:8c:ea:df:19:04:6c:19:7b:4d:f2:c8:
aa:27:8b:b2:49:8f:41:fe:1a:c5:59:30:7f:34:6c:
0d:be:00:c9:3f:97:07:09:83:c5:0e:8e:74:11:25:
3b:64:50:82:9f:49:f0:96:0c:29:e5:91:d4:1d:aa:
b6:e8:52:8a:75:1a:76:f1:39:76:9c:9f:e2:0c:da:
a4:64:fb:ca:1a:8a:3a:09:7d:a2:45:52:c2:b3:24:
d9:49:03:2f:f6:a2:36:05:04:0e:10:59:e5:49:5e:
ad:a5:40:69:06:0a:06:ca:95:3e:b4:bd:a4:21:12:
b3:00:4b:69:02:d2:83:87:cc:fd:e1:46:f6:91:cc:
b8:c4:93:91:3d:17:bf:c4:c6:9d:91:17:a3:7f:a9:
27:10:c1:2d:34:f7:de:b5:a6:b4:4d:58:31:f0:0a:
72:be:55:ae:fb:d6:9b:95:dd:48:00:83:0a:e1:00:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:00:44:C2:13:0D:02:EE:3E:6E:CA:9D:DB:A5:58:9B:AB:F0:7B
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:2f:70:61:a6:2d:00:76:cc:4b:83:6f:0c:ff:a0:09:7f:
cf:8a:09:65:85:5e:51:72:3c:5d:a3:b2:cc:cf:fb:0f:a6:ce:
a3:72:45:a2:ae:ae:1b:08:66:b3:f4:27:9b:c1:13:f3:78:dc:
75:1f:81:f4:67:c6:b8:2f:06:2d:80:eb:c6:2e:eb:0f:55:9d:
c8:37:f1:51:db:20:0e:11:c3:ef:b4:cd:c7:c0:c9:cf:d5:28:
3b:98:a0:d4:1e:a8:88:b5:cb:67:04:60:b3:0a:9e:46:56:14:
81:eb:5b:ba:07:c3:ba:2e:44:cb:e2:cc:61:6c:df:29:4b:f8:
75:72:25:a7:27:1d:87:e9:2d:94:2c:60:69:e7:d1:c7:95:97:
c8:fc:5a:d9:4d:21:a3:29:ad:f6:80:a8:c4:95:09:03:d7:aa:
f2:71:b0:1a:83:98:8a:94:90:c8:9d:75:99:24:f2:81:46:22:
16:33:e9:9d:82:95:f0:d6:4f:b4:ce:9c:93:d8:89:34:45:b7:
de:f7:da:b8:f4:cb:75:9d:47:17:b5:8e:ec:0e:c3:22:b3:b0:
d6:28:bf:41:40:4f:99:23:e9:19:17:6e:0c:61:31:fb:74:5c:
7e:45:2e:ef:dc:60:07:5d:02:6b:29:1c:ef:b0:4e:a5:e1:94:
39:a5:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:43:26 2026 by rpki-client