
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File: PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier: islHBcV3ypibQBtWW9i8/VXegh0MouJfur0zHcq8pas=
Subject key identifier: 9D:08:98:48:32:39:97:14:07:F0:BC:15:C1:D7:CB:0A:75:24:40:E7
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial: 357B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number: 3569
Signing time: Wed 22 Jul 2026 14:26:48 +0000
Manifest this update: Wed 22 Jul 2026 14:26:47 +0000
Manifest next update: Wed 29 Jul 2026 14:26:47 +0000
Files and hashes: 1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: U07LZtPxBPJoT1ANN5FT4U6DlQrkG7VAmUb5MCCq4gw=)
2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: TYTool8z77Qm0uVA+1XtSBmD4W/ew0FLlQD2j6h3SPU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13691 (0x357b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Validity
Not Before: Jul 22 14:26:47 2026 GMT
Not After : Jul 29 14:26:47 2026 GMT
Subject: CN=6a60d327-37fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:18:85:eb:06:53:c3:e0:09:a6:be:56:c3:
a3:ef:bc:dc:58:62:a8:e3:97:08:55:01:df:40:cd:
d3:5d:c4:aa:85:32:4d:4c:67:e0:33:06:31:43:72:
a8:d1:a5:c7:0b:04:4b:04:48:c9:72:29:46:ee:10:
4a:2b:26:68:79:9a:31:17:80:fe:9c:d4:97:f7:ad:
89:e7:19:d5:5b:b2:b4:3d:dc:a5:a0:ab:b4:1d:ec:
e9:8b:78:6a:a2:f1:db:54:85:5e:41:80:31:9a:2f:
21:02:bf:af:ac:c3:97:2b:3a:54:66:2d:9f:00:cb:
4a:eb:49:be:9b:3f:ea:47:0e:6b:55:0c:53:93:1d:
e7:2f:8a:a6:1c:b8:8b:78:03:7f:e6:49:20:3c:96:
89:b9:c9:10:b4:81:53:9b:92:a1:b2:3a:12:36:89:
fe:bd:a4:85:a2:28:6a:f4:f9:ca:bd:ff:e9:fe:02:
35:bc:c6:3b:cd:99:d5:eb:2b:06:7d:20:d1:09:62:
02:5d:bc:df:13:2c:f2:fa:7d:5b:fa:be:3e:ac:8a:
6c:c9:c5:70:b7:a8:16:fe:dc:63:17:a0:c2:d7:6f:
cf:a6:1d:59:1a:98:00:61:cc:6d:ff:1e:e1:40:12:
9b:44:de:0f:86:d0:3a:06:25:c8:b9:80:c4:ab:6e:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:98:48:32:39:97:14:07:F0:BC:15:C1:D7:CB:0A:75:24:40:E7
X509v3 Authority Key Identifier:
keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:59:a4:18:b7:fe:86:1e:1f:5b:5c:eb:53:7b:0c:26:92:
02:c4:94:d7:f5:9a:f3:84:fa:80:82:4c:a3:ac:d5:54:21:e5:
0b:e5:5b:f1:ed:2a:6e:8d:05:6c:7c:c6:04:20:b8:5f:d5:5c:
60:55:94:82:7c:98:03:6a:3b:81:bc:77:e1:d5:49:dc:52:5c:
ae:90:da:f1:06:89:d9:c9:b4:2d:52:d6:09:d1:ef:c7:33:7d:
ec:b4:04:87:b5:64:54:d9:56:13:ed:45:d7:b5:df:98:0a:5c:
1b:c4:e5:27:b4:e4:66:c3:4d:d9:19:b4:7e:4e:d2:22:7e:51:
39:91:88:92:13:5c:e2:a1:5f:b1:67:27:a4:a9:50:72:8f:51:
6c:63:2f:dc:a4:6a:4d:09:03:06:27:db:20:fb:2b:2a:2e:32:
ef:e8:38:11:73:37:75:24:98:dc:d6:b1:f3:60:00:60:ff:a4:
eb:3e:7f:a1:74:96:b9:e1:3c:a8:4e:15:21:b5:cd:6f:fd:d7:
1d:71:99:01:b8:32:33:3e:1c:a3:65:c8:df:88:c9:a3:59:00:
ee:14:11:ec:fc:8d:19:2b:7d:c7:14:07:f4:16:4b:04:6d:79:
4d:b3:34:27:9a:cf:0c:22:a4:9d:bd:5c:b7:e4:d2:3a:07:e8:
32:1e:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:31 2026 by rpki-client