
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json)
Hash identifier: eSqUE9kU9Zni36VnOStBVmTN6fSU5efqaqscVZj/ZuQ=
Subject key identifier: 99:C2:77:DC:EB:FB:5A:66:1F:F3:5E:3F:E0:D3:CB:4E:D7:9F:41:20
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial: 03CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
Manifest number: 039D
Signing time: Wed 25 Mar 2026 00:34:42 +0000
Manifest this update: Wed 25 Mar 2026 00:34:41 +0000
Manifest next update: Wed 01 Apr 2026 00:34:41 +0000
Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: jRpC0hb1zQXdsNs83IwExHP8IZakBJv5ilYRMmkcntU=)
2: 912F8C1C121411F1990B85DE1A3D8C67.roa (hash: ZyxrvD1CpkWMbE5eR0t7TezFD7aaoLkH4gmwdZbQOk8=)
3: 2E8796D201D811F1B1EB0BE0366F56BC.roa (hash: rCc2LJ3SHarCzukGEVF7yiv4Jot6jNEMODiytpZTHFI=)
4: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (hash: 3yN6QJ5NEAiNK5nSIUM1YLhX4XGOfFHenHk9+gzckwA=)
5: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Validity
Not Before: Mar 25 00:34:41 2026 GMT
Not After : Apr 1 00:34:41 2026 GMT
Subject: CN=69c32da2-38de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:55:48:c6:b8:78:fe:97:75:14:e8:ba:62:
56:52:b7:25:26:69:73:a0:7b:c4:59:00:39:f6:8b:
67:a8:ba:ee:0a:08:82:b1:90:bc:1d:ce:81:24:88:
4c:96:dd:ca:e0:f0:31:18:3a:b7:ff:ed:9c:ba:37:
3e:ba:57:63:03:11:54:d2:b7:f0:bd:f0:da:76:3e:
b3:36:e8:9a:51:b7:65:82:1a:e6:d5:4c:0c:c2:d8:
90:77:b5:ef:2b:83:64:df:51:b6:d6:7d:7d:80:f6:
5f:80:42:b4:00:bb:a8:b5:2c:c6:7e:35:a3:cf:bc:
ae:d2:85:92:00:64:b1:64:cf:c5:e7:5f:c1:6b:f9:
5c:b1:46:2c:fa:e4:89:7d:6a:e6:b0:57:39:39:c3:
b6:9c:41:89:66:ed:5f:d0:d5:81:a0:b4:7c:82:d1:
6c:50:4e:99:d1:19:aa:09:07:f9:39:67:df:8e:9e:
f9:3a:73:eb:89:87:b2:ab:2a:56:23:22:dd:7b:51:
bb:a2:4b:49:cc:3d:d5:56:02:aa:8d:33:fe:0f:9b:
da:a1:85:ed:e7:06:f3:67:75:c4:3f:6e:5e:9b:77:
e4:29:1e:b6:ee:6b:96:02:42:72:84:6e:89:83:ff:
1e:99:9a:b6:24:ea:1d:4b:51:3e:db:eb:34:ba:c1:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:77:DC:EB:FB:5A:66:1F:F3:5E:3F:E0:D3:CB:4E:D7:9F:41:20
X509v3 Authority Key Identifier:
keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:80:22:b0:10:42:b7:69:0b:64:1c:8d:62:25:f6:14:04:
f5:f6:08:36:b2:58:97:f3:ca:d5:cc:65:df:dc:f6:34:da:1b:
12:54:f6:77:1e:75:f1:4d:df:dd:2a:e3:ef:e8:27:3f:fc:eb:
b8:91:ce:90:15:97:b0:92:b3:5e:60:54:05:e1:e6:5a:cb:e2:
8d:82:61:21:72:c7:09:6f:45:e7:60:9a:17:06:f3:39:2c:8d:
ee:f9:33:de:f8:b7:d7:0c:14:e6:0f:4b:e0:93:07:c8:3b:5b:
81:bf:53:86:89:b7:d5:ff:05:a9:ac:e8:41:d6:e0:7d:8f:87:
54:53:ee:b3:35:09:3d:53:76:c3:f2:f4:0e:e8:a5:e4:4a:ce:
54:0b:e8:87:80:0d:9c:78:52:50:f6:ae:63:fa:15:3a:84:62:
b3:a2:fb:fc:9f:41:b4:c4:aa:75:86:0c:36:55:bd:60:e8:28:
6e:51:5c:0f:6d:3b:fa:4d:c2:e5:26:9e:cd:b6:a7:14:59:7e:
68:0c:28:08:f3:f0:55:d7:ca:79:d1:74:ac:c3:ec:2a:81:e7:
b8:2a:8e:77:fa:80:ea:e5:7f:06:d6:94:91:32:cf:25:7a:da:
23:0c:3a:cd:9b:e8:56:85:b3:7d:be:23:97:36:aa:0a:1f:3c:
f6:3a:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:57 2026 by rpki-client