
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier: 4cIRGBcIXxlpmE6gbFAvSbjTegmH1ujCKMpbOOb6unc=
Subject key identifier: C5:CF:83:A9:64:78:7A:95:0E:EA:74:3A:0E:F6:0D:47:87:A9:8B:B0
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 353E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number: 352C
Signing time: Tue 24 Mar 2026 14:25:52 +0000
Manifest this update: Tue 24 Mar 2026 14:25:52 +0000
Manifest next update: Tue 31 Mar 2026 14:25:52 +0000
Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: ntT1BpU1im7Mie95RLnFeQAxbY+Ne3+Vi4eEW4kocow=)
2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: TYTool8z77Qm0uVA+1XtSBmD4W/ew0FLlQD2j6h3SPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13630 (0x353e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Validity
Not Before: Mar 24 14:25:52 2026 GMT
Not After : Mar 31 14:25:52 2026 GMT
Subject: CN=69c29ef0-03e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:d4:e7:28:4e:6a:ef:00:f6:d7:9a:df:bb:
39:af:84:ac:26:5a:2e:38:a1:58:50:fd:68:f2:74:
db:d3:4f:e0:2a:8b:06:78:1b:4d:2c:6a:bd:6b:77:
ee:82:71:82:d3:81:48:3f:ea:0e:07:e4:48:a4:30:
7c:b2:d4:51:00:e2:0c:87:87:4d:e0:b5:dd:50:90:
8d:4e:a6:38:06:f7:39:84:47:13:ee:9f:9d:49:d9:
7b:fa:9c:5f:25:fd:17:6d:fb:22:fc:e5:53:ac:00:
6f:91:a5:d2:dc:94:9c:ae:62:22:78:db:46:0a:cb:
d1:d9:bb:10:98:57:6c:ca:ac:be:c8:51:36:28:99:
ea:4f:ed:04:6c:65:25:71:f7:38:c7:3e:cf:1d:d6:
b5:98:84:23:e8:dc:f2:66:08:0b:1f:6e:23:ee:9d:
2e:70:2c:1d:0a:bf:1b:ae:63:32:c7:2d:38:11:d4:
d8:30:cb:d5:ca:ac:ab:d6:fd:b1:23:37:35:5f:58:
4d:34:75:31:97:5b:d4:7a:41:50:35:a5:27:f2:a2:
96:6e:d1:8e:59:e1:e4:7c:92:17:c1:4e:fe:28:e4:
fe:a2:8f:72:32:5d:21:6f:31:f1:63:ce:69:b2:e0:
79:ca:e6:35:e8:80:94:42:e3:4b:94:e9:01:19:fa:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:83:A9:64:78:7A:95:0E:EA:74:3A:0E:F6:0D:47:87:A9:8B:B0
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:80:a9:a0:af:66:de:81:8a:16:68:dd:61:e0:4b:d5:7b:ad:
06:0b:72:6d:eb:13:7c:7f:cf:1c:c8:6c:09:35:69:9e:30:24:
45:e4:cf:fd:5a:4e:a5:91:b9:ce:af:ba:b1:3e:0d:e7:fa:8c:
1d:be:f2:8c:13:1c:9d:27:cb:18:27:47:f0:c4:e6:74:c1:ae:
2c:91:5c:2c:da:02:50:f4:8c:7b:08:4d:62:68:cf:21:96:74:
96:eb:46:15:23:01:4c:b3:c1:47:af:99:12:f1:c4:3d:04:d5:
a6:ba:fb:5c:97:90:d8:36:6d:48:7d:c0:e3:46:a1:4e:1e:d9:
b9:ab:ac:a8:74:76:83:d8:9a:8d:25:db:2e:5b:93:7e:1c:3e:
cb:2e:43:6c:e9:ac:cb:9d:0f:d9:10:c6:8a:72:3c:44:97:c2:
0e:42:6f:27:b1:31:c0:ad:a1:40:0c:6d:c6:4f:41:61:ea:9c:
19:85:a5:14:bf:7c:0e:51:3d:fd:16:f3:db:57:12:fc:62:86:
42:4f:39:7f:13:0d:b4:61:dd:03:de:60:cf:ac:98:5a:28:f7:
fe:7e:69:f9:e5:73:2f:a8:90:1a:be:e6:ed:06:08:c7:ba:2c:
4a:38:00:8c:fb:78:88:28:e9:26:a4:af:e7:09:2a:a5:06:a6:
23:8a:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:13 2026 by rpki-client